classic-architecture-on-the-cloud.yml

ROSTemplateFormatVersion: '2015-09-01'
Description:
  zh-cn: 创建双可用区云上架构，含VPC、ECS实例、PolarDB数据库、ALB负载均衡，自动部署WordPress。
  en: Establish a dual-Availability Zone cloud architecture comprising a Virtual Private
    Cloud (VPC), Elastic Compute Service (ECS) instances, PolarDB database, and Application
    Load Balancer (ALB), with automated deployment of WordPress.
Parameters:
  EcsInstanceType1:
    Type: String
    Label:
      en: Instance Type for Availability Zone1
      zh-cn: 可用区1对应实例类型
    AssociationProperty: 'ALIYUN::ECS::Instance::InstanceType'
    AssociationPropertyMetadata:
      InstanceChargeType: PostPaid
      SpotStrategy: SpotAsPriceGo
      ZoneId: ${Zone1}
      SystemDiskCategory: cloud_essd
    Description:
      en: >-
        If no available specifications are displayed, please select Modify
        Availability Zone and try again.
      zh-cn: 如果没有可用规格显示，请选择修改可用区后重试。
    Default: ecs.s6-c1m1.small
  EcsInstanceType2:
    Type: String
    Label:
      en: Instance Type for Availability Zone2
      zh-cn: 可用区2对应实例类型
    AssociationProperty: 'ALIYUN::ECS::Instance::InstanceType'
    AssociationPropertyMetadata:
      InstanceChargeType: PostPaid
      SpotStrategy: SpotAsPriceGo
      ZoneId: ${Zone2}
      SystemDiskCategory: cloud_essd
    Description:
      en: >-
        If no available specifications are displayed, please select Modify
        Availability Zone and try again.
      zh-cn: 如果没有可用规格显示，请选择修改可用区后重试。
    Default: ecs.s6-c1m1.small
  Zone1:
    Type: String
    Label:
      en: VSwitch Availability Zone1
      zh-cn: 交换机可用区1
    AssociationProperty: 'ALIYUN::ECS::Instance::ZoneId'
    AssociationPropertyMetadata:
      AutoSelectFirst: true
      ExclusiveTo:
        - Zone2
  Zone2:
    Type: String
    Label:
      en: VSwitch Availability Zone2
      zh-cn: 交换机可用区2
    AssociationProperty: 'ALIYUN::ECS::Instance::ZoneId'
    AssociationPropertyMetadata:
      AutoSelectFirst: true
      ExclusiveTo:
        - Zone1
  InstancePassword:
    Type: String
    Label:
      en: Instance Password
      zh-cn: 实例密码
    Description:
      en: >-
        Server login password, Length 8-30, must contain three(Capital letters,
        lowercase letters, numbers, ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ Special
        symbol in)
      zh-cn: >-
        服务器登录密码，长度8-30，必须包含三项（大写字母、小写字母、数字、 ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/
        中的特殊符号），不能以特殊字符开头。
    ConstraintDescription:
      en: >-
        Length 8-30, must contain three(Capital letters, lowercase letters,
        numbers, ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ Special symbol in)
      zh-cn: '长度8-30，必须包含三项（大写字母、小写字母、数字、 ()`~!@#$%^&*_-+=|{}[]:;''<>,.?/ 中的特殊符号），不能以特殊字符开头。'
    AssociationProperty: 'ALIYUN::ECS::Instance::Password'
    NoEcho: true
  PolarDBName:
    Type: String
    Label:
      en: PolarDB Name
      zh-cn: 数据库名称
    Default: wordpress
  DBNodeClass:
    Type: String
    Label:
      en: DBNodeClass
      zh-cn: PolarDB集群规格
    Default: polar.mysql.g2.medium
  PolarDBAccountName:
    Type: String
    Label:
      en: Account Name of PolarDB
      zh-cn: 数据库登录名
    Default: wordpress
  PolarDBPassword:
    Type: String
    Label:
      en: PolarDB Login Password
      zh-cn: 数据库登录密码
    Description:
      en: >-
        Software login password, There are three types of uppercase and lowercase letters, 
        numbers, and special characters, with a length of 8~32 characters; the special characters are !@#$%^&*()_+-=
      zh-cn: 软件登录密码，大小写字母、数字、特殊字符占三种，长度为8~32个字符，不能以特殊字符开头，特殊字符为!@#$%^&*()_+-=
    ConstraintDescription:
      en: >-
        There are three types of uppercase and lowercase letters, numbers, and special characters, 
        with a length of 8~32 characters; the special characters are !@#$%^&*()_+-=
      zh-cn: '大小写字母、数字、特殊字符占三种，长度为8~32个字符，不能以特殊字符开头，特殊字符为!@#$%^&*()_+-='
    AllowedPattern: '^[a-zA-Z](?=.*[a-zA-Z])(?=.*[0-9])(?=.*[!@#$%^&*()_+\-=])[A-Za-z\d!@#$%^&*()_+\-=]{7,31}$'
    NoEcho: true
  CommonName:
    Type: String
    Default: high-availability
Resources:
  EcsVpc:
    Type: 'ALIYUN::ECS::VPC'
    Properties:
      VpcName:
        'Fn::Sub': '${CommonName}_vpc'
      CidrBlock: 192.168.0.0/16
  EcsVSwitch1:
    Type: 'ALIYUN::ECS::VSwitch'
    Properties:
      ZoneId:
        Ref: Zone1
      VpcId:
        Ref: EcsVpc
      VSwitchName:
        'Fn::Sub': '${CommonName}_vsw_001'
      CidrBlock: 192.168.1.0/24
  EcsVSwitch2:
    Type: 'ALIYUN::ECS::VSwitch'
    Properties:
      ZoneId:
        Ref: Zone2
      VpcId:
        Ref: EcsVpc
      VSwitchName:
        'Fn::Sub': '${CommonName}_vsw_002'
      CidrBlock: 192.168.2.0/24
  EcsSecurityGroup:
    Type: 'ALIYUN::ECS::SecurityGroup'
    Properties:
      VpcId:
        Ref: EcsVpc
      SecurityGroupName:
        'Fn::Sub': '${CommonName}_sg'
      SecurityGroupIngress:
        - PortRange: 3306/3306
          Priority: 1
          SourceCidrIp: 0.0.0.0/0
          IpProtocol: tcp
          NicType: internet
        - PortRange: 22/22
          Priority: 1
          SourceCidrIp: 0.0.0.0/0
          IpProtocol: tcp
          NicType: internet
        - PortRange: 80/80
          Priority: 1
          SourceCidrIp: 0.0.0.0/0
          IpProtocol: tcp
          NicType: internet
        - PortRange: 443/443
          Priority: 1
          SourceCidrIp: 0.0.0.0/0
          IpProtocol: tcp
          NicType: internet
      SecurityGroupEgress:
        - PortRange: '-1/-1'
          Priority: 1
          IpProtocol: all
          DestCidrIp: 0.0.0.0/0
          NicType: internet
        - PortRange: '-1/-1'
          Priority: 1
          IpProtocol: all
          DestCidrIp: 0.0.0.0/0
          NicType: intranet
  EcsInstanceGroup1:
    Type: 'ALIYUN::ECS::Instance'
    Properties:
      ZoneId:
        Ref: Zone1
      VpcId:
        Ref: EcsVpc
      VSwitchId:
        Ref: EcsVSwitch1
      SecurityGroupId:
        Ref: EcsSecurityGroup
      ImageId: centos_7_9
      IoOptimized: optimized
      SystemDiskSize: 20
      InstanceType:
        Ref: EcsInstanceType1
      Password:
        Ref: InstancePassword
      InstanceName:
        'Fn::Sub': '${CommonName}_ecs1'
      SpotStrategy: SpotAsPriceGo
      SystemDiskCategory: cloud_essd
  EcsInstanceGroup2:
    Type: 'ALIYUN::ECS::Instance'
    Properties:
      ZoneId:
        Ref: Zone2
      VpcId:
        Ref: EcsVpc
      VSwitchId:
        Ref: EcsVSwitch2
      SecurityGroupId:
        Ref: EcsSecurityGroup
      ImageId: centos_7_9
      IoOptimized: optimized
      SystemDiskSize: 20
      InstanceType:
        Ref: EcsInstanceType2
      Password:
        Ref: InstancePassword
      InstanceName:
        'Fn::Sub': '${CommonName}_ecs2'
      SpotStrategy: SpotAsPriceGo
      SystemDiskCategory: cloud_essd
  InstanceRunCommand:
    Type: 'ALIYUN::ECS::RunCommand'
    Properties:
      InstanceIds:
        - Ref: EcsInstanceGroup1
        - Ref: EcsInstanceGroup2
      Sync: true
      Type: RunShellScript
      Timeout: '300'
      CommandContent:
        'Fn::Sub': >-
          #!/bin/bash

          yum install docker -y

          systemctl start docker

          systemctl enable docker.service

          docker pull docker.io/library/wordpress:5.6

          mkdir /wordpress

          docker run --name my-blog --restart=always -v /wordpress:/var/www/html
          -p 80:80 -d --env
          WORDPRESS_DB_HOST=${PolarDBCluster.ClusterConnectionString} --env
          WORDPRESS_DB_USER=${PolarDBAccountName} --env
          WORDPRESS_DB_PASSWORD=${PolarDBPassword} --env
          WORDPRESS_DB_NAME=${PolarDBName} wordpress:5.6
  PolarDBCluster:
    Type: 'ALIYUN::POLARDB::DBCluster'
    Properties:
      ZoneId:
        Ref: Zone2
      VpcId:
        Ref: EcsVpc
      VSwitchId:
        Ref: EcsVSwitch2
      SecurityGroupIds:
        - Ref: EcsSecurityGroup
      DBType: MySQL
      ClusterNetworkType: VPC
      DBVersion: '8.0'
      CreationOption: Normal
      DBNodeClass:
        Ref: DBNodeClass
      SecurityIPList: 192.168.0.0/16
      PayType: Postpaid
  PolarDBInstance:
    Type: 'ALIYUN::POLARDB::DBInstance'
    Properties:
      DBClusterId:
        Ref: PolarDBCluster
      CharacterSetName: utf8mb4
      DBName:
        Ref: PolarDBName
  PolarDBAccount:
    Type: 'ALIYUN::POLARDB::Account'
    Properties:
      DBClusterId:
        Ref: PolarDBCluster
      AccountName:
        Ref: PolarDBAccountName
      AccountPrivilege: ReadWrite
      AccountType: Normal
      AccountPassword:
        Ref: PolarDBPassword
      DBName:
        Ref: PolarDBInstance
  AlbLoadBalancer:
    Type: 'ALIYUN::ALB::LoadBalancer'
    Properties:
      VpcId:
        Ref: EcsVpc
      LoadBalancerName:
        'Fn::Sub': '${CommonName}_alb'
      LoadBalancerEdition: Basic
      LoadBalancerBillingConfig:
        PayType: PostPay
      AddressType: Internet
      AddressAllocatedMode: Dynamic
      ZoneMappings:
        - ZoneId:
            Ref: Zone1
          VSwitchId:
            Ref: EcsVSwitch1
        - ZoneId:
            Ref: Zone2
          VSwitchId:
            Ref: EcsVSwitch2
  AlbServerGroup:
    Type: 'ALIYUN::ALB::ServerGroup'
    Properties:
      VpcId:
        Ref: EcsVpc
      HealthCheckConfig:
        HealthCheckEnabled: true
        HealthCheckPath: /
        HealthCheckCodes:
          - http_2xx
          - http_3xx
        HealthCheckProtocol: HTTP
      ServerGroupName:
        'Fn::Sub': '${CommonName}_server_group'
      StickySessionConfig:
        StickySessionEnabled: false
  ServerAttachment:
    Type: 'ALIYUN::ALB::BackendServerAttachment'
    Properties:
      ServerGroupId:
        Ref: AlbServerGroup
      Servers:
        - ServerType: Ecs
          ServerId:
            Ref: EcsInstanceGroup1
          Port: 80
          Weight: 100
        - ServerType: Ecs
          ServerId:
            Ref: EcsInstanceGroup2
          Port: 80
          Weight: 100
  AlbListener:
    Type: 'ALIYUN::ALB::Listener'
    Properties:
      ListenerPort: 80
      DefaultActions:
        - Type: ForwardGroup
          ForwardGroupConfig:
            ServerGroupTuples:
              - ServerGroupId:
                  Ref: AlbServerGroup
      LoadBalancerId:
        Ref: AlbLoadBalancer
      ListenerProtocol: HTTP
Outputs:
  WordPressUrl:
    Description:
      en: The url of WordPress.
      zh-cn: WordPress 访问地址。
    Value:
      'Fn::Sub':
        - 'http://${AlbDnsName}'
        - AlbDnsName:
            'Fn::GetAtt':
              - AlbLoadBalancer
              - DNSName
Metadata:
  'ALIYUN::ROS::Interface':
    ParameterGroups:
      - Parameters:
          - Zone1
          - Zone2
        Label:
          default:
            en: Availability Zone
            zh-cn: 可用区配置
      - Parameters:
          - EcsInstanceType1
          - EcsInstanceType2
          - InstancePassword
        Label:
          default:
            en: Instance
            zh-cn: ECS实例配置
      - Parameters:
          - PolarDBName
          - DBNodeClass
          - PolarDBAccountName
          - PolarDBPassword
        Label:
          default:
            en: PolarDB Information
            zh-cn: PolarDB配置
    TemplateTags:
      - >-
        acs:technical-solution:high-availability-architecture:云上经典架构-tech_solu_07
    Hidden:
      - CommonName