-
Notifications
You must be signed in to change notification settings - Fork 17
/
ACS-ECS-JoinSecurityGroupToMultipleInstance.yml
122 lines (122 loc) · 3.19 KB
/
ACS-ECS-JoinSecurityGroupToMultipleInstance.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
FormatVersion: OOS-2019-06-01
Description:
en: Join a security group to multiple instances
zh-cn: 将安全组下发至多台实例
name-en: ACS-ECS-JoinSecurityGroupToMultipleInstance
name-zh-cn: 下发安全组至多台实例
categories:
- instance_manage
Parameters:
regionId:
Type: String
Label:
en: RegionId
zh-cn: 地域ID
AssociationProperty: RegionId
Default: '{{ ACS::RegionId }}'
targets:
Type: Json
Label:
en: TargetInstance
zh-cn: 目标实例
AssociationProperty: Targets
AssociationPropertyMetadata:
ResourceType: 'ALIYUN::ECS::Instance'
RegionId: regionId
securityGroupId:
Label:
en: SecurityGroupId
zh-cn: 需下发的安全组ID
Type: String
AssociationProperty: ALIYUN::ECS::SecurityGroup::SecurityGroupId
AssociationPropertyMetadata:
RegionId: regionId
rateControl:
Label:
en: RateControl
zh-cn: 任务执行的并发比率
Type: Json
AssociationProperty: RateControl
Default:
Mode: Concurrency
MaxErrors: 0
Concurrency: 10
OOSAssumeRole:
Label:
en: OOSAssumeRole
zh-cn: OOS扮演的RAM角色
Type: String
Default: ''
RamRole: '{{ OOSAssumeRole }}'
Tasks:
- Name: getInstance
Description:
en: Views the ECS instances
zh-cn: 获取ECS实例
Action: ACS::SelectTargets
Properties:
ResourceType: ALIYUN::ECS::Instance
RegionId: '{{ regionId }}'
Filters:
- '{{ targets }}'
Outputs:
instanceIds:
Type: List
ValueSelector: Instances.Instance[].InstanceId
- Name: checkInstanceReady
Action: ACS::CheckFor
Description:
en: Checks whether the ECS instance status is running or stopped
zh-cn: 检查实例状态在Running或者Stopped
Properties:
Service: ECS
API: DescribeInstances
Parameters:
RegionId: '{{ regionId }}'
InstanceIds:
- '{{ ACS::TaskLoopItem }}'
DesiredValues:
- Running
- Stopped
PropertySelector: Instances.Instance[].Status
Loop:
RateControl: '{{ rateControl }}'
Items: '{{ getInstance.instanceIds }}'
- Name: joinSecurityGroup
Action: 'ACS::ExecuteAPI'
Description:
en: Deliver a security group to a specified ECS instance
zh-cn: 将安全组下发到指定的ECS实例上
Properties:
Service: ECS
API: JoinSecurityGroup
Parameters:
SecurityGroupId: '{{ securityGroupId }}'
InstanceId: '{{ ACS::TaskLoopItem }}'
RegionId: '{{ regionId }}'
Loop:
RateControl: '{{ rateControl }}'
Items: '{{ getInstance.instanceIds }}'
Metadata:
ALIYUN::OOS::Interface:
ParameterGroups:
- Parameters:
- securityGroupId
Label:
default:
zh-cn: 选择安全组
en: Select Security Group
- Parameters:
- regionId
- targets
Label:
default:
zh-cn: 选择实例
en: Select Ecs Instances
- Parameters:
- rateControl
- OOSAssumeRole
Label:
default:
zh-cn: 高级选项
en: Control Options