模板名稱
ACS-ESS-ECILifeCycleModifyAnalyticDBIPWhitelist ECI使用生命週期掛鈎設定AnalyticDB執行個體的IP白名單
模板描述
ECI使用生命週期掛鈎設定AnalyticDB執行個體的IP白名單
模板類型
自動化
所有者
Alibaba Cloud
輸入參數
參數名稱 | 描述 | 類型 | 是否必填 | 預設值 | 約束 |
dbClusterId | AnalyticDB叢集ID | String | 是 | ||
modifyMode | 修改IP白名單的方式 | String | 是 | ||
regionId | 地區ID | String | 否 | ${regionId} | |
instanceIds | ECS執行個體ID列表 | List | 否 | ['${instanceIds}'] | |
lifecycleHookId | 生命週期掛鈎ID | String | 否 | ${lifecycleHookId} | |
lifecycleActionToken | 執行個體關聯的特定伸縮活動的令牌 | String | 否 | ${lifecycleActionToken} | |
OOSAssumeRole | OOS扮演的RAM角色 | String | 否 | OOSServiceRole |
輸出參數
參數名稱 | 描述 | 類型 |
ipAddresses | List |
執行此模板需要的權限原則
{
"Version": "1",
"Statement": [
{
"Action": [
"eci:DescribeContainerGroups"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"adb:ModifyDBClusterAccessWhiteList"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"ess:CompleteLifecycleAction"
],
"Resource": "*",
"Effect": "Allow"
}
]
}
詳情
ACS-ESS-ECILifeCycleModifyAnalyticDBIPWhitelist詳情
模板內容
FormatVersion: OOS-2019-06-01
Description:
en: Use lifecycleHook to modify the IP whitelist of the AnalyticDB instance
zh-cn: ECI使用生命週期掛鈎設定AnalyticDB執行個體的IP白名單
name-en: ACS-ESS-ECILifeCycleModifyAnalyticDBIPWhitelist
name-zh-cn: ECI使用生命週期掛鈎設定AnalyticDB執行個體的IP白名單
categories:
- elastic_manage
Parameters:
dbClusterId:
Label:
en: DBClusterId
zh-cn: AnalyticDB叢集ID
Type: String
modifyMode:
Label:
en: ModifyMode
zh-cn: 修改IP白名單的方式
Description:
en: The method to modify the IP whitelist, Delete is used for elastic contraction activities, and Append is used for elastic expansion activities
zh-cn: 修改IP白名單的方式,Append用於彈性擴張活動,Delete用於彈性收縮活動
Type: String
AllowedValues:
- Append
- Delete
regionId:
Label:
en: RegionId
zh-cn: 地區ID
Description:
en: The ID of region
zh-cn: '地區ID,請使用Auto Scaling系統預設值 ${regionId}'
Type: String
Default: '${regionId}'
instanceIds:
Label:
en: InstanceIds
zh-cn: ECS執行個體ID列表
Description:
en: The ID list of the ECS instance
zh-cn: 'ECS執行個體ID列表,請使用Auto Scaling系統預設值 ["${instanceId}"]'
Type: List
Default:
- '${instanceIds}'
lifecycleHookId:
Label:
en: LifecycleHookId
zh-cn: 生命週期掛鈎ID
Description:
en: The ID of the lifecycle hook
zh-cn: '生命週期掛鈎ID,請使用Auto Scaling系統預設值 ${lifecycleHookId}'
Type: String
Default: '${lifecycleHookId}'
lifecycleActionToken:
Label:
en: LifecycleActionToken
zh-cn: 執行個體關聯的特定伸縮活動的令牌
Description:
en: The token that indicates a specific scaling activity associated with an instance
zh-cn: '執行個體關聯的特定伸縮活動的令牌,請使用Auto Scaling系統預設值 ${lifecycleActionToken}'
Type: String
Default: '${lifecycleActionToken}'
OOSAssumeRole:
Label:
en: OOSAssumeRole
zh-cn: OOS扮演的RAM角色
Type: String
Default: OOSServiceRole
RamRole: '{{ OOSAssumeRole }}'
Tasks:
- Name: getInstanceIpAddress
Action: 'ACS::ExecuteAPI'
Description:
en: Get ip address of ECI instance
zh-cn: 擷取ECI執行個體的Ip地址
OnError: CompleteLifecycleActionForAbandon
Properties:
Service: ECI
API: DescribeContainerGroups
Parameters:
RegionId: '{{ regionId }}'
ContainerGroupIds: '{{ instanceIds }}'
Outputs:
ipAddress:
Type: List
ValueSelector: '.ContainerGroups[].IntranetIp'
- Name: modifySecurityIps
Action: 'ACS::ExecuteAPI'
Description:
en: Modifies the whitelist
zh-cn: 修改白名單
OnError: CompleteLifecycleActionForAbandon
OnSuccess: CompleteLifecycleActionForContinue
Properties:
Service: ADB
API: ModifyDBClusterAccessWhiteList
Parameters:
RegionId: '{{ regionId }}'
ModifyMode: '{{ modifyMode }}'
DBClusterId: '{{ dbClusterId }}'
SecurityIps:
'Fn::Join':
- ','
- '{{ getInstanceIpAddress.Ips }}'
- Name: CompleteLifecycleActionForContinue
Action: 'ACS::ExecuteAPI'
Description:
en: Modify lifecycle action for continue
zh-cn: 修改伸縮活動的等待狀態為繼續完成
OnSuccess: 'ACS::END'
Properties:
Service: ESS
API: CompleteLifecycleAction
Parameters:
RegionId: '{{ regionId }}'
LifecycleHookId: '{{ lifecycleHookId }}'
LifecycleActionToken: '{{ lifecycleActionToken }}'
LifecycleActionResult: CONTINUE
- Name: CompleteLifecycleActionForAbandon
Action: 'ACS::ExecuteAPI'
Description:
en: Complete lifecycle action for Abandon
zh-cn: 修改伸縮活動的等待狀態為棄用
Properties:
Service: ESS
API: CompleteLifecycleAction
Parameters:
RegionId: '{{ regionId }}'
LifecycleHookId: '{{ lifecycleHookId }}'
LifecycleActionToken: '{{ lifecycleActionToken }}'
LifecycleActionResult: ABANDON
Outputs:
ipAddresses:
Type: List
Value: '{{ getInstanceIpAddress.Ips }}'