custom-image-ecs-datadisk.yml

ROSTemplateFormatVersion: '2015-09-01'
Description:
  zh-cn: 单实例自定义镜像部署，含数据盘与可选公网IP，支持新建或指定VPC配置。
  en: Deployment of single-instance custom images, inclusive of data disks and optional
    public IP addresses, with support for creating or specifying VPC configurations.
Conditions:
  CreateVpcConditions:
    Fn::Equals:
    - true
    - Ref: WhetherCreateVpc
  IfAllocatePublicIP:
    Fn::Equals:
    - Ref: AllocatePublicIP
    - true
Parameters:
  PayType:
    Type: String
    Label:
      en: ECS Instance Charge Type
      zh-cn: 付费类型
    AssociationProperty: ChargeType
    AssociationPropertyMetadata:
      LocaleKey: InstanceChargeType
    Default: PostPaid
    AllowedValues:
      - PostPaid
      - PrePaid
  PayPeriodUnit:
    Type: String
    Label:
      en: Pay Period Unit
      zh-cn: 购买资源时长周期
    AssociationProperty: PayPeriodUnit
    AssociationPropertyMetadata:
      Visible:
        Condition:
          Fn::Not:
            Fn::Equals:
              - ${PayType}
              - PostPaid
    Default: Month
    AllowedValues:
      - Month
      - Year
  PayPeriod:
    Type: Number
    Label:
      en: Period
      zh-cn: 购买资源时长
    AssociationProperty: PayPeriod
    AssociationPropertyMetadata:
      Visible:
        Condition:
          Fn::Not:
            Fn::Equals:
              - ${PayType}
              - PostPaid
    Default: 1
    AllowedValues:
      - 1
      - 2
      - 3
      - 4
      - 5
      - 6
      - 7
      - 8
      - 9
  EcsInstanceType:
    Type: String
    Label:
      en: Instance Type
      zh-cn: 实例类型
    AssociationProperty: ALIYUN::ECS::Instance::InstanceType
    AssociationPropertyMetadata:
      ZoneId: ${ZoneId}
      InstanceChargeType: ${InstanceChargeType}
  ZoneId:
    Type: String
    Label:
      en: Availability Zone
      zh-cn: 可用区
    AssociationProperty: ALIYUN::ECS::Instance::ZoneId
  WhetherCreateVpc:
    Type: Boolean
    Label:
      en: WhetherCreateVpc
      zh-cn: 是否新建VPC
    Default: false
  VpcCidrBlock:
    Type: String
    Label:
      en: VPC CIDR IPv4 Block
      zh-cn: 专有网络IPv4网段
    Description:
      zh-cn: VPC的ip地址段范围，<br>您可以使用以下的ip地址段或其子网:<br><font color='green'>[10.0.0.0/8]</font><br><font
        color='green'>[172.16.0.0/12]</font><br><font color='green'>[192.168.0.0/16]</font>
      en: 'The ip address range of the VPC in the CidrBlock form; <br>You can use
        the following ip address ranges and their subnets: <br><font color=''green''>[10.0.0.0/8]</font><br><font
        color=''green''>[172.16.0.0/12]</font><br><font color=''green''>[192.168.0.0/16]</font>'
    AssociationProperty: ALIYUN::VPC::VPC::CidrBlock
    AssociationPropertyMetadata:
      Visible:
        Condition:
          Fn::Equals:
          - ${WhetherCreateVpc}
          - true
    Default: 192.168.0.0/16
  VSwitchCidrBlock:
    Type: String
    Label:
      en: VSwitch CIDR Block
      zh-cn: 交换机子网网段
    Description:
      zh-cn: 必须属于VPC的子网段。
      en: Must belong to the subnet segment of VPC.
    AssociationProperty: ALIYUN::VPC::VSwitch::CidrBlock
    AssociationPropertyMetadata:
      VpcCidrBlock: VpcCidrBlock
      Visible:
        Condition:
          Fn::Equals:
          - ${WhetherCreateVpc}
          - true
    Default: 192.168.1.0/24
  VpcId:
    Type: String
    Label:
      en: VPC ID
      zh-cn: 专有网络VPC实例ID
    AssociationProperty: ALIYUN::ECS::VPC::VPCId
    AssociationPropertyMetadata:
      Visible:
        Condition:
          Fn::Equals:
          - ${WhetherCreateVpc}
          - false
    Default: ''
  VSwitchId:
    Type: String
    Label:
      en: VSwitch ID
      zh-cn: 交换机实例ID
    AssociationProperty: ALIYUN::ECS::VSwitch::VSwitchId
    AssociationPropertyMetadata:
      VpcId: ${VpcId}
      ZoneId: ${ZoneId}
      Visible:
        Condition:
          Fn::Equals:
          - ${WhetherCreateVpc}
          - false
    Default: ''
  InstancePassword:
    Type: String
    Label:
      en: Instance Password
      zh-cn: 实例密码
    Description:
      en: Server login password, Length 8-30, must contain three(Capital letters,
        lowercase letters, numbers, ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ Special symbol
        in)
      zh-cn: 服务器登录密码,长度8-30，必须包含三项（大写字母、小写字母、数字、 ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ 中的特殊符号）
    ConstraintDescription:
      en: Length 8-30, must contain three(Capital letters, lowercase letters, numbers,
        ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ Special symbol in)
      zh-cn: 长度8-30，必须包含三项（大写字母、小写字母、数字、 ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ 中的特殊符号）
    AssociationProperty: ALIYUN::ECS::Instance::Password
    AllowedPattern: '[0-9A-Za-z\_\-\&:;''<>,=%`~!@#\(\)\$\^\*\+\|\{\}\[\]\.\?\/]+$'
    MinLength: 8
    MaxLength: 30
    NoEcho: true
  SystemDiskCategory:
    Type: String
    Label:
      en: System Disk Category
      zh-cn: 系统盘类型
    AssociationProperty: ALIYUN::ECS::Disk::SystemDiskCategory
    AssociationPropertyMetadata:
      LocaleKey: DiskCategory
      InstanceType: ${EcsInstanceType}
    AllowedValues:
    - cloud_efficiency
    - cloud_ssd
    - cloud_essd
  SystemDiskSize:
    Type: Number
    Label:
      zh-cn: 系统盘空间 (GB)
      en: System Disk Space (GB)
    Default: 200
  DataDiskCategory:
    Type: String
    Label:
      zh-cn: 数据盘类型
      en: Data disk type
    AssociationProperty: ALIYUN::ECS::Disk::DataDiskCategory
    AssociationPropertyMetadata:
      InstanceType: EcsInstanceType
      ZoneId: ZoneId
      LocaleKey: DiskCategory
  DataDiskSize:
    Type: Number
    Label:
      zh-cn: 数据盘空间
      en: Data disk space
    Description:
      zh-cn: ECS实例数据盘大小，单位为GiB。取值范围：20~32768
      en: 'ECS Instance disk size, range of values: 20-32768, units: GB'
    Default: 200
    MinValue: 20
    MaxValue: 32768
  AllocatePublicIP:
    Type: Boolean
    Label:
      zh-cn: 开启公网IP
      en: allocate public ip
    Default: true
  InternetMaxBandwidthOut:
    Type: Number
    Label:
      zh-cn: 流量公网带宽
      en: Internet Max Bandwidth Out
    Description:
      zh-cn: 取值范围0-100, 0为不开公网ip
      en: no public ip if zero
    AssociationPropertyMetadata:
      Visible:
        Condition:
          Fn::Equals:
          - ${AllocatePublicIP}
          - true
    Default: 5
    MinValue: 0
    MaxValue: 100
Resources:
  EcsVpc:
    Type: ALIYUN::ECS::VPC
    Condition: CreateVpcConditions
    Properties:
      CidrBlock:
        Ref: VpcCidrBlock
      VpcName:
        Ref: ALIYUN::StackName
  EcsVSwitch:
    Type: ALIYUN::ECS::VSwitch
    Condition: CreateVpcConditions
    Properties:
      ZoneId:
        Ref: ZoneId
      VpcId:
        Ref: EcsVpc
      CidrBlock:
        Ref: VSwitchCidrBlock
  EcsSecurityGroup:
    Type: ALIYUN::ECS::SecurityGroup
    Properties:
      # 按照软件名称设置安全组名称
      #SecurityGroupName: nginx-sg
      VpcId:
        Fn::If:
        - CreateVpcConditions
        - Ref: EcsVpc
        - Ref: VpcId
      # 按照软件监听的端口，设置入方向规则（安全组默认出方向的全部端口都是放行的）
      #SecurityGroupIngress:
      #  - PortRange: 80/80
      #    Priority: 1
      #    SourceCidrIp: 0.0.0.0/0
      #    IpProtocol: tcp
  EcsInstanceGroup:
    Type: ALIYUN::ECS::InstanceGroup
    Properties:
      ZoneId:
        Ref: ZoneId
      VpcId:
        Fn::If:
        - CreateVpcConditions
        - Ref: EcsVpc
        - Ref: VpcId
      VSwitchId:
        Fn::If:
        - CreateVpcConditions
        - Ref: EcsVSwitch
        - Ref: VSwitchId
      SecurityGroupId:
        Ref: EcsSecurityGroup
      ImageId: centos_7
      IoOptimized: optimized
      InstanceChargeType:
        Ref: PayType
      PeriodUnit:
        Ref: PayPeriodUnit
      Period:
        Ref: PayPeriod
      SystemDiskCategory:
        Ref: SystemDiskCategory
      # 系统盘大小可以根据需要调整
      SystemDiskSize:
        Ref: SystemDiskSize
      # 数据盘配置
      DiskMappings:
      - Category:
          Ref: DataDiskCategory
        Size:
          Ref: DataDiskSize
      MaxAmount: 1
      InstanceType:
        Ref: EcsInstanceType
      Password:
        Ref: InstancePassword
      # 公网带宽, 为 0 代表不开公网
      InternetMaxBandwidthOut:
        Fn::If:
        - IfAllocatePublicIP
        - Ref: InternetMaxBandwidthOut
        - 0
      InstanceName:
        Fn::Join:
        - '-'
        - - Ref: ALIYUN::StackName
          - '[1,4]'
  WaitConditionHandle:
    Type: ALIYUN::ROS::WaitConditionHandle
    Properties: {}
  WaitCondition:
    Type: ALIYUN::ROS::WaitCondition
    Properties:
      Count: 1
      Handle:
        Ref: WaitConditionHandle
      # 等待命令执行完成的超时时间
      Timeout: 300
  InstanceRunCommand:
    Type: ALIYUN::ECS::RunCommand
    Properties:
      InstanceIds:
        Fn::GetAtt:
        - EcsInstanceGroup
        - InstanceIds
      CommandContent:
        Fn::Sub:
        - |
          #!/bin/bash
          # 1. 如果使用了数据盘，需要对数据盘进行格式化，并挂载到指定目录，这里假定挂载到/data
          init_and_mount_data_disk() {
            local fs_type=$1
            local mount_point=$2

            # 找出磁盘设备（排除分区）
            devices=(`lsblk -o NAME,FSTYPE --noheadings --nodeps | awk '$2 == "" {print $1}'`)
            # 找出不存在文件系统的磁盘设备
            for device in ${!devices[@]};
            do
              lsblk -o NAME,FSTYPE --noheadings  | awk '$2 != "" {print $1}' | grep ${!device}
              if [[ $? -eq 1 ]]; then
                data_disk=${!device}
                break
              fi
            done

            # 为数据盘创建文件系统
            mkfs -t ${!fs_type} /dev/${!data_disk}

            cp /etc/fstab /etc/fstab.bak
            mkdir ${!mount_point}
            # 更新/etc/fstab并挂载磁盘
            echo `blkid /dev/${!data_disk} | awk '{print $2}' | sed 's/\\\"//g'` ${!mount_point} ext4 defaults 0 0 >> /etc/fstab
            mount -a
          }

          # 挂盘到/data
          init_and_mount_data_disk ext4 /data

          # 2. 安装软件，或者对软件进行初始化配置，比如将数据文件目录指定到数据盘目录
          # yum install -y nginx

          # 3. 如果需要开机自启动，请添加系统服务并启用
          # systemctl enable nginx.service

          # 4. 配置启动脚本或者启动系统服务
          # systemctl start nginx.service

          # 5. 执行成功回调WaitCondition结束waitCondition的等待
          ${CurlCli} -d "{\"Data\" : \"Success\", \"status\" : \"SUCCESS\"}"
          # 脚本里任何地方如果发现执行失败，使用以下命令返回FAILURE和错误信息
          # ${CurlCli} -d "{\"Data\" : \"error message\", \"status\" : \"FAILURE\"}"
        - CurlCli:
            Fn::GetAtt:
            - WaitConditionHandle
            - CurlCli
      Type: RunShellScript
      # 按照命令执行时间设置超时，单位是秒；命令执行超时则部署失败
      Timeout: 300
# outputs是根据软件需求定义
# Outputs are defined according to software requirements
# 以下是以nginx为例，输出了网站公网访问地址
# The following is an example of nginx, which outputs the public network access address of the website
#Outputs:
#  endpoint:
#    Condition: IfAllocatePublicIP
#    Description:
#      zh-cn: 对外暴露的公网IP地址
#      en: Public IP Addresses
#    Value:
#      Fn::Sub:
#        - http://${ServerAddress}
#        - ServerAddress:
#            Fn::Select:
#              - 0
#              - Fn::GetAtt:
#                  - EcsInstanceGroup
#                  - PublicIps
Metadata:
  ALIYUN::ROS::Interface:
## 参数组的顺序会确定用户创建服务实例页面的参数排列顺序
## The order of the parameter groups determines the order in which the parameters are arranged on the user creation service instance page
## 如果绝大部分实例规格都适用，比如x86架构，可以按注释中将可用区放在前面选择
## If most of the instance specifications are applicable, such as the x86 architecture, you can select the availability zone in front of the note
#    ParameterGroups:
#      - Parameters:
#          - ZoneId
#        Label:
#          default:
#            zh-cn: 可用区配置
#            en: Zone Configuration
#      - Parameters:
#          - WhetherCreateVpc
#          - VpcCidrBlock
#          - VSwitchCidrBlock
#          - VpcId
#          - VSwitchId
#        Label:
#          default:
#            zh-cn: VPC配置
#            en: VPC Configuration
#      - Parameters:
#          - PayType
#          - PayPeriodUnit
#          - PayPeriod
#        Label:
#          default:
#            en: PayType Configuration
#            zh-cn: 付费类型配置
#      - Parameters:
#          - EcsInstanceType
#          - InstancePassword
#          - SystemDiskCategory
#          - SystemDiskSize
#          - DataDiskCategory
#          - DataDiskSize
#          - AllocatePublicIP
#          - InternetMaxBandwidthOut
#        Label:
#          default:
#            en: Instance
#            zh-cn: ECS实例配置
    ParameterGroups:
    - Parameters:
        - PayType
        - PayPeriodUnit
        - PayPeriod
      Label:
        default:
          en: PayType Configuration
          zh-cn: 付费类型配置
    - Parameters:
      - EcsInstanceType
      Label:
        default:
          zh-cn: ECS实例规格配置
          en: ECS Instance Type Configuration
    - Parameters:
      - ZoneId
      Label:
        default:
          zh-cn: 可用区配置
          en: Zone Configuration
    - Parameters:
      - WhetherCreateVpc
      - VpcCidrBlock
      - VSwitchCidrBlock
      - VpcId
      - VSwitchId
      Label:
        default:
          zh-cn: VPC配置
          en: VPC Configuration
    - Parameters:
      - InstancePassword
      - SystemDiskCategory
      - SystemDiskSize
      - DataDiskCategory
      - DataDiskSize
      - AllocatePublicIP
      - InternetMaxBandwidthOut
      Label:
        default:
          en: Instance
          zh-cn: ECS实例详细配置
    TemplateTags:
    - acs:example:ISV软件部署:单实例自定义镜像部署带数据盘公网IP可选
  ALIYUN::ROS::Composer:
    c15a35c7:
      Rect:
        - 903
        - 520
        - -41
        - 95
        - 1
        - 0
      ResT: Composer::ROSParameter::AlibabaCloud
    5ea6d191:
      Parent: c15a35c7
      Rect:
        - 835
        - 440
        - -7
        - 135
        - 2
        - 0
      ResT: Composer::ROSParameter::Region
    1dbef61a:
      Res:
        - InstanceRunCommand
      Parent: 5ea6d191
      Rect:
        - 40
        - 40
        - 30
        - 375
        - 3
        - 0
    a07f13c4:
      Res:
        - VpcId
      Parent: 5ea6d191
      Rect:
        - 561
        - 345
        - 110
        - 185
        - 3
        - 0
      ResT: ALIYUN::ECS::VPC
    afda8266:
      Res:
        - WaitCondition
      Parent: 5ea6d191
      Rect:
        - 40
        - 40
        - 730
        - 235
        - 3
        - 0
    e56a22ae:
      Res:
        - WaitConditionHandle
      Parent: 5ea6d191
      Rect:
        - 40
        - 40
        - 730
        - 445
        - 3
        - 0
    11ca083c:
      Res:
        - ZoneId
      Parent: a07f13c4
      Rect:
        - 505
        - 271
        - 130
        - 235
        - 4
        - 0
      ResT: Composer::ROSParameter::Zone
    61fdd70d:
      Res:
        - VSwitchId
      Parent: 11ca083c
      Rect:
        - 400
        - 200
        - 189
        - 285
        - 5
        - 0
      ResT: ALIYUN::ECS::VSwitch
    ab03d73b:
      Res:
        - EcsSecurityGroup
      Parent: a07f13c4
      Rect:
        - 192
        - 116
        - 275
        - 337
        - 10
        - 0
    aebfdd2a:
      Parent: 5ea6d191
      Edge:
        - afda8266
        - e56a22ae
      Line: 0:0:0:gray:0
    1f48a947:
      Parent: 5ea6d191
      Edge:
        - 1dbef61a
        - affca448
      Line: 0:0:0:gray:0
    affca448:
      Res:
        - EcsInstanceGroup
      Parent: 61fdd70d
      Rect:
        - 40
        - 40
        - 351
        - 375
        - 11
        - 0
      Layer:
        - ab03d73b