-
Notifications
You must be signed in to change notification settings - Fork 35
/
Copy pathadd-signatures-on-the-client-by-using-JS-and-upload-data.yml
399 lines (398 loc) · 10.3 KB
/
add-signatures-on-the-client-by-using-JS-and-upload-data.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
ROSTemplateFormatVersion: '2015-09-01'
Description:
zh-cn: 从服务端获取sts token，并使用sts token生成签名，最后使用此签名上传文件到OSS
en: Obtain the STS token from the server, use the STS token to generate a signature, and finally upload the file to OSS using this signature.
Parameters:
OSSBucketName:
Type: String
Label:
en: NewBucketName
zh-cn: 新建存储空间名称
Description:
en: Bucket names must be globally unique within the scope of OSS. The length
is 3~63 characters. Must start and end with a lowercase English letter or
number, and can contain lowercase English letters, numbers, and dashes (-).
zh-cn: Bucket 名称在 OSS 范围内必须全局唯一。长度为3~63个字符。必须以小写英文字母或数字开头和结尾，可包含小写英文字母、数字和短划线（-）。
AssociationProperty: AutoCompleteInput
AssociationPropertyMetadata:
Length: 6
Prefix: test-bucketname-
CharacterClasses:
- Class: lowercase
min: 1
AllowedPattern: ^[a-z0-9][a-z0-9-]{1,61}[a-z0-9]$
ZoneId:
Type: String
AssociationProperty: ALIYUN::ECS::Instance::ZoneId
AssociationPropertyMetadata:
AutoSelectFirst: true
Label:
en: Availability Zone
zh-cn: 可用区
InstanceType:
Type: String
AssociationProperty: ALIYUN::ECS::Instance::InstanceType
AssociationPropertyMetadata:
InstanceChargeType: PostPaid
SystemDiskCategory: cloud_essd
ZoneId: ${ZoneId}
Label:
en: Instance Type
zh-cn: 实例规格
Password:
NoEcho: true
Type: String
Description:
en: Server login password, Length 8-30, must contain three(Capital letters, lowercase letters, numbers, ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ Special symbol in)
zh-cn: 服务器登录密码，长度8-30，必须包含三项（大写字母、小写字母、数字、 ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ 中的特殊符号）
Label:
en: ECS Instance Password
zh-cn: ECS实例密码
ConstraintDescription:
en: Length 8-30, must contain three(Capital letters, lowercase letters, numbers, ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ Special symbol in)
zh-cn: 长度8-30，必须包含三项（大写字母、小写字母、数字、 ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ 中的特殊符号）
AssociationProperty: ALIYUN::ECS::Instance::Password
Resources:
UploadUser:
Type: ALIYUN::RAM::User
Properties:
UserName:
Fn::Sub: ${OSSBucketName}-${ALIYUN::StackId}-user
Policies:
- PolicyName:
Fn::Join:
- '-'
- - StackId
- Ref: ALIYUN::StackId
PolicyDocument:
Version: '1'
Statement:
- Action:
- sts:AssumeRole
Resource:
- '*'
Effect: Allow
UploadRole:
Type: ALIYUN::RAM::Role
Properties:
Description: UploadRole
AssumeRolePolicyDocument:
Version: '1'
Statement:
- Action: sts:AssumeRole
Effect: Allow
Principal:
RAM:
- Fn::Sub: acs:ram::${ALIYUN::TenantId}:root
MaxSessionDuration: 3600
Policies:
- PolicyName:
Fn::Join:
- '-'
- - StackId2
- Ref: ALIYUN::StackId
PolicyDocument:
Version: '1'
Statement:
- Action:
- oss:PutObject
Resource:
- Fn::Sub: acs:oss:*:*:${OSSBucketName}/uploads/*
Effect: Allow
DeletionForce: true
RoleName:
Fn::Sub: ${OSSBucketName}-${ALIYUN::StackId}-role
EcsSecurityGroup:
Type: ALIYUN::ECS::SecurityGroup
Properties:
SecurityGroupIngress:
- Priority: 1
PortRange: 80/80
NicType: internet
SourceCidrIp: 0.0.0.0/0
IpProtocol: tcp
VpcId:
Ref: EcsVpc
SecurityGroupName:
Fn::Sub: ${OSSBucketName}-${ALIYUN::StackId}-sg
AccessKey:
Type: ALIYUN::RAM::AccessKey
Properties:
UserName:
Fn::GetAtt:
- UploadUser
- UserName
EcsVSwitch:
Type: ALIYUN::ECS::VSwitch
Properties:
VSwitchName:
Fn::Sub: ${OSSBucketName}-${ALIYUN::StackId}-vsw
VpcId:
Ref: EcsVpc
CidrBlock: 192.168.1.0/24
ZoneId:
Ref: ZoneId
UploadService:
Type: ALIYUN::ECS::RunCommand
Properties:
CommandContent:
Fn::Sub:
- |
#!/bin/bash
# 这里配置安装脚本
wget https://help-static-aliyun-doc.aliyuncs.com/file-manage-files/zh-CN/20240628/iylpyv/oss-upload-sts.zip
yum install unzip -y
unzip -o oss-upload-sts.zip
pip3 install Flask
pip3 install attr
pip3 install yarl
pip3 install async_timeout
pip3 install idna_ssl
pip3 install attrs
pip3 install aiosignal
pip3 install charset_normalizer
pip3 install alibabacloud_tea_openapi
pip3 install alibabacloud_sts20150401
pip3 install alibabacloud_credentials
export ALIBABA_CLOUD_ACCESS_KEY_ID=${AccessKey.AccessKeyId}
export ALIBABA_CLOUD_ACCESS_KEY_SECRET=${AccessKey.AccessKeySecret}
export YOUR_REGION_ID=${ALIYUN::Region}
export YOUR_ROLE_ARN=${UploadRole.Arn}
export YOUR_BUCKET=${OSSBucketName}
export YOUR_ROLE_SESSION_NAME=oss-upload-sts
export YOUR_OSS_REGION="oss-${ALIYUN::Region}"
sed -i.bak -e 's/bucket: "<YOUR_BUCKET>"/bucket: "{{ bucket }}"/' -e 's/region: "<YOUR_REGION>"/region: "{{ region }}"/' templates/index.html
sed -i "s/return render_template('index.html')/return render_template('index.html', bucket=os.environ.get('YOUR_BUCKET'), region=os.environ.get('YOUR_OSS_REGION'))/" main.py
nohup python3 main.py > output.log 2>&1 &
- OSSBucketName:
Ref: OSSBucketName
Type: RunShellScript
Sync: true
InstanceIds:
- Ref: EcsInstance
Timeout: 3000
OSSBucket:
Type: ALIYUN::OSS::Bucket
Properties:
BucketName:
Ref: OSSBucketName
CORSConfiguration:
CORSRule:
- AllowedHeader:
- '*'
AllowedOrigin:
- '*'
AllowedMethod:
- PUT
MaxAgeSeconds: 0
DeletionForce: true
EcsInstance:
Type: ALIYUN::ECS::Instance
Properties:
UserData:
Ref: OSSBucketName
SystemDiskCategory: cloud_essd
VpcId:
Ref: EcsVpc
SecurityGroupId:
Ref: EcsSecurityGroup
HostName: EcsInstance
SystemDiskSize: '40'
ImageId: aliyun_3_9_x64_20G_alibase_20231219.vhd
AllocatePublicIP: 'true'
VSwitchId:
Ref: EcsVSwitch
Password:
Ref: Password
InstanceType:
Ref: InstanceType
EcsVpc:
Type: ALIYUN::ECS::VPC
Properties:
VpcName:
Fn::Sub: ${OSSBucketName}-${ALIYUN::StackId}-vpc
CidrBlock: 192.168.0.0/16
Metadata:
ALIYUN::ROS::Interface:
ParameterGroups:
- Parameters:
- OSSBucketName
- ZoneId
- InstanceType
- Password
TemplateTags:
- acs:document-help:oss:客户端签名直传
ALIYUN::ROS::Composer:
7f2624a6:
Rect:
- 735
- 518
- -14
- 97
- 1
- 0
ResT: Composer::ROSParameter::AlibabaCloud
a67e5b91:
Parent: 7f2624a6
Rect:
- 691
- 439
- 2
- 148
- 2
- 0
ResT: Composer::ROSParameter::Region
855e24e5:
Res:
- UploadUser
Parent: a67e5b91
Rect:
- 40
- 40
- 612
- 478
- 3
- 0
7980a4ee:
Res:
- OSSBucket
Parent: a67e5b91
Rect:
- 40
- 40
- 612
- 198
- 3
- 0
0ac6554f:
Res:
- EcsVpc
Parent: a67e5b91
Rect:
- 480
- 340
- 102
- 198
- 3
- 0
224ec341:
Res:
- UploadService
Parent: a67e5b91
Rect:
- 40
- 40
- 31
- 391
- 3
- 0
2cd4e236:
Res:
- AccessKey
Parent: a67e5b91
Rect:
- 40
- 40
- 612
- 391
- 3
- 0
21ec91a2:
Res:
- UploadRole
Parent: a67e5b91
Rect:
- 40
- 40
- 612
- 298
- 3
- 0
b5d430e2:
Res:
- ZoneId
Parent: 0ac6554f
Rect:
- 440
- 270
- 122
- 248
- 4
- 0
ResT: Composer::ROSParameter::Zone
122b7e57:
Res:
- EcsVSwitch
Parent: b5d430e2
Rect:
- 400
- 200
- 142
- 298
- 5
- 0
120dff63:
Parent: a67e5b91
Edge:
- 2cd4e236
- 855e24e5
Line: 0:0:0:gray:0
'77e93004':
Parent: a67e5b91
Edge:
- 224ec341
- 7f429b1e
Line: 0:0:0:gray:0
35c82fb9:
Res:
- EcsSecurityGroup
Parent: 0ac6554f
Rect:
- 252
- 126
- 216
- 348
- 12
- 0
7f429b1e:
Res:
- EcsInstance
Parent: 122b7e57
Rect:
- 40
- 40
- 322
- 391
- 13
- 0
Layer:
- 35c82fb9
Outputs:
Console.Url:
Label:
zh-cn: Url
en: Url
Description:
zh-cn: 客户端测试页面。可访问该链接测试文件上传。
en: Client html page.
Value:
Fn::Sub:
- http://${IP}
- IP:
Fn::GetAtt:
- EcsInstance
- PublicIp
Console.Bucket:
Label:
zh-cn: Bucket
en: Bucket
Description:
zh-cn: 文件上传到的bucket控制台页面。可访问该链接查看上传情况。
en: Bucket console page, view upload status.
Value:
Fn::Sub:
- https://oss.console.aliyun.com/bucket/oss-${Region}/${OSSBucketName}
- Region:
Ref: ALIYUN::Region
OSSBucketName:
Ref: OSSBucketName