CDN:Use Terraform to add and configure a CDN domain name

Resources used

Step 1: Add an accelerated domain name

1. Create a working directory and a file named main.tf in the directory. Then, copy the following content to the main.tf file:

   Note

   The domain names in the following sample code, such as mydcdndomain-xxx.alicloud-provider.cn and mycdndomain-xxx.alicloud-provider.cn, work only in the managed environment for running the sample code with a few clicks. You cannot pass ownership verification for these domain names. To run this tutorial in your local environment, replace the value of domain_name with a domain name that you own and for which you have completed ownership verification.

   resource "random_integer" "default" {
     min = 10000
     max = 99999
   }
   
   # Add a domain name.
   resource "alicloud_cdn_domain_new" "domain" {
     domain_name = "mycdndomain-${random_integer.default.result}.alicloud-provider.cn"
     cdn_type    = "download"
     scope       = "overseas"
     sources {
       content  = "myoss-${random_integer.default.result}.oss-rg-china-mainland.aliyuncs.com"
       type     = "oss"
       priority = "20"
       port     = 80
       weight   = "15"
     }
   }

2. Run the following command to initialize the Terraform runtime environment:

   terraform init

   If the following information is returned, Terraform is initialized:

   Initializing the backend...
   Initializing provider plugins...
   ...
   Terraform has been successfully initialized!
   ...

3. Run the following command to add a domain name:

   terraform apply

   During execution, enter yes when prompted and press Enter. Wait until the command completes. If the following information appears, the domain name is added.

   Note

   If the error message "code: 400, Owner verification of the root domain failed" appears, the domain name is added to the CDN system for the first time. You must verify the ownership of the domain name as described in Verify domain name ownership.

   You can apply this plan to save these new output values to the Terraform state, without changing any real infrastructure.
   
   Do you want to perform these actions?
     Terraform will perform the actions described above.
     Only 'yes' will be accepted to approve.
   
     Enter a value: yes
   
   
   Apply complete!  Resources: 2 added, 0 changed, 0 destroyed.

Step 2: Configure a rule for the accelerated domain name

1. Add the following content to the main.tf file.

   # Configure an IP address whitelist for the domain name.
   resource "alicloud_cdn_domain_config" "config-ip" {
     domain_name   = alicloud_cdn_domain_new.domain.domain_name
     function_name = "ip_allow_list_set"
     function_args {
       arg_name  = "ip_list"
       arg_value = "192.168.0.1"
     }
   }

2. Create an execution plan and preview the changes.

   terraform plan

3. Run the following command to configure an IP address whitelist for the domain name:

   terraform apply

   During execution, enter yes when prompted and press Enter. Wait until the command completes. If the following information is returned, the rule is configured.

   Apply complete!  Resources: 1 added, 0 changed, 0 destroyed.

Check the result

terraform show

shell@Alicloud:~/cdn$ terraform show
# alicloud_cdn_domain_config.config-ip:
resource "alicloud_cdn_domain_config" "config-ip" {
    config_id     = "394085720977408"
    domain_name   = "xxx"
    function_name = "ip_allow_list_set"
    id            = "xxx:ip_allow_list_set:394085720977408"
    parent_id     = "0"
    status        = "success"
    function_args {
        arg_name  = "ip_list"
        arg_value = "192.168.0.1"
    }
}
# alicloud_cdn_domain_new.domain:
resource "alicloud_cdn_domain_new" "domain" {
    cdn_type          = "download"
    cname             = "xxx.com.w.cdngslb.com"
    domain_name       = "xxx.com"
    id                = "xxx.com"
    resource_group_id = "rg-acfmykd63gtpfpa"
    scope             = "overseas"
    status            = "online"
    certificate_config {
        cert_type                 = "cas"
        server_certificate_status = "off"
    }
    sources {
        content  = "xxx.oss-rg-china-mainland.aliyuncs.com"
        port     = 80
        priority = 20
        type     = "oss"
        weight   = 15
    }
}

Clear resources

If you no longer need the resources created by Terraform, run the following command to release them. For more information about the terraform destroy command, see Common commands.

terraform destroy

Example

resource "random_integer" "default" {
  min = 10000
  max = 99999
}

# Add a domain name.
resource "alicloud_cdn_domain_new" "domain" {
  domain_name = "mycdndomain-${random_integer.default.result}.alicloud-provider.cn"
  cdn_type    = "download"
  scope       = "overseas"
  sources {
    content  = "myoss-${random_integer.default.result}.oss-rg-china-mainland.aliyuncs.com"
    type     = "oss"
    priority = "20"
    port     = 80
    weight   = "15"
  }
}

# Configure an IP address whitelist for the domain name.
resource "alicloud_cdn_domain_config" "config-ip" {
  domain_name   = alicloud_cdn_domain_new.domain.domain_name
  function_name = "ip_allow_list_set"
  function_args {
    arg_name  = "ip_list"
    arg_value = "192.168.0.1"
  }
}

For more examples, visit the quickstarts page and view the examples in the folder of the corresponding service.