Template name
ACS-ECS-ApproveBulkyRunCommand
Template description
Runs a command on multiple Elastic Compute Service (ECS) instances at a time after approval.
Template type
Automated
Owner
Alibaba Cloud
Input parameters
Parameter | Description | Type | Required | Default value | Limit |
targets | The ECS instances on which you want to run a command. | Json | Yes | ||
commandContent | The Cloud Assistant command to be run on the ECS instances. | String | Yes | ||
webHookUrl | The webhook URL of the DingTalk chatbot. | String | Yes | ||
atMobiles | The users to whom approval notifications are sent in the specified DingTalk group. | List | Yes | ||
approvers | The users who can approve or reject the O&M task. | List | Yes | ||
regionId | The region ID. | String | No | {{ ACS::RegionId }} | |
commandType | The type of the Cloud Assistant command. | String | No | RunShellScript | |
rateControl | The rate control settings. | Json | No | {'Mode': 'Concurrency', 'MaxErrors': 0, 'Concurrency': 10} | |
atAll | Specifies whether to notify all group members when an approval notification is sent to the specified DingTalk group. | String | No | false | |
minRequiredApprovals | The minimum number of approvers who are required to approve the O&M task. | Number | No | 1 | |
OOSAssumeRole | The Resource Access Management (RAM) role that is assumed by CloudOps Orchestration Service (OOS). | String | No | "" |
Output parameters
Parameter | Description | Type |
commandOutputs | List |
Permission policy that is required to execute the template
{
"Version": "1",
"Statement": [
{
"Action": [
"ecs:DescribeInstances",
"ecs:DescribeInvocationResults",
"ecs:DescribeInvocations",
"ecs:DescribeManagedInstances",
"ecs:RunCommand"
],
"Resource": "*",
"Effect": "Allow"
}
]
}
References
For more information, see ACS-ECS-ApproveBulkyRunCommand.yml at GitHub.
Template content
FormatVersion: OOS-2019-06-01
Description:
en: Approve Bulky RunCommand
zh-cn: the description in Chinese
name-en: ACS-ECS-ApproveBulkyRunCommand
name-zh-cn: the description in Chinese
categories:
- instance_manage
Parameters:
regionId:
Type: String
Label:
en: RegionId
zh-cn: the description in Chinese
AssociationProperty: RegionId
Default: '{{ ACS::RegionId }}'
targets:
Label:
en: TargetInstance
zh-cn: the description in Chinese
Type: Json
AssociationProperty: Targets
AssociationPropertyMetadata:
ResourceType: 'ALIYUN::ECS::Instance'
RegionId: regionId
commandType:
Label:
en: CommandType
zh-cn: the description in Chinese
Type: String
AllowedValues:
- RunBatScript
- RunPowerShellScript
- RunShellScript
Default: RunShellScript
commandContent:
Label:
en: CommandContent
zh-cn: the description in Chinese
Type: String
AssociationProperty: Code
rateControl:
Label:
en: RateControl
zh-cn: the description in Chinese
Type: Json
AssociationProperty: RateControl
Default:
Mode: Concurrency
MaxErrors: 0
Concurrency: 10
webHookUrl:
Label:
en: WebHookUrl
zh-cn: the description in Chinese
Description:
en: >-
e.g.https://oapi.dingtalk.com/robot/send?access_token=1234zxcvaksdq31414,acquiring DingTalk webhook please refer to second appendix in https://help.aliyun.com/document_detail/144679.html.
zh-cn: the description in Chinese
Type: String
atMobiles:
Label:
en: AtMobiles
zh-cn: the description in Chinese
Type: List
atAll:
Label:
en: AtAll
zh-cn: the description in Chinese
Type: String
Default: 'false'
approvers:
Label:
en: Approvers
zh-cn: the description in Chinese
Description:
en: The name to fill is the front part of @ in the RAM user name,if RAM user is user***@companyAlias.onaliyun.com, then fill user001 in list.
zh-cn: the description in Chinese
Type: List
AssociationProperty: ALIYUN::RAM::User
minRequiredApprovals:
Label:
en: MinRequiredApprovals
zh-cn: the description in Chinese
Type: Number
Default: 1
OOSAssumeRole:
Label:
en: OOSAssumeRole
zh-cn: the description in Chinese
Type: String
Default: ''
RamRole: '{{ OOSAssumeRole }}'
Tasks:
- Name: approveBulkyRuncommand
Action: 'ACS::Approve'
Description:
en: Approve operation task runcommand
zh-cn: the description in Chinese
Properties:
Approvers: '{{approvers}}'
MinRequiredApprovals: '{{minRequiredApprovals}}'
NotifyType: WebHook
WebHook:
URI: '{{webhookUrl}}'
Headers:
Content-Type: application/json
Content:
msgtype: text
text:
content: >-
Notify: Please approve the task execution to create ECS instance sent by
{{ACS::RegionId}} oos {{ACS::ExecutionId}} .
at:
atMobiles: '{{atMobiles}}'
isAtAll: '{{atAll}}'
- Name: bulkyRunCommand
Action: ACS::Template
Description:
en: Execute cloud assistant command
zh-cn: the description in Chinese
Properties:
TemplateName: ACS-ECS-BulkyRunCommand
Parameters:
regionId: '{{ regionId }}'
commandContent: '{{ commandContent }}'
commandType: '{{ commandType }}'
targets: '{{ targets }}'
rateControl: '{{ rateControl }}'
Outputs:
commandOutputs:
Type: List
ValueSelector: commandOutputs
Outputs:
commandOutputs:
Type: List
Value: '{{ bulkyRunCommand.commandOutputs }}'
Metadata:
ALIYUN::OOS::Interface:
ParameterGroups:
- Parameters:
- webHookUrl
- atMobiles
- atAll
- approvers
- minRequiredApprovals
Label:
default:
zh-cn: the description in Chinese
en: Configure Approval
- Parameters:
- commandType
- commandContent
Label:
default:
zh-cn: the description in Chinese
en: Configure Command
- Parameters:
- regionId
- targets
Label:
default:
zh-cn: the description in Chinese
en: Select Instances
- Parameters:
- rateControl
- OOSAssumeRole
Label:
default:
zh-cn: the description in Chinese
en: Control Options