forked from aliyun/ros-templates
-
Notifications
You must be signed in to change notification settings - Fork 1
/
ack-cube-game.yml
434 lines (434 loc) · 13 KB
/
ack-cube-game.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
ROSTemplateFormatVersion: '2015-09-01'
Description:
en: Deploy cube game using ACK.
zh-cn: 使用ACK部署魔方游戏。
Parameters:
AckName:
Type: String
Label:
en: Cluster Name
zh-cn: 集群名称
Description:
en: The name must be 1 to 63 characters in length and can contain letters, Chinese
characters, digits, and hyphens (-).
zh-cn: 名称为1~63个字符，可包含数字、汉字、英文字符或中划线（-）。
Default: ack-demo
AllowedPattern: ^[a-zA-Z0-9\u4e00-\u9fa5][-a-zA-Z0-9\u4e00-\u9fa5]{0,62}$
ZoneId:
Type: String
Label:
en: VSwitch Available Zone
zh-cn: 可用区
AssociationProperty: ALIYUN::VPC::Zone::ZoneId
InstanceType:
Type: String
Label:
en: Instance Type
zh-cn: 节点规格
Description:
en: It is recommended to use a new generation of ecs instances. If the instance
specification cannot be selected, please change the availability zone again.
zh-cn: 建议使用新一代的 ecs 实例，如果选择不到实例规格，请重新更换可用区。
AssociationProperty: ALIYUN::ECS::Instance::InstanceType
AssociationPropertyMetadata:
ZoneId: ${ZoneId}
AllowedPattern: ^(ecs\.[a-z6-9]+\.)[1-9]?xlarge$
SystemDiskCategory:
Type: String
Label:
en: Worker System Disk Category
zh-cn: 节点系统盘磁盘类型
LoginPassword:
Type: String
Label:
en: Instance Password
zh-cn: 节点登录密码
Description:
en: |-
The password must be 8 to 32 characters in length. <br>
It must consist three of the the following character types: uppercase letters, lowercase letters, digits, and special characters. <br>
Special characters include <span style="background:#E7E9EB;"><b>()`~!@#$%^&*_-+=|{}[]:;'<>,.?/</b></span>.<br>
zh-cn: 长度为8-30位，需包含大写字母、小写字母、特殊符号和数字中的三个，允许的特殊字符包括<span style="background:#E7E9EB;"><b>()`~!@#$%^&*_-+=|{}[]:;'<>,.?/</b></span>。
AssociationProperty: ALIYUN::ECS::Instance::Password
Resources:
EnableAck:
Type: ALIYUN::ROS::AutoEnableService
Properties:
ServiceName: CS
AliyunCSManagedLogRole:
Type: ALIYUN::RAM::Role
Properties:
RoleName: AliyunCSManagedLogRole
Description: 容器服务(CS) Kubernetes 集群日志组件使用此角色来访问您在其他云产品中的资源。
AssumeRolePolicyDocument:
Version: '1'
Statement:
- Action: sts:AssumeRole
Effect: Allow
Principal:
Service:
- cs.aliyuncs.com
MaxSessionDuration: 3600
IgnoreExisting: true
DeletionForce: true
PolicyAttachments:
System:
- AliyunCSManagedLogRolePolicy
AliyunCSManagedCmsRole:
Type: ALIYUN::RAM::Role
Properties:
RoleName: AliyunCSManagedCmsRole
Description: 容器服务(CS) 集群CMS组件使用此角色来访问您在其他云产品中的资源。
AssumeRolePolicyDocument:
Version: '1'
Statement:
- Action: sts:AssumeRole
Effect: Allow
Principal:
Service:
- cs.aliyuncs.com
MaxSessionDuration: 3600
IgnoreExisting: true
DeletionForce: true
PolicyAttachments:
System:
- AliyunCSManagedCmsRolePolicy
AliyunCSManagedCsiRole:
Type: ALIYUN::RAM::Role
Properties:
RoleName: AliyunCSManagedCsiRole
Description: 容器服务(CS) Kubernetes 集群存储插件使用此角色来访问您在其他云产品中的资源。
AssumeRolePolicyDocument:
Version: '1'
Statement:
- Action: sts:AssumeRole
Effect: Allow
Principal:
Service:
- cs.aliyuncs.com
MaxSessionDuration: 3600
IgnoreExisting: true
DeletionForce: true
PolicyAttachments:
System:
- AliyunCSManagedCsiRolePolicy
AliyunCSManagedVKRole:
Type: ALIYUN::RAM::Role
Properties:
RoleName: AliyunCSManagedVKRole
Description: 容器服务(CS) Serverless集群VK组件使用此角色来访问您在其他云产品中的资源。
AssumeRolePolicyDocument:
Version: '1'
Statement:
- Action: sts:AssumeRole
Effect: Allow
Principal:
Service:
- cs.aliyuncs.com
MaxSessionDuration: 3600
IgnoreExisting: true
DeletionForce: true
PolicyAttachments:
System:
- AliyunCSManagedVKRolePolicy
AliyunCSClusterRole:
Type: ALIYUN::RAM::Role
Properties:
RoleName: AliyunCSClusterRole
Description: 容器服务(CS)在应用运行期使用此角色来访问您在其他云产品中的资源。
AssumeRolePolicyDocument:
Version: '1'
Statement:
- Action: sts:AssumeRole
Effect: Allow
Principal:
Service:
- cs.aliyuncs.com
MaxSessionDuration: 3600
IgnoreExisting: true
DeletionForce: true
PolicyAttachments:
System:
- AliyunCSClusterRolePolicy
AliyunCSServerlessKubernetesRole:
Type: ALIYUN::RAM::Role
Properties:
RoleName: AliyunCSServerlessKubernetesRole
Description: 容器服务(CS) Serverless Kubernetes版 默认使用此角色来访问您在其他云产品中的资源。
AssumeRolePolicyDocument:
Version: '1'
Statement:
- Action: sts:AssumeRole
Effect: Allow
Principal:
Service:
- cs.aliyuncs.com
MaxSessionDuration: 3600
IgnoreExisting: true
DeletionForce: true
PolicyAttachments:
System:
- AliyunCSServerlessKubernetesRolePolicy
AliyunCSKubernetesAuditRole:
Type: ALIYUN::RAM::Role
Properties:
RoleName: AliyunCSKubernetesAuditRole
Description: 容器服务(CS) Kubernetes 审计功能使用此角色来访问您在其他云产品中的资源。
AssumeRolePolicyDocument:
Version: '1'
Statement:
- Action: sts:AssumeRole
Effect: Allow
Principal:
Service:
- cs.aliyuncs.com
MaxSessionDuration: 3600
IgnoreExisting: true
DeletionForce: true
PolicyAttachments:
System:
- AliyunCSKubernetesAuditRolePolicy
AliyunCSManagedNetworkRole:
Type: ALIYUN::RAM::Role
Properties:
RoleName: AliyunCSManagedNetworkRole
Description: 容器服务(CS) 集群网络组件使用此角色来访问您在其他云产品中的资源。
AssumeRolePolicyDocument:
Version: '1'
Statement:
- Action: sts:AssumeRole
Effect: Allow
Principal:
Service:
- cs.aliyuncs.com
MaxSessionDuration: 3600
IgnoreExisting: true
DeletionForce: true
PolicyAttachments:
System:
- AliyunCSManagedNetworkRolePolicy
AliyunCSDefaultRole:
Type: ALIYUN::RAM::Role
Properties:
RoleName: AliyunCSDefaultRole
Description: 容器服务(CS)在集群操作时默认使用此角色来访问您在其他云产品中的资源。
AssumeRolePolicyDocument:
Version: '1'
Statement:
- Action: sts:AssumeRole
Effect: Allow
Principal:
Service:
- cs.aliyuncs.com
MaxSessionDuration: 3600
IgnoreExisting: true
DeletionForce: true
PolicyAttachments:
System:
- AliyunCSDefaultRolePolicy
AliyunCSManagedKubernetesRole:
Type: ALIYUN::RAM::Role
Properties:
RoleName: AliyunCSManagedKubernetesRole
Description: 容器服务(CS) Managed Kubernetes版 默认使用此角色来访问您在其他云产品中的资源。
AssumeRolePolicyDocument:
Version: '1'
Statement:
- Action: sts:AssumeRole
Effect: Allow
Principal:
Service:
- cs.aliyuncs.com
MaxSessionDuration: 3600
IgnoreExisting: true
DeletionForce: true
PolicyAttachments:
System:
- AliyunCSManagedKubernetesRolePolicy
AliyunCSManagedArmsRole:
Type: ALIYUN::RAM::Role
Properties:
RoleName: AliyunCSManagedArmsRole
Description: 容器服务(CS) Kubernetes 集群Arms插件使用此角色来访问您在其他云产品中的资源。
AssumeRolePolicyDocument:
Version: '1'
Statement:
- Action: sts:AssumeRole
Effect: Allow
Principal:
Service:
- cs.aliyuncs.com
MaxSessionDuration: 3600
IgnoreExisting: true
DeletionForce: true
PolicyAttachments:
System:
- AliyunCSManagedArmsRolePolicy
Vpc:
Type: ALIYUN::ECS::VPC
Properties:
CidrBlock: 192.168.0.0/16
Vswitch:
Type: ALIYUN::ECS::VSwitch
Properties:
ZoneId:
Ref: ZoneId
VpcId:
Ref: Vpc
CidrBlock: 192.168.0.0/24
NatGateway:
Type: ALIYUN::VPC::NatGateway
Properties:
ZoneId:
Ref: ZoneId
VpcId:
Ref: Vpc
VSwitchId:
Ref: Vswitch
Ack:
Type: ALIYUN::CS::ManagedKubernetesCluster
Properties:
VpcId:
Ref: Vpc
VSwitchIds:
- Ref: Vswitch
PodVswitchIds:
- Ref: Vswitch
Name:
Ref: AckName
NumOfNodes: 2
ClusterSpec: ack.pro.small
ServiceCidr: 172.16.0.0/16
Addons:
- Name: security-inspector
- Name: terway-eniip
Config: '{"IPVlan":"false","NetworkPolicy":"false","ENITrunking":"false"}'
- Name: csi-plugin
- Name: csi-provisioner
- Name: storage-operator
Config: '{"CnfsOssEnable":"false","CnfsNasEnable":"false"}'
- Name: logtail-ds
Config: '{"IngressDashboardEnabled":"true"}'
- Name: ack-node-problem-detector
Config: '{"sls_project_name":""}'
- Name: nginx-ingress-controller
Config: '{"IngressSlbNetworkType":"internet","IngressSlbSpec":"slb.s2.small"}'
- Name: ack-node-local-dns
- Name: arms-prometheus
EndpointPublicAccess: true
SnatEntry: true
IsEnterpriseSecurityGroup: true
WorkerInstanceTypes:
- Ref: InstanceType
WorkerSystemDiskCategory:
Ref: SystemDiskCategory
WorkerSystemDiskSize: 120
LoginPassword:
Ref: LoginPassword
Runtime:
Name: containerd
Version: 1.6.20
DependsOn:
- AliyunCSClusterRole
- AliyunCSDefaultRole
- AliyunCSKubernetesAuditRole
- AliyunCSManagedArmsRole
- AliyunCSManagedCmsRole
- AliyunCSManagedCsiRole
- AliyunCSManagedKubernetesRole
- AliyunCSManagedLogRole
- AliyunCSManagedNetworkRole
- AliyunCSManagedVKRole
- AliyunCSServerlessKubernetesRole
- EnableAck
- NatGateway
AckCubeApplication:
Type: ALIYUN::CS::ClusterApplication
Properties:
ClusterId:
Ref: Ack
YamlContent: |-
apiVersion: apps/v1
kind: Deployment
metadata:
name: ack-cube
labels:
app: ack-cube
annotations: {}
spec:
replicas: 2
selector:
matchLabels:
app: ack-cube
template:
metadata:
labels:
app: ack-cube
annotations: {}
spec:
containers:
- name: ack-cube
image: registry.cn-hangzhou.aliyuncs.com/acr-toolkit/ack-cube:1.0
resources:
limits:
cpu: '1'
memory: 1024Mi
requests:
cpu: '0.5'
memory: 512Mi
volumeMounts: []
ports:
- protocol: TCP
containerPort: 80
name: ack
---
apiVersion: v1
kind: Service
metadata:
name: ack-cube-svc
namespace: ''
annotations:
service.beta.kubernetes.io/alibaba-cloud-loadbalancer-spec: slb.s1.small
spec:
selector:
app: ack-cube
ports:
- protocol: TCP
port: 80
targetPort: 80
type: LoadBalancer
externalTrafficPolicy: Local
KubeAddress:
Type: DATASOURCE::CS::ClusterApplicationResources
Properties:
ClusterId:
Ref: Ack
Kind: Service
Name: ack-cube-svc
JsonPath: $.status.loadBalancer.ingress.[0].ip
FirstMatch: true
DependsOn: AckCubeApplication
Outputs:
CubeAddress:
Description:
en: Cube game access address.
zh-cn: 魔方游戏访问地址。
Value:
Fn::Sub: http://${KubeAddress}
AckClusterId:
Description:
en: Ack cluster id.
zh-cn: Ack集群id。
Value:
Ref: Ack
Metadata:
ALIYUN::ROS::Interface:
ParameterGroups:
- Parameters:
- AckName
- ZoneId
- InstanceType
- SystemDiskCategory
- LoginPassword
TemplateTags:
- acs:document-help:ack:使用ACK部署魔方游戏