classic-architecture-of-cloud-website.yml

ROSTemplateFormatVersion: '2015-09-01'
Description:
  zh-cn: 创建VPC网络、双可用区SLB、ECS应用服务器、区域ECS服务器、RDS数据库，配置安全组和EIP，自动化部署HTTP服务与phpMyAdmin，实现云上经典网站架构。
  en: Create a Virtual Private Cloud (VPC) network, dual Availability Zone (AZ) Load
    Balancer, Elastic Compute Service (ECS) application servers, zonal ECS servers,
    Relational Database Service (RDS) instances, configure Security Groups and Elastic
    IP (EIP), automate the deployment of HTTP services along with phpMyAdmin, realizing
    a classic website architecture on the cloud.
Parameters:
  LoadBalancerSpec:
    Type: String
    Label:
      en: Load balancer spec.
      zh-cn: 负载均衡实例规格
    AssociationProperty: ALIYUN::SLB::Instance::InstanceType
    AssociationPropertyMetadata:
      ZoneId: ${Zone1}
  APPEcsInstanceType:
    Type: String
    Label:
      en: Core business system ECS instance specifications
      zh-cn: 核心业务系统ECS实例规格
    AssociationProperty: ALIYUN::ECS::Instance::InstanceType
    AssociationPropertyMetadata:
      InstanceChargeType: PostPaid
      SystemDiskCategory: cloud_essd
      ZoneId: ${Zone1}
  RegionEcsInstanceType:
    Type: String
    Label:
      en: Regional server instance specifications
      zh-cn: 区域服务器实例规格
    AssociationProperty: ALIYUN::ECS::Instance::InstanceType
    AssociationPropertyMetadata:
      InstanceChargeType: PostPaid
      SystemDiskCategory: cloud_essd
      ZoneId: ${Zone2}
  DBInstanceClass:
    Type: String
    Label:
      en: Rds instance type
      zh-cn: RDS实例类型
    AssociationProperty: ALIYUN::RDS::Instance::InstanceType
    AssociationPropertyMetadata:
      ZoneId: ${Zone1}
      Engine: MySQL
      EngineVersion: "5.7"
      Category: HighAvailability
      DBInstanceStorageType: local_ssd
      CommodityCode: bards
  ECSInstancePassword:
    Type: String
    Label:
      en: ECS Instance Password
      zh-cn: ECS实例密码
    Description:
      en: Server login password, Length 8-30, must contain three(Capital letters,
        lowercase letters, numbers, ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ Special symbol
        in)
      zh-cn: 服务器登录密码,长度8-30，必须包含三项（大写字母、小写字母、数字、 ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ 中的特殊符号）
    ConstraintDescription:
      en: Length 8-30, must contain three(Capital letters, lowercase letters, numbers,
        ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ Special symbol in)
      zh-cn: 长度8-30，必须包含三项（大写字母、小写字母、数字、 ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ 中的特殊符号）
    AssociationProperty: ALIYUN::ECS::Instance::Password
    AllowedPattern: ^[a-zA-Z0-9-\(\)\`\~\!\@\#\$\%\^\&\*\_\-\+\=\|\{\}\[\]\:\;\<\>\,\.\?\/]*$
    MinLength: 8
    MaxLength: 30
    NoEcho: true
  RDSUserPassword:
    Type: String
    Label:
      en: RDS user Password
      zh-cn: RDS 用户密码
    Description:
      en: RDS user login password, Length 8-30, must contain three(Capital letters,
        lowercase letters, numbers, ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ Special symbol
        in)
      zh-cn: RDS用户密码,长度8-30，必须包含三项（大写字母、小写字母、数字、 ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ 中的特殊符号）
    ConstraintDescription:
      en: Length 8-30, must contain three(Capital letters, lowercase letters, numbers,
        ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ Special symbol in)
      zh-cn: 长度8-30，必须包含三项（大写字母、小写字母、数字、 ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ 中的特殊符号）
    AssociationProperty: ALIYUN::ECS::Instance::Password
    AllowedPattern: ^[a-zA-Z0-9-\(\)\`\~\!\@\#\$\%\^\&\*\_\-\+\=\|\{\}\[\]\:\;\<\>\,\.\?\/]*$
    MinLength: 8
    MaxLength: 30
    NoEcho: true
  Zone1:
    Type: String
    Label:
      en: VSwitch Availability Zone1
      zh-cn: 交换机可用区1
    AssociationProperty: ALIYUN::ECS::Instance::ZoneId
  Zone2:
    Type: String
    Label:
      en: VSwitch Availability Zone2
      zh-cn: 交换机可用区2
    Description:
      en: Please make sure that <font color='red'><b>VSwitch Availability Zone2 is different from VSwitch Availability Zone1</b></font>.
      zh-cn: 请确保<font color='red'><b>交换机可用区2与交换机可用区1不相同</b></font>。
    AssociationProperty: ALIYUN::ECS::Instance::ZoneId
Resources:
  Vpc:
    Type: ALIYUN::ECS::VPC
    Properties:
      VpcName: vpc
      CidrBlock: 192.168.0.0/16
  VSwitch001:
    Type: ALIYUN::ECS::VSwitch
    Properties:
      ZoneId:
        Ref: Zone1
      VpcId:
        Ref: Vpc
      VSwitchName:
        Fn::Sub: vsw_001
      CidrBlock: 192.168.0.0/24
  VSwitch002:
    Type: ALIYUN::ECS::VSwitch
    Properties:
      ZoneId:
        Ref: Zone2
      VpcId:
        Ref: Vpc
      VSwitchName:
        Fn::Sub: vsw_002
      CidrBlock: 192.168.1.0/24
  SecurityGroup:
    Type: ALIYUN::ECS::SecurityGroup
    Properties:
      VpcId:
        Ref: Vpc
      SecurityGroupName: security_group
      SecurityGroupIngress:
      - PortRange: 8080/8080
        Priority: 1
        SourceCidrIp: 0.0.0.0/0
        IpProtocol: tcp
        NicType: internet
      - PortRange: 80/80
        Priority: 1
        SourceCidrIp: 0.0.0.0/0
        IpProtocol: tcp
        NicType: internet
      - PortRange: 22/22
        Priority: 1
        SourceCidrIp: 0.0.0.0/0
        IpProtocol: tcp
        NicType: internet
      SecurityGroupEgress:
      - PortRange: -1/-1
        Priority: 1
        IpProtocol: all
        DestCidrIp: 0.0.0.0/0
        NicType: internet
      - PortRange: -1/-1
        Priority: 1
        IpProtocol: all
        DestCidrIp: 0.0.0.0/0
        NicType: intranet
  Eip001:
    Type: ALIYUN::VPC::EIP
    Properties:
      Name: eip001
      InternetChargeType: PayByTraffic
  Eip002:
    Type: ALIYUN::VPC::EIP
    Properties:
      Name: eip002
      InternetChargeType: PayByTraffic
  Eip001Association:
    Type: ALIYUN::VPC::EIPAssociation
    Properties:
      AllocationId: 
        Ref: Eip001
      InstanceId:
        Ref: Slb
  Eip002Assocaition:
    Type: ALIYUN::VPC::EIPAssociation
    Properties:
      AllocationId:
        Ref: Eip002
      InstanceId:
        Ref: EcsInstance
  Slb:
    Type: ALIYUN::SLB::LoadBalancer
    Properties:
      LoadBalancerName: slb_app
      PayType: PayOnDemand
      InstanceChargeType: PayByCLCU
      AddressIPVersion: ipv4
      VpcId:
        Ref: Vpc
      VSwitchId:
        Ref: VSwitch001
      AddressType: intranet
      LoadBalancerSpec:
        Ref: LoadBalancerSpec
  SlbBackend:
    Type: ALIYUN::SLB::BackendServerAttachment
    Properties:
      LoadBalancerId:
        Ref: Slb
      BackendServers:
      - ServerId:
          Fn::Select:
          - '0'
          - Fn::GetAtt:
            - EcsInstanceGroup
            - InstanceIds
        Weight: 100
      - ServerId:
          Fn::Select:
            - '1'
            - Fn::GetAtt:
              - EcsInstanceGroup
              - InstanceIds 
        Weight: 100
  SlbListner:
    Type: ALIYUN::SLB::Listener
    Properties:
      Protocol: tcp
      ListenerPort: 80
      BackendServerPort: 80
      AclStatus: "off"
      LoadBalancerId:
        Ref: Slb
      Scheduler: wrr
      Bandwidth: -1
  EcsInstanceGroup:
    Type: ALIYUN::ECS::InstanceGroup
    Properties:
      InstanceChargeType: PostPaid
      ZoneId:
        Ref: Zone1
      VpcId:
        Ref: Vpc
      VSwitchId:
        Ref: VSwitch001
      SecurityGroupId:
        Ref: SecurityGroup
      ImageId: centos_7
      SystemDiskCategory: cloud_essd
      SystemDiskSize: 40
      MaxAmount: 2
      InstanceType:
        Ref: APPEcsInstanceType
      Password:
        Ref: ECSInstancePassword
      InstanceName: APP[1,3]
      HostName: APP[1,3]
      AllocatePublicIP: false
  InstallHttpd:
    Type: ALIYUN::ECS::RunCommand
    Properties:
      InstanceIds:
        Fn::GetAtt:
        - EcsInstanceGroup
        - InstanceIds
      Type: RunShellScript
      Sync: true
      Timeout: 3600
      CommandContent:
        Fn::Sub: |-
          #!/bin/bash
          yum install -y httpd
          yum install -y mysql
          systemctl start httpd
          systemctl enable httpd
          cat <<EOF > /var/www/html/local.html
          <html>
          hostname:`hostname`
          </html>
          EOF
  EcsInstance:
    Type: ALIYUN::ECS::Instance
    Properties:
      InstanceChargeType: PostPaid
      ZoneId:
        Ref: Zone2
      VpcId:
        Ref: Vpc
      VSwitchId:
        Ref: VSwitch002
      SecurityGroupId:
        Ref: SecurityGroup
      ImageId: centos_7
      IoOptimized: optimized
      SystemDiskCategory: cloud_essd
      SystemDiskPerformanceLevel: PL0
      SystemDiskSize: 40
      DiskMappings:
      - Size: 100
        Category: cloud_essd
      InstanceType:
        Ref: RegionEcsInstanceType
      Password:
        Ref: ECSInstancePassword
      InstanceName: region001
      HostName: region001
      AllocatePublicIP: false
  InstallPHP:
    Type: ALIYUN::ECS::RunCommand
    Properties:
      InstanceIds:
        - Ref: EcsInstance
      Type: RunShellScript
      Sync: true
      Timeout: 3600
      CommandContent:
        Fn::Sub: 
        - |
          #!/bin/bash
          mkdir -p /opt/pma
          cd /opt/pma/
          wget --no-check-certificate https://files.phpmyadmin.net/phpMyAdmin/4.8.5/phpMyAdmin-4.8.5-all-languages.zip
          yum install -y httpd php-mysql php
          yum remove -y php.x86_64 php-cli.x86_64 php-common.x86_64 php-gd.x86_64 php-ldap.x86_64 php-mbstring.x86_64 php-mcrypt.x86_64 php-mysql.x86_64 php-pdo.x86_64
          rpm -Uvh https://mirror.webtatic.com/yum/el7/epel-release.rpm
          rpm -Uvh https://mirror.webtatic.com/yum/el7/webtatic-release.rpm
          yum install -y php56w.x86_64 php56w-cli.x86_64 php56w-common.x86_64 php56w-gd.x86_64 php56w-ldap.x86_64 php56w-mbstring.x86_64 php56w-mcrypt.x86_64 php56w-mysql.x86_64 php56w-pdo.x86_64
          yum install -y unzip
          unzip phpMyAdmin-4.8.5-all-languages.zip
          cp -a phpMyAdmin-4.8.5-all-languages /var/www/html/pma
          cd /var/www/html/pma
          cp config.sample.inc.php config.inc.php
          sed -i "17,17c \$cfg[\'blowfish_secret\'] = \'e259bce8e511a1a5176840f26dc27717\';" config.inc.php
          sed -i "31,31c \$cfg['Servers'][$i]['host'] = '${DBEndpoint}';" config.inc.php
          systemctl start httpd 
        - DBEndpoint:
            Fn::GetAtt:
            - Rds
            - InnerConnectionString
  Rds:
    Type: ALIYUN::RDS::DBInstance
    Properties:
      Engine: MySQL
      DBInstanceStorage: 100
      EngineVersion: "5.7"
      Port: 3306
      Category: HighAvailability
      DBInstanceStorageType: local_ssd
      DBInstanceClass: 
        Ref: DBInstanceClass
      SecurityIPList: 192.168.0.0/16
      ZoneId:
        Ref: Zone1
      SlaveZoneIds:
      - Ref: Zone2
      VpcId:
        Ref: Vpc
      VSwitchId:
        Fn::Join:
        - ','
        - - Ref: VSwitch001
          - Ref: VSwitch002
      PayType: Postpaid
      MasterUserType: Normal
      MasterUsername: appdb_user
      MasterUserPassword: 
        Ref: RDSUserPassword
  RdsDatabase:
    Type: ALIYUN::RDS::Database
    Properties:
      CharacterSetName: utf8
      DBInstanceId:
        Ref: Rds
      DBName: appdb
  RdsAccountPrivilege:
    Type: ALIYUN::RDS::AccountPrivilege
    DependsOn: RdsDatabase
    Properties:
      AccountPrivilege: ReadWrite
      DBInstanceId:
        Ref: Rds
      DBName: appdb
      AccountName: appdb_user
Outputs:
  EcsInstances:
    Description:
      en: View the list of created ECS instances.
      zh-cn: 查看创建的ECS实例列表。
    Value:
      Fn::Sub:
      - <a href="https://ecs.console.aliyun.com/server/region/${region}?instanceIds=${instance1},${instance2},${instance3}"
        target="_blank">URL</a>
      - region:
          Ref: ALIYUN::Region
        instance1:
          Fn::Select:
          - '0'
          - Fn::GetAtt:
            - EcsInstanceGroup
            - InstanceIds
        instance2:
          Fn::Select:
          - '1'
          - Fn::GetAtt:
            - EcsInstanceGroup
            - InstanceIds
        instance3:
          Fn::GetAtt:
            - EcsInstance
            - InstanceId
  SlbLoadBalancer:
    Description:
      en: View the created SLB LoadBalancer
      zh-cn: 查看创建的SLB实例
    Value:
      Fn::Sub:
      - <a href="https://slb.console.aliyun.com/slb/${region}/slbs/${LoadBalancerId}"
        target="_blank">URL</a>
      - region:
          Ref: ALIYUN::Region
        LoadBalancerId:
          Ref: Slb
  RdsInstance:
    Description: 
      en: View the created RDS instacne.
      zh-cn: 查看创建的RDS实例
    Value:
      Fn::Sub:
      - <a href="https://rdsnext.console.aliyun.com/detail/${RDSinstance}/basicInfo?region=${region}"
        target="_blank">URL</a>
      - region:
          Ref: ALIYUN::Region
        RDSinstance:
          Ref: Rds
  RdsDatabaseName:
    Description:
      en: Rds database name.
      zh-cn: RDS 数据库名称
    Value: appdb
  RdsUserName: 
    Description:
      en: RDS user name.
      zh-cn: RDS用户名称。
    Value: appdb_user
  AppEcsIP:
    Description:
      en: Backend service address access
      zh-cn: 访问后端服务地址
    Value:
      Fn::Sub:
      - "http://${app_ip}/local.html"
      - app_ip:
        Fn::GetAtt:
        - Eip001Association
        - EipAddress
  PHPAdminIP:
    Description:
      en: Region server database access
      zh-cn: 区域服务器数据库访问
    Value:
     Fn::Sub:
     - "http://${eip}/pma"
     - eip:
       Fn::GetAtt:
       - Eip002Association
       - EipAddress
Rules:
  DifferentZones:
    Assertions:
    - Assert:
        Fn::Not:
          Fn::Equals:
          - Ref: Zone1
          - Ref: Zone2
      AssertDescription: Zones must be different.
Metadata:
  ALIYUN::ROS::Interface:
    ParameterGroups:
    - Parameters:
      - LoadBalancerSpec
      Label:
        default:
          en: SLB param
          zh-cn: SLB实例配置
    - Parameters:
      - APPEcsInstanceType
      - RegionEcsInstanceType
      - ECSInstancePassword
      Label:
        default:
          en: Instance
          zh-cn: ECS实例配置
    - Parameters:
      - DBInstanceClass
      - RDSUserPassword
      Label:
        default:
          en: DB instance param.
          zh-cn: RDS实例配置
    - Parameters:
      - Zone1
      - Zone2
      Label:
        default:
          en: Availability Zone
          zh-cn: 可用区配置
    TemplateTags:
    - acs:technical-solution:ecs:云上网站经典架构