feat: [KAN-102] user_profile & user_address

Author: lianjin

.github/ci/docker-compose.yml

@@ -10,8 +10,26 @@ services:
     networks:
       ci-net:
         aliases:
-          - mysql-container   # 别名，Go 通过这个名字连接 MySQL
+          - mysql-container   
 
+  kafka:
+    image: confluentinc/cp-kafka:7.5.0
+    container_name: kafka-container
+    ports:
+      - "9092:9092"
+    environment:
+      CLUSTER_ID: ohAxBaI7QUuIq7lQBYzRYA  
+    command: >
+      bash -c "
+        if [ ! -f /var/lib/kafka/data/meta.properties ]; then
+          kafka-storage format -t $$CLUSTER_ID -c /etc/kafka/kraft/server.properties;
+        fi &&
+        kafka-server-start /etc/kafka/kraft/server.properties
+      "
+    networks: 
+      ci-net:
+        aliases:
+          - kafka-container   
   ceramicraft-user-mservice:
     build:
       context: ../../server
@@ -24,11 +42,12 @@ services:
       - JWT_SECRET=${JWT_SECRET}
     depends_on:
       - mysql
+      - kafka
     networks:
       - ci-net
     ports:
       - "8080:8080"   # 只给宿主机（ZAP）用
-    command: ["sh", "-c", "apt-get update && apt-get install -y netcat-openbsd && chmod +x /app/wait-for.sh && ./wait-for.sh mysql-container 3306 ./main"]
+    command: ["sh", "-c", "apk add --no-cache netcat-openbsd && chmod +x /app/wait-for.sh && ./wait-for.sh mysql-container 3306 ./main"]
     volumes:
       - ./wait-for.sh:/app/wait-for.sh   # CI 专用配置
     user: root

.github/workflows/deploy.yml

@@ -37,7 +37,7 @@ jobs:
           name: env-file
           path: env-file
   build:
-    if: ${{ github.event.inputs.command == 'deploy' }} # ← 仅在 deploy 时构建
+    if: ${{ github.event.inputs.command == 'deploy' }} 
     runs-on: ubuntu-latest
     env:
       DOCKER_HUB_USERNAME: ${{ secrets.DOCKER_HUB_USERNAME }}

.github/workflows/zap.yml

@@ -42,11 +42,12 @@ jobs:
         - name: Build and run Docker Compose
           run: |
             docker compose -f .github/ci/docker-compose.yml --env-file env-file up --build -d
-            timeout 180 bash -c 'until [ "$(docker compose -f .github/ci/docker-compose.yml ps ceramicraft-user-mservice --format json | jq -r .Health)" = "healthy" ]; do sleep 2; done'
+            timeout 180 bash -c 'until curl -f http://localhost:8080/user-ms/v1/ping;  do sleep 2; done'
         - name: Check Docker Compose Logs
-          if: failure()
+          if: always()
           run: |
-            docker compose -f .github/ci/docker-compose.yml logs
+            docker compose -f .github/ci/docker-compose.yml ps ceramicraft-user-mservice
+            docker compose -f .github/ci/docker-compose.yml logs ceramicraft-user-mservice
         - name: Run ZAP Scan
           uses: zaproxy/action-full-scan@75ee1686750ab1511a73b26b77a2aedd295053ed
           with:

server/Dockerfile

@@ -1,5 +1,5 @@
 # Use the official Go image with version 1.24
-FROM golang:1.24.0
+FROM golang:1.24.0-alpine AS builder 
 
 # Set the working directory inside the container
 WORKDIR /app
@@ -14,10 +14,12 @@ RUN go mod tidy
 COPY . .
 
 # Build the Go application
-RUN go build -ldflags="-s -w" -o main main.go
+RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 \
+    go build -a -ldflags="-w -s" -o main main.go && \
+    go clean -cache -modcache
 
 # Create a non-root user and set permissions
-RUN useradd -m appuser && \
+RUN adduser -D -h /home/appuser appuser && \
     mkdir -p logs && \
     chown -R appuser:appuser config/ && \
     chown -R appuser:appuser logs/ && \

server/config/config.go

@@ -16,6 +16,7 @@ type Conf struct {
 	HttpConfig  *HttpConfig  `mapstructure:"http"`
 	MySQLConfig *MySQL       `mapstructure:"mysql"`
 	EmailConfig *EmailConfig `mapstructure:"email"`
+	KafkaConfig *KafkaConfig `mapstructure:"kafka"`
 }
 
 type EmailConfig struct {
@@ -49,6 +50,16 @@ type MySQL struct {
 	DBName   string `mapstructure:"dbName"`
 }
 
+type KafkaConfig struct {
+	Brokers            []string `mapstructure:"brokers"`
+	UserActivatedTopic string   `mapstructure:"user_activated_topic"`
+	MaxBytes           int      `mapstructure:"max_bytes"`
+	Acks               int      `mapstructure:"acks"`
+	Retries            int      `mapstructure:"retries"`
+	BatchSize          int      `mapstructure:"batch_size"`
+	BatchTimeoutMillis int      `mapstructure:"batch_timeout_millis"`
+}
+
 func Init() {
 	workDir, _ := os.Getwd()
 	viper.SetConfigName("config")