ACS-CS-BulkyOSSecurityUpdate - CloudOps Orchestration Service

Nama template

ACS-CS-BulkyOSSecurityUpdate

Jalankan Sekarang

Deskripsi template

Memperbarui kernel sistem operasi.

Tipe template

Otomatis

Pemilik

Alibaba Cloud

Parameter input

Parameter	Deskripsi	Tipe	Diperlukan	Nilai default	Batasan
targets	Instance tujuan.	Json	Ya
regionId	ID wilayah.	String	Tidak	{{ ACS::RegionId }}
rateControl	Laju konkurensi eksekusi tugas	Json	Tidak	{'Mode': 'Concurrency', 'MaxErrors': 0, 'Concurrency': 10}
OOSAssumeRole	Peran RAM yang diasumsikan oleh CloudOps Orchestration Service (OOS).	String	Tidak	""

Parameter output

Parameter	Deskripsi	Tipe
commandOutputs		List

Kebijakan izin yang diperlukan untuk menjalankan template

{
    "Version": "1",
    "Statement": [
        {
            "Action": [
                "ecs:DescribeInstances",
                "ecs:DescribeInvocationResults",
                "ecs:DescribeInvocations",
                "ecs:RunCommand"
            ],
            "Resource": "*",
            "Effect": "Allow"
        },
        {
            "Action": [
                "oos:GetApplicationGroup"
            ],
            "Resource": "*",
            "Effect": "Allow"
        }
    ]
}

Detail

Untuk informasi lebih lanjut, lihat ACS-CS-BulkyOSSecurityUpdate.yml di GitHub.

Isi Template

FormatVersion: OOS-2019-06-01
Description:
  en: Memperbarui keamanan OS
   
  name-en: ACS-CS-BulkyOSSecurityUpdate
   
  categories:
    - run_command
Parameters:
  regionId:
    Type: String
    Label:
      en: RegionId
       
    AssociationProperty: RegionId
    Default: '{{ ACS::RegionId }}'
  targets:
    Label:
      en: TargetInstance
       
    Type: Json
    AssociationProperty: Targets
    AssociationPropertyMetadata:
      ResourceType: 'ALIYUN::ECS::Instance'
      RegionId: regionId
  rateControl:
    Label:
      en: RateControl
       
    Type: Json
    AssociationProperty: RateControl
    Default:
      Mode: Concurrency
      MaxErrors: 0
      Concurrency: 10
  OOSAssumeRole:
    Label:
      en: OOSAssumeRole
       
    Type: String
    Default: ''
RamRole: '{{ OOSAssumeRole }}'
Tasks:
  - Name: getInstance
    Description:
      en: Melihat instance ECS
       
    Action: ACS::SelectTargets
    Properties:
      ResourceType: ALIYUN::ECS::Instance
      RegionId: '{{ regionId }}'
      Filters:
        - '{{ targets }}'
    Outputs:
      instanceIds:
        Type: List
        ValueSelector: Instances.Instance[].InstanceId
  - Name: runCommand
    Action: ACS::ECS::RunCommand
    Description:
      en: Menjalankan perintah asisten cloud
       
    Properties:
      regionId: '{{ regionId }}'
      commandContent: |-
        yum update-minimal --exclude kernel* --security -y || true
      instanceId: '{{ ACS::TaskLoopItem }}'
      commandType: RunShellScript
    Loop:
      RateControl: '{{ rateControl }}'
      Items: '{{ getInstance.instanceIds }}'
      Outputs:
        commandOutputs:
          AggregateType: Fn::ListJoin
          AggregateField: commandOutput
    Outputs:
      commandOutput:
        Type: String
        ValueSelector: invocationOutput
Outputs:
  commandOutputs:
    Type: List
    Value: '{{ runCommand.commandOutputs }}'
Metadata:
  ALIYUN::OOS::Interface:
    ParameterGroups:
      - Parameters:
          - regionId
          - targets
        Label:
          default:
             
            en: Pilih Instance
      - Parameters:
          - rateControl
          - OOSAssumeRole
        Label:
          default:
             
            en: Opsi Kontrol