ACS-ECS-ScheduleApplyPatchBaseline.json

{
  "FormatVersion": "OOS-2019-06-01",
  "Description": {
    "name-en": "ACS-ECS-ScheduleApplyPatchBaseline",
    "name-zh-cn": "定时在ECS实例中配置补丁基线",
    "en": "Schedule to apply patch baseline on ECS instance",
    "zh-cn": "定时在ECS实例中配置补丁基线"
  },
  "Parameters": {
    "regionId": {
      "Label": {
        "en": "RegionId",
        "zh-cn": "地域ID"
      },
      "Type": "String",
      "AssociationProperty": "RegionId",
      "Default": "{{ ACS::RegionId }}"
    },
    "resourceType": {
      "Type": "String",
      "Label": {
        "en": "ResourceType",
        "zh-cn": "资源类型"
      },
      "AssociationPropertyMetadata": {
        "LocaleKey": "TargetResourceType"
      },
      "AllowedValues": [
        "ALIYUN::ECS::Instance",
        "ALIYUN::ECS::ManagedInstance",
        "ALIYUN::ECD::Desktop"
      ],
      "Default": "ALIYUN::ECS::Instance"
    },
    "targets": {
      "Type": "Json",
      "Label": {
        "en": "TargetInstance",
        "zh-cn": "目标实例"
      },
      "AssociationProperty": "Targets",
      "AssociationPropertyMetadata": {
        "ResourceType": "resourceType",
        "RegionId": "regionId",
        "Status": "Running"
      }
    },
    "timerTrigger": {
      "Type": "Json",
      "Label": {
        "en": "TimerTrigger",
        "zh-cn": "定时类型"
      },
      "AssociationProperty": "ALIYUN::OOS::Component::TimerTrigger",
      "AssociationPropertyMetadata": {
        "MinuteInterval": 30
      }
    },
    "action": {
      "Label": {
        "en": "Action",
        "zh-cn": "执行方式"
      },
      "Type": "String",
      "AllowedValues": [
        "install",
        "scan"
      ],
      "Default": "install",
      "AssociationPropertyMetadata": {
        "LocaleKey": "OOSPatchExecuteType"
      }
    },
    "whetherCreateSnapshot": {
      "Label": {
        "en": "WhetherCreateSnapshot",
        "zh-cn": "是否为系统盘创建快照"
      },
      "Type": "Boolean",
      "Default": false,
      "AssociationPropertyMetadata": {
        "Visible": {
          "Condition": {
            "Fn::Equals": [
              "${action}",
              "install"
            ]
          }
        }
      }
    },
    "retentionDays": {
      "Label": {
        "en": "RetentionDays",
        "zh-cn": "快照保留天数"
      },
      "Type": "Number",
      "MinValue": 1,
      "MaxValue": 65536,
      "Default": 7,
      "AssociationPropertyMetadata": {
        "Visible": {
          "Condition": {
            "Fn::Equals": [
              "${whetherCreateSnapshot}",
              true
            ]
          }
        }
      }
    },
    "rebootIfNeed": {
      "Label": {
        "en": "RebootIfNeed",
        "zh-cn": "是否重启"
      },
      "Type": "Boolean",
      "Default": false,
      "AssociationPropertyMetadata": {
        "Visible": {
          "Condition": {
            "Fn::Equals": [
              "${action}",
              "install"
            ]
          }
        }
      }
    },
    "timeout": {
      "Label": {
        "en": "Timeout",
        "zh-cn": "ECS实例中执行命令的超时时间"
      },
      "Type": "Number",
      "Default": 7200
    },
    "rateControl": {
      "Label": {
        "en": "RateControl",
        "zh-cn": "任务执行的并发比率"
      },
      "Type": "Json",
      "AssociationProperty": "RateControl",
      "Default": {
        "Mode": "Concurrency",
        "MaxErrors": 0,
        "Concurrency": 10
      }
    },
    "OOSAssumeRole": {
      "Label": {
        "en": "OOSAssumeRole",
        "zh-cn": "OOS扮演的RAM角色"
      },
      "Type": "String",
      "Default": "",
      "AssociationPropertyMetadata": {
        "TimerTrigger": "${timerTrigger}"
      }
    }
  },
  "RamRole": "{{ OOSAssumeRole }}",
  "Tasks": [
    {
      "Name": "timerTrigger",
      "Action": "ACS::TimerTrigger",
      "Description": {
        "en": "Triggers a task as scheduled by specifying type and expression",
        "zh-cn": "通过指定触发类型和表达式按计划触发任务"
      },
      "Properties": {
        "Type": {
          "Fn::Select": [
            "type",
            "{{timerTrigger}}"
          ]
        },
        "Expression": {
          "Fn::Select": [
            "expression",
            "{{timerTrigger}}"
          ]
        },
        "EndDate": {
          "Fn::Select": [
            "endDate",
            "{{ timerTrigger }}"
          ]
        },
        "TimeZone": {
          "Fn::Select": [
            "timeZone",
            "{{ timerTrigger }}"
          ]
        }
      }
    },
    {
      "Name": "getInstance",
      "Description": {
        "en": "Views the ECS instances",
        "zh-cn": "获取ECS实例"
      },
      "Action": "ACS::SelectTargets",
      "Properties": {
        "RegionId": "{{ regionId }}",
        "ResourceType": "{{ resourceType }}",
        "Filters": [
          "{{ targets }}"
        ]
      },
      "Outputs": {
        "instanceIds": {
          "Type": "List",
          "ValueSelector": "Instances.Instance[].InstanceId"
        }
      }
    },
    {
      "Name": "applyPatchBaseline",
      "Description": {
        "en": "Apply patch baseline on ECS instance",
        "zh-cn": "在ECS实例中配置补丁基线"
      },
      "Action": "ACS::ECS::ApplyPatchBaseline",
      "When": {
        "Fn::Equals": [
          "{{ resourceType }}",
          "ALIYUN::ECS::Instance"
        ]
      },
      "Properties": {
        "regionId": "{{ regionId }}",
        "instanceId": "{{ ACS::TaskLoopItem }}",
        "action": "{{ action }}",
        "whetherCreateSnapshot": "{{ whetherCreateSnapshot }}",
        "retentionDays": "{{ retentionDays }}",
        "rebootIfNeed": "{{ rebootIfNeed }}",
        "timeout": "{{ timeout }}"
      },
      "Loop": {
        "RateControl": "{{ rateControl }}",
        "Items": "{{ getInstance.instanceIds }}",
        "Outputs": {
          "commandOutputs": {
            "AggregateType": "Fn::ListJoin",
            "AggregateField": "commandOutput"
          }
        }
      },
      "Outputs": {
        "commandOutput": {
          "Type": "String",
          "ValueSelector": "commandOutput"
        }
      }
    },
    {
      "Name": "applyPatchBaselineOnManagedInstance",
      "Description": {
        "en": "Apply patch baseline on ECS managed instance",
        "zh-cn": "在ECS托管实例中配置补丁基线"
      },
      "Action": "ACS::ECS::ApplyPatchBaselineOnMangedInstance",
      "When": {
        "Fn::Equals": [
          "{{ resourceType }}",
          "ALIYUN::ECS::ManagedInstance"
        ]
      },
      "Properties": {
        "regionId": "{{ regionId }}",
        "instanceId": "{{ ACS::TaskLoopItem }}",
        "action": "{{ action }}",
        "timeout": "{{ timeout }}"
      },
      "Loop": {
        "RateControl": "{{ rateControl }}",
        "Items": "{{ getInstance.instanceIds }}",
        "Outputs": {
          "commandOutputs": {
            "AggregateType": "Fn::ListJoin",
            "AggregateField": "commandOutput"
          }
        }
      },
      "Outputs": {
        "commandOutput": {
          "Type": "String",
          "ValueSelector": "commandOutput"
        }
      }
    },
    {
      "Name": "applyPatchBaselineOnECDInstance",
      "Description": {
        "en": "Apply patch baseline on ECD instance",
        "zh-cn": "在ECD实例中配置补丁基线"
      },
      "Action": "ACS::ECD::ApplyPatchBaseline",
      "When": {
        "Fn::Equals": [
          "{{ resourceType }}",
          "ALIYUN::ECD::Desktop"
        ]
      },
      "Properties": {
        "regionId": "{{ regionId }}",
        "desktopId": "{{ ACS::TaskLoopItem }}",
        "action": "{{ action }}",
        "rebootIfNeed": "{{ rebootIfNeed }}",
        "whetherCreateSnapshot": "{{ whetherCreateSnapshot }}",
        "timeout": "{{ timeout }}"
      },
      "Loop": {
        "RateControl": "{{ rateControl }}",
        "Items": "{{ getInstance.instanceIds }}",
        "Outputs": {
          "commandOutputs": {
            "AggregateType": "Fn::ListJoin",
            "AggregateField": "commandOutput"
          }
        }
      },
      "Outputs": {
        "commandOutput": {
          "Type": "String",
          "ValueSelector": "commandOutput"
        }
      }
    }
  ],
  "Outputs": {
    "commandOutputs": {
      "Type": "List",
      "Value": "{{ applyPatchBaseline.commandOutputs }}"
    }
  }
}