ecs-with-java-web-enviroment.yml

ROSTemplateFormatVersion: '2015-09-01'
Description:
  zh-cn: 创建ECS实例，配置VPC、安全组，安装JDK、Tomcat并部署应用，公开8080端口。
  en: Create an ECS instance, configure VPC and security groups, install JDK and Tomcat,
    deploy the application, and expose port 8080.
Parameters:
  TomcatDownloadUrl:
    Type: String
    Label: Tomcat Download Url
    Description: The official download path of .tar.gz
    Default: http://mirrors.tuna.tsinghua.edu.cn/apache/tomcat/tomcat-8/v8.5.41/bin/apache-tomcat-8.5.41.tar.gz
  TomcatInstallationHome:
    Type: String
    Label: Tomcat Installation Home
    Description: TOMCAT_HOME directory should be new.
    Default: /usr/local/tomcat/apache-tomcat-8.5.41
  ImageId:
    Type: String
    Label: ECS Image Id
    Description: Image Id, represents the image resource to startup one ECS instance,
      <a href='#/product/cn-beijing/list/imageList' target='_blank'>View image resources</a>
    Default: centos_7
  InstanceType:
    Type: String
    Label: ECS Instance Type
    Description: The ECS instance type, <a href='#/product/cn-beijing/list/typeList'
      target='_blank'>View instance types</a>
    Default: ecs.c5.large
    AllowedValues:
    - ecs.c5.large
    - ecs.g5.large
    - ecs.c5.xlarge
    - ecs.g5.xlarge
  InstancePassword:
    Type: String
    Label: ECS Instance Password
    Description: The root password of ECS instance. The password is a string of 8
      to 41 characters and must contain uppercase/lowercase letters, numbers.
    ConstraintDescription: Consist of 8 to 30 alphanumeric.
    AllowedPattern: '[a-zA-Z0-9]*'
    MinLength: '8'
    MaxLength: '30'
    NoEcho: true
    Confirm: true
  InstanceSystemDiskCategory:
    Type: String
    Label: Instance System Disk Category
    Description: 'System disk category: average cloud disk(cloud), efficient cloud
      disk(cloud_efficiency) or SSD cloud disk(cloud_ssd)'
    Default: cloud_ssd
    AllowedValues:
    - cloud
    - cloud_efficiency
    - cloud_ssd
  VpcCidrBlock:
    Type: String
    Label: Vpc Cidr Block
    Description: |-
      The IP address range of the VPC in the CIDR block form. You can use the following IP address ranges and their subnets:
      10.0.0.0/8
      172.16.0.0/12 (Default)
      192.168.0.0/16
    Default: 192.168.0.0/16
    AllowedValues:
    - 10.0.0.0/8
    - 172.16.0.0/12
    - 192.168.0.0/16
  VSwitchCidrBlock:
    Type: String
    Label: VSwitch Cidr Block
    Description: Cidr Block of created VSwitch
    Default: 192.168.1.0/24
Resources:
  Vpc:
    Type: ALIYUN::ECS::VPC
    Properties:
      CidrBlock:
        Ref: VpcCidrBlock
      VpcName: Java_Web_VPC
  VSwitch:
    Type: ALIYUN::ECS::VSwitch
    Properties:
      ZoneId:
        Fn::Select:
        - '0'
        - Fn::GetAZs:
            Ref: ALIYUN::Region
      VpcId:
        Fn::GetAtt:
        - Vpc
        - VpcId
      CidrBlock:
        Ref: VSwitchCidrBlock
  SecurityGroup:
    Type: ALIYUN::ECS::SecurityGroup
    Properties:
      VpcId:
        Ref: Vpc
      SecurityGroupIngress:
      - SourceCidrIp: 0.0.0.0/0
        IpProtocol: all
        NicType: internet
        PortRange: -1/-1
        Priority: 1
      SecurityGroupEgress:
      - IpProtocol: all
        DestCidrIp: 0.0.0.0/0
        NicType: internet
        PortRange: -1/-1
        Priority: 1
  WebServer:
    Type: ALIYUN::ECS::Instance
    Properties:
      VpcId:
        Fn::GetAtt:
        - Vpc
        - VpcId
      VSwitchId:
        Ref: VSwitch
      SecurityGroupId:
        Ref: SecurityGroup
      ImageId:
        Ref: ImageId
      Password:
        Ref: InstancePassword
      SystemDiskCategory:
        Ref: InstanceSystemDiskCategory
      InternetMaxBandwidthOut: 80
      UserData:
        Fn::Replace:
        - ros-notify:
            Fn::GetAtt:
            - WebServerConditionHandle
            - CurlCli
        - Fn::Join:
          - ''
          - - '#!/bin/bash

              '
            - TOMCAT_HOME=
            - Ref: TomcatInstallationHome
            - '

              '
            - TomcatUrl=
            - Ref: TomcatDownloadUrl
            - '

              '
            - 'cd /root

              '
            - "yum -y install java \n"
            - "yum -y install aria2 \n"
            - 'aria2c $TomcatUrl

              '
            - "mkdir -p $TOMCAT_HOME \n"
            - "tar zxvf apache-tomcat-*.tar.gz -C $TOMCAT_HOME \n"
            - "cd $TOMCAT_HOME \n"
            - "mv apache-tomcat-*.*/* ./ \n"
            - "rmdir apache-tomcat-*.* \n"
            - "$TOMCAT_HOME/bin/startup.sh \n"
            - '# Config the firewall to allow the port 8080

              '
            - 'systemctl start firewalld.service

              '
            - 'firewall-cmd --zone=public --add-port=8080/tcp

              '
            - 'systemctl stop firewalld.service

              '
            - 'cd /root

              '
            - 'rm -f apache-tomcat-*.tar.gz

              '
            - 'ros-notify -d ''{"data" : "Install Java and Tomcat."}''

              '
      InstanceName: Java_Web_Instance
      InstanceType:
        Ref: InstanceType
  WebServerConditionHandle:
    Type: ALIYUN::ROS::WaitConditionHandle
    Properties: {}
  WebServerGroupWaitCondition:
    Type: ALIYUN::ROS::WaitCondition
    Properties:
      Handle:
        Ref: WebServerConditionHandle
      Timeout: 3600
      Count: 1
    DependsOn: WebServer
Outputs:
  WebsiteURL:
    Description: URL for newly created Apache Tomcat/8.5.41
    Value:
      Fn::Join:
      - ''
      - - http://
        - Fn::GetAtt:
          - WebServer
          - PublicIp
        - :8080