ACS-ECS-BulkyAttachInstanceRamRole - CloudOps Orchestration Service

Nombre de la plantilla

ACS-ECS-BulkyAttachInstanceRamRole: Asigna un rol de RAM a varias instancias.

Ejecutar ahora

Descripción de la plantilla

Asigna un rol de Resource Access Management (RAM) a varias instancias de Elastic Compute Service (ECS).

Tipo de plantilla

Automatización

Propietario

Alibaba Cloud

Parámetros de entrada

Parámetro	Descripción	Tipo	Obligatorio	Valor predeterminado	Restricciones
RamRoleName	Nombre del rol de RAM.	String	Sí
targets	Instancias de destino.	Json	Sí
regionId	ID de la región.	String	No	{{ ACS::RegionId }}
rateControl	Tasa de concurrencia para la ejecución de tareas.	Json	No	{'Mode': 'Concurrency', 'MaxErrors': 0, 'Concurrency': 10}
OOSAssumeRole	Rol de RAM que asume Operation Orchestration Service (OOS).	String	No	""

Parámetros de salida

Parámetro	Descripción	Tipo
instanceIds		List

Permisos obligatorios

{
    "Version": "1",
    "Statement": [
        {
            "Action": [
                "ecs:AttachInstanceRamRole",
                "ecs:DescribeInstances"
            ],
            "Resource": "*",
            "Effect": "Allow"
        },
        {
            "Action": [
                "oos:GetApplicationGroup"
            ],
            "Resource": "*",
            "Effect": "Allow"
        },
        {
            "Action": [
                "ram:PassRole"
            ],
            "Resource": "*",
            "Effect": "Allow"
        }
    ]
}

Detalles

Para obtener más información, consulte ACS-ECS-BulkyAttachInstanceRamRole.yml.

Contenido de la plantilla

FormatVersion: OOS-2019-06-01
Description:
  en: Attaches a RAM role to multiple instances.
  zh-cn: Attaches a RAM role to multiple instances.
  name-en: ACS-ECS-BulkyAttachInstanceRamRole
  name-zh-cn: Attach a RAM role to multiple instances
  categories:
    - instance_manage
Parameters:
  regionId:
    Type: String
    Label:
      en: Region ID
      zh-cn: Region ID
    AssociationProperty: RegionId
    Default: '{{ ACS::RegionId }}'
  RamRoleName:
    Label:
      en: RAM Role Name
      zh-cn: RAM Role Name
    Type: String
  targets:
    Label:
      en: Target Instances
      zh-cn: Target Instances
    Type: Json
    AssociationProperty: Targets
    AssociationPropertyMetadata:
      ResourceType: 'ALIYUN::ECS::Instance'
      RegionId: regionId
  rateControl:
    Label:
      en: Concurrency Control
      zh-cn: Concurrency Control
    Type: Json
    AssociationProperty: RateControl
    Default:
      Mode: Concurrency
      MaxErrors: 0
      Concurrency: 10
  OOSAssumeRole:
    Label:
      en: The RAM role assumed by OOS
      zh-cn: The RAM role assumed by OOS
    Type: String
    Default: ''
RamRole: '{{ OOSAssumeRole }}'
Tasks:
- Name: getInstance
  Description:
    en: Gets the ECS instances.
    zh-cn: Gets the ECS instances.
  Action: ACS::SelectTargets
  Properties:
    RegionId: '{{ regionId }}'
    ResourceType: 'ALIYUN::ECS::Instance'
    Filters:
      - '{{ targets }}'
- Name: attachInstanceRamRole
  Action: ACS::ExecuteApi
  Description:
    en: Attaches the RAM role to the instances.
    zh-cn: Attaches the RAM role to the instances.
  Properties:
    Service: ECS
    API: AttachInstanceRamRole
    Parameters:
      RegionId: '{{ regionId }}'
      RamRoleName: '{{ RamRoleName }}'
      InstanceIds:
        - '{{ ACS::TaskLoopItem }}'
  Loop:
    RateControl: '{{ rateControl }}'
    Items: '{{ getInstance.Instances.Instance[].InstanceId }}'
Outputs:
  instanceIds:
    Type: List
    Value: '{{ getInstance.Instances.Instance[].InstanceId }}'
Metadata:
  ALIYUN::OOS::Interface:
    ParameterGroups:
      - Parameters:
          - RamRoleName
        Label:
          default:
            zh-cn: Configure Parameters
            en: Configure Parameters
      - Parameters:
          - regionId
          - targets
        Label:
          default:
            zh-cn: Select Instances
            en: Select Instances
      - Parameters:
          - rateControl
          - OOSAssumeRole
        Label:
          default:
            zh-cn: Advanced Options
            en: Advanced Options