game-business-zone-service-env.yml

ROSTemplateFormatVersion: '2015-09-01'
Description:
  en: This template is used to accelerate user access and enable partitioning and
    aggregation of gaming data. This helps you improve user game experience and increase
    retention rates and profitability.
  zh-cn: 为了提升玩家游戏体验，并提高留存率、增强付费率，除了游戏本身的内容趣味性，改善用户访问加速体验，并对游戏数据分区合服是很常见的业务运营模式。
Conditions:
  IsCreateManageEIP:
    Fn::Equals:
    - Ref: CreateManageEnv
    - false
  IsCreateManageEnv:
    Fn::Equals:
    - Ref: CreateManageEnv
    - true
Parameters:
  CreateManageEnv:
    Type: Boolean
    Label:
      en: Create Region 1 Resources and Nat Gateway
      zh-cn: 是否创建地区1资源及Nat网关
    Description:
      en: '<font color=''blue''><b>Refer to the template architecture diagram for
        the environment resources</b></font>，<br>check: <font color=''green''> create
        the locale 1 resource</font><br>Unchecked: <font color=''green''> create area
        2 related resources</font>'
      zh-cn: <font color='blue'><b>环境资源情况请参考模板架构图</b></font>，<br>勾选：<font color='green'>创建地区1相关资源</font><br>未勾选：<font
        color='green'>创建地区2相关资源</font>
    Default: false
  VpcCidrBlock:
    Type: String
    Label:
      en: VPC CIDR Block
      zh-cn: 专有网络网段
    Description:
      en: 'The IP address range of the VPC in the CIDR Block form,<br>you can use
        the following IP address ranges: <br><font color=''green''>[10.0.0.0/8]</font><br><font
        color=''green''>[172.16.0.0/12]</font><br><font color=''green''>[192.168.0.0/16]</font><br><b>note:<font
        color=''blue''>the network segments for creating regions 1 and 2 cannot be
        the same</font></b>'
      zh-cn: 专有网络IP地址段范围，<br>您可以使用以下的IP地址段:<br><font color='green'>[10.0.0.0/8]</font><br><font
        color='green'>[172.16.0.0/12]</font><br><font color='green'>[192.168.0.0/16]</font><br><b>注：<font
        color='blue'>创建地区1和地区2的网段不能相同</font></b>
    Default: 192.168.0.0/16
    AllowedValues:
    - 10.0.0.0/8
    - 172.16.0.0/12
    - 192.168.0.0/16
  VSwitchZoneId:
    Type: String
    Label:
      en: Master Zone
      zh-cn: 主可用区
    Description:
      en: 'Availability Zone ID;<br><b>note: <font color=''blue''>before selecting
        the Available Zone, verify that the Available Zone supports the specification
        for creating SLB、RDS、ECS resources.</font></b>'
      zh-cn: 可用区ID;<br><b>注： <font color='blue'>选择可用区前请确认该可用区是否支持创建SLB、RDS、ECS资源的规格。</font></b>
    AssociationProperty: ALIYUN::ECS::Instance:ZoneId
  VswCidrBlock:
    Type: String
    Label:
      en: Master Zone CIDR Block
      zh-cn: 主可用区网段
    Description:
      en: Must be a subnet segment that belongs to a proprietary network and is not
        occupied by another VSwitch.
      zh-cn: 必须是所属专有网络的子网段，并且没有被其他交换机占用。
    Default: 192.168.1.0/24
  VSwitchZoneId2:
    Type: String
    Label:
      en: Slave Zone
      zh-cn: 备可用区
    Description:
      en: 'Availability Zone ID,<br><b>note: <font color=''blue''>before selecting
        the Availability Zone, verify that the available zone supports the specification
        for creating SLB and ECS resources,not the same as Master Zone</font></b>'
      zh-cn: 可用区ID，<br><b>注： <font color='blue'>选择可用区前请确认该可用区是否支持创建SLB和ECS资源的规格,并不同于主可用区</font></b>,
    AssociationProperty: ALIYUN::ECS::Instance:ZoneId
  VswCidrBlock2:
    Type: String
    Label:
      en: Slave Zone CIDR Block
      zh-cn: 备可用区网段
    Description:
      en: Must be a subnet segment that belongs to a proprietary network and is not
        occupied by another VSwitch.
      zh-cn: 必须是所属专有网络的子网段，并且没有被其他交换机占用。
    Default: 192.168.2.0/24
  Bandwidth:
    Type: Number
    Label:
      en: EIP Bandwidth
      zh-cn: EIP带宽
    Description:
      en: The units are Mbps, ranging from 5 to 5000
      zh-cn: 单位为Mbps，范围5~5000。
    Default: 5
    MinValue: 5
    MaxValue: 5000
  EcsInstanceType:
    Type: String
    Label:
      en: Instance Type
      zh-cn: 实例规格
    Description:
      en: 'Fill in the specifications that can be used under the VSwitch availability
        zone;</b></font><br>general specifications：<font color=''red''><b>ecs.g6.xlarge</b></font><br>note:
        a few zones do not support general specifications<br>see detail: <a href=''https://www.alibabacloud.com/help/en/doc-detail/25378.html''
        target=''_blank''><b><font color=''blue''>Instance Specification Family</font></a></b>'
      zh-cn: 填写VSwitch可用区下可使用的规格；<br>通用规格：<font color='red'><b>ecs.g6.xlarge</b></font><br>注：可用区可能不支持通用规格<br>规格详见：<a
        href='https://help.aliyun.com/document_detail/25378.html' target='_blank'><b><font
        color='blue'>实例规格族</font></a></b>
    AssociationProperty: ALIYUN::ECS::Instance::InstanceType
  ECSImageId:
    Type: String
    Label:
      en: Image
      zh-cn: 镜像
    Description:
      en: 'Contact ali cloud engineer to obtain the corresponding game image.<br>[1：<font
        color=''green''>By submitting the work order, ali cloud after-sales service
        engineer shall contact the best practice Owner</font>]<br>[2：<font color=''green''>If
        the enterprise or organization of the user has a CBM/SA follow-up project
        of aliyun, it can also contact the best practice Owner through CBM/SA of aliyun
        to obtain the image</font>]</br>ordinary mirror image,<br>see detail: <b><a
        href=''https://www.alibabacloud.com/help/doc-detail/112977.html'' target=''_blank''><font
        color=''blue''>find the mirror</font></a></b>'
      zh-cn: 联系阿里云工程师获取对应游戏镜像。<br>[方式1：<font color='green'>通过提交工单的方式，由阿里云售后服务工程师联系最佳实践Owner</font>]<br>[方式2：<font
        color='green'>如果使用者所在企业或组织有阿里云CBM/SA跟进项目，也可以通过阿里云CBM/SA联系最佳实践Owner获取镜像</font>]</br>普通镜像，详见：<b><a
        href='https://help.aliyun.com/document_detail/112977.html' target='_blank'><font
        color='blue'>查找镜像</font></a></b>
    Default: centos_7
  SystemDiskCategory:
    Type: String
    Label:
      en: Disk Type
      zh-cn: 磁盘类型
    Description:
      en: '<font color=''blue''><b>Optional values:</b></font><br>[cloud_efficiency:
        <font color=''green''>Efficient Cloud Disk</font>]<br>[cloud_ssd: <font color=''green''>SSD
        Cloud Disk</font>]<br>[cloud_essd: <font color=''green''>ESSD Cloud Disk</font>]<br>[cloud:
        <font color=''green''>Cloud Disk</font>]<br>[ephemeral_ssd: <font color=''green''>Local
        SSD Cloud Disk</font>]'
      zh-cn: '<font color=''blue''><b>可选值：</b></font><br>[cloud_efficiency: <font
        color=''green''>高效云盘</font>]<br>[cloud_ssd: <font color=''green''>SSD云盘</font>]<br>[cloud_essd:
        <font color=''green''>ESSD云盘</font>]<br>[cloud: <font color=''green''>普通云盘</font>]<br>[ephemeral_ssd:
        <font color=''green''>本地SSD盘</font>]'
    Default: cloud_efficiency
    AllowedValues:
    - cloud_efficiency
    - cloud_ssd
    - cloud
    - cloud_essd
    - ephemeral_ssd
  SystemDiskSize:
    Type: Number
    Label:
      en: System Disk Size
      zh-cn: 系统盘大小
    Description:
      en: 'System disk size, range of values: 40-500, units: GB.'
      zh-cn: 系统盘大小, 取值范围：[40, 500], 单位：GB。
    ConstraintDescription:
      en: 'Value range: 40~500. Unit: GB.'
      zh-cn: 取值范围：40~500。单位：GB。
    Default: 40
    MinValue: 40
    MaxValue: 500
  EcsPassword:
    Type: String
    Label:
      en: Instance Password
      zh-cn: 实例密码
    Description:
      en: Server login password, Length 8-30, must contain three(Capital letters,
        lowercase letters, numbers, ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ Special symbol
        in).
      zh-cn: 服务器登录密码,长度8-30，必须包含三项（大写字母、小写字母、数字、 ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ 中的特殊符号）。
    ConstraintDescription:
      en: Length 8-30, must contain three(Capital letters, lowercase letters, numbers,
        ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ Special symbol in).
      zh-cn: 长度8-30，必须包含三项（大写字母、小写字母、数字、 ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ 中的特殊符号）。
    AllowedPattern: '[0-9A-Za-z\_\-\&:;''<>,=%`~!@#\(\)\$\^\*\+\|\{\}\[\]\.\?\/]+$'
    MinLength: 8
    MaxLength: 30
    NoEcho: true
  LoadBalancerName:
    Type: String
    Label:
      en: Instance Name
      zh-cn: 实例名称
    Description:
      en: 'Length: 1-80 characters. Can contain Chinese、letters、digits and special
        characters(''-''、''/''、''.''、''_''),<br>note：<font color=''green''>the resource
        is not created when you create locale 2</font>'
      zh-cn: 长度限制为1-80个字符，允许包含中文、字母、数字、'-'、'/'、'.'、'_'这些字符，<br>注意：<font color='green'>创建地区2时不会创建该资源</font>
    Default: slb001
  LoadBalancerSpec:
    Type: String
    Label:
      en: Specifications
      zh-cn: 规格
    Description:
      en: Instance specifications,</br>see detail：</b><a href='https://www.alibabacloud.com/help/doc-detail/85939.html'
        target='_blank'><b><font color='blue'>Performance Support Type</b></font></a>
      zh-cn: 实例规格，</br>详见：</b><a href='https://help.aliyun.com/document_detail/85939.html'
        target='_blank'><b><font color='blue'>性能保障型</b></font></a>
    Default: slb.s1.small
  ListenerPort:
    Type: Number
    Label:
      en: Listening Port
      zh-cn: 监听端口
    Description:
      en: 'Port used by the front end of SLB, valid value: 1~65535.'
      zh-cn: 负载均衡实例前端使用的端口，取值范围：1~65535。
    ConstraintDescription:
      en: 'Port used by the front end of SLB, valid value: 1~65535.'
      zh-cn: 负载均衡实例前端使用的端口，取值范围：1~65535。
    Default: 80
    MinValue: 1
    MaxValue: 65535
  DBInstanceEngineAndVersion:
    Type: String
    Label:
      en: Type And Version
      zh-cn: 类型与版本
    Description:
      en: Database type and version number.
      zh-cn: 数据库类型与版本号。
    Default: MySQL-5.6
    AllowedValues:
    - MySQL-5.5
    - MySQL-5.6
    - MySQL-5.7
    - MySQL-8.0
  DBInstanceClass:
    Type: String
    Label:
      en: Specifications
      zh-cn: 规格
    Description:
      en: 'Select the instance specification based on the type of database engine
        and the available area support;<br>see detail: <a href=''https://www.alibabacloud.com/help/doc-detail/26312.html''
        target=''_blank''><b><font color=''blue''>Instance specification sheet</font></b></a>'
      zh-cn: 根据数据库引擎的类型和可用的区域支持选择实例规格；<br>请参见详细信息：<a href='https://help.aliyun.com/document_detail/26312.html'
        target='_blank'><b><font color='blue'>实例规格表</font></b></a>
    Default: rds.mysql.s2.large
  DBInstanceStorage:
    Type: Number
    Label:
      en: Storage Space
      zh-cn: 存储空间
    Description:
      en: 'Database storage space, unit: GB, increasing every 5GB, valid value: 5-1000.'
      zh-cn: 数据库存储空间, 单位：GB, 每5GB进行递增，取值范围：5-1000。
    ConstraintDescription:
      en: 'Database storage space, unit: GB, increasing every 5GB, valid value: 5-1000.'
      zh-cn: 数据库存储空间, 单位：GB, 每5GB进行递增，取值范围：5-1000。
    Default: 40
    MinValue: 5
    MaxValue: 1000
  DBName:
    Type: String
    Label:
      en: Database Name
      zh-cn: 数据库名称
    Description:
      en: Database name, consisting of lowercase letters, Numbers, and special characters
        (-_), starting with letters, ending with letters or Numbers, up to 64 characters,<br>note:<font
        color='green'>the database name for creating regions 1 and 2 cannot be the
        same</font>
      zh-cn: 数据库名称，由小写字母、数字及特殊字符（-_）组成，以字母开头，字母或数字结尾，最多64个字符,<br>注意：<font color='green'>创建地区1和地区2的数据库名称不能相同</font>
    Default: db_demo_test
  RdsUserName:
    Type: String
    Label:
      en: Database Account
      zh-cn: 数据库账号
    Description:
      en: Consists of lowercase letters, Numbers, and underscores, beginning with
        letters, ending with letters or Numbers, up to 16 characters, and at least
        2 characters,<br>note:<font color='green'>the database account for creating
        regions 1 and 2 cannot be the same</font>
      zh-cn: 由小写字母，数字、下划线组成，以字母开头，字母或数字结尾，最多16个字符，最少2个字符,<br>注意：<font color='green'>创建地区1和地区2的数据库账号不能相同</font>
    Default: demo_test
    MinLength: 2
    MaxLength: 16
  RdsUserType:
    Type: String
    Label:
      en: Account Type
      zh-cn: 账号类型
    Description:
      en: '<b>Database account type, <br><font color=''blue''>allowedValues: </font></b><br>[Normal:
        <font color=''green''>Ordinary account</font>]<br>[Super: <font color=''green''>High-privilege
        account</font>]'
      zh-cn: '<b>数据库账号类型，<br><font color=''blue''>可选值：</font></b><br>[Normal: <font
        color=''green''>普通账号</font>]<br>[Super: <font color=''green''>高权限账号</font>]'
    Default: Normal
    AllowedValues:
    - Super
    - Normal
  RdsUserPassword:
    Type: String
    Label:
      en: Password
      zh-cn: 密码
    Description:
      en: 'The primary account password for the database instance.Large/lowercase
        letters, Numbers and special characters take up three kinds, and the length
        is 8-32 bits. Special characters included! @ # $% ^ & * () _ + - ='
      zh-cn: 数据库实例的主账号密码。大/小写字母、数字、特殊字符占三种，长度8－32位；特殊字符包含!@#$%^&*()_+-=
    ConstraintDescription:
      en: 'Large/lowercase letters, Numbers and special characters take up three kinds,
        and the length is 8-32 bits. Special characters included! @ # $% ^ & * ()
        _ + - ='
      zh-cn: 大/小写字母、数字、特殊字符占三种，长度8－32位；特殊字符包含!@#$%^&*()_+-=
    MinLength: 8
    MaxLength: 32
    NoEcho: true
  BucketName:
    Type: String
    Label:
      en: Bucket Name
      zh-cn: 存储空间名称
    Description:
      en: The name must be 3 to 63 bytes in length, The name must start and end with
        a lowercase letter or digit.The name can contain only lowercase letters, digits,
        and hyphens (-);<br><b>note：<font color='blue'>a bucket name must be globally
        unique within OSS. Bucket names cannot be changed after the bucket is created.</b></font><br>note：<font
        color='green'>the resources are not created when creating locale 2</font>
      zh-cn: 长度为3~63个字符，必须以小写字母或数字开头和结尾，可以包含小写字母、数字和连字符(-);<br><font color='blue'><b>注：需要全网唯一性，已经存在的不能在创建</b></font><br>注意：<font
        color='green'>创建地区2时不会创建该资源</font>
    Default: static-resource-test-domain
  BucketAccessControl:
    Type: String
    Label:
      en: Access Control
      zh-cn: 读写权限
    Description:
      en: '<font color=''blue''><b>Optional values: </b></font><br>[private：<font
        color=''green''>All access to the file requires authentication</font>]<br>[public-read：<font
        color=''green''>File writes need to be authenticated；Files can be read anonymously</font>]<br>[public-read-write：<font
        color=''green''>Anyone (including anonymous visitors) can perform read and
        write operators on the files in the bucket</font>]'
      zh-cn: '<font color=''blue''><b>可选值: </b></font><br>[private：<font color=''green''>对文件的所有访问操作需要进行身份验证</font>]<br>[public-read：<font
        color=''green''>对文件写操作需要进行身份验证；可以对文件进行匿名读</font>]<br>[public-read-write：<font
        color=''green''>所有人都可以对文件进行读写操作</font>]'
    Default: private
    AllowedValues:
    - private
    - public-read
    - public-read-write
  DomainName:
    Type: String
    Label:
      en: Domain Name
      zh-cn: 域名
    Description:
      en: Domain Name,fill in the applied domain name.
      zh-cn: 域名,填入已申请的域名名称。
  RR:
    Type: String
    Label:
      en: Host Record
      zh-cn: 主机记录
    Description:
      en: Host record, if you want to resolve @.exmaple.com, the host record should
        fill in "@" instead of empty,<br>note:<font color='green'>the host record
        for creating regions 1 and 2 cannot be the same</font>
      zh-cn: 主机记录，如果你想解析@.exmaple.com，主机记录应该填写“@”而不是“空”，<br>注意：<font color='green'>创建地区1和地区2的主机记录不能相同</font>
Resources:
  Vpc:
    Type: ALIYUN::ECS::VPC
    Properties:
      CidrBlock:
        Ref: VpcCidrBlock
      VpcName:
        Fn::Join:
        - '-'
        - - Stack
          - Ref: ALIYUN::StackId
  SecurityGroup:
    Type: ALIYUN::ECS::SecurityGroup
    Properties:
      VpcId:
        Ref: Vpc
      SecurityGroupIngress:
      - IpProtocol: tcp
        NicType: intranet
        PortRange: 22/22
        Priority: 1
        SourceCidrIp: 0.0.0.0/0
      - IpProtocol: tcp
        NicType: intranet
        PortRange: 80/80
        Priority: 1
        SourceCidrIp: 0.0.0.0/0
      - IpProtocol: tcp
        NicType: intranet
        PortRange: 443/443
        Priority: 1
        SourceCidrIp: 0.0.0.0/0
      - IpProtocol: icmp
        NicType: intranet
        PortRange: -1/-1
        Priority: 1
        SourceCidrIp: 0.0.0.0/0
      - IpProtocol: all
        NicType: intranet
        Policy: drop
        PortRange: -1/-1
        Priority: 10
        SourceCidrIp: 0.0.0.0/0
      Tags:
      - Key: best_practice
        Value: '066'
  VSwitch:
    Type: ALIYUN::ECS::VSwitch
    Properties:
      ZoneId:
        Ref: VSwitchZoneId
      VpcId:
        Ref: Vpc
      CidrBlock:
        Ref: VswCidrBlock
      VSwitchName:
        Fn::Join:
        - '-'
        - - VSwitch
          - Ref: ALIYUN::StackId
  ECS1:
    Type: ALIYUN::ECS::Instance
    Properties:
      ZoneId:
        Ref: VSwitchZoneId
      VpcId:
        Ref: Vpc
      VSwitchId:
        Ref: VSwitch
      SecurityGroupId:
        Ref: SecurityGroup
      ImageId:
        Ref: ECSImageId
      AllocatePublicIP: false
      InstanceType:
        Ref: EcsInstanceType
      InternetChargeType: PayByTraffic
      Password:
        Ref: EcsPassword
      SystemDiskCategory:
        Ref: SystemDiskCategory
      SystemDiskSize:
        Ref: SystemDiskSize
      Tags:
      - Key: '066'
        Value: best_practice
    DependsOn: VSwitch
  VSwitch2:
    Type: ALIYUN::ECS::VSwitch
    Condition: IsCreateManageEnv
    Properties:
      ZoneId:
        Ref: VSwitchZoneId2
      VpcId:
        Ref: Vpc
      CidrBlock:
        Ref: VswCidrBlock2
      VSwitchName:
        Fn::Join:
        - '-'
        - - VSwitch2
          - Ref: ALIYUN::StackId
  ECS2:
    Type: ALIYUN::ECS::Instance
    Condition: IsCreateManageEnv
    Properties:
      ZoneId:
        Ref: VSwitchZoneId2
      VpcId:
        Ref: Vpc
      VSwitchId:
        Ref: VSwitch2
      SecurityGroupId:
        Ref: SecurityGroup
      ImageId:
        Ref: ECSImageId
      AllocatePublicIP: false
      InstanceType:
        Ref: EcsInstanceType
      InternetChargeType: PayByTraffic
      Password:
        Ref: EcsPassword
      SystemDiskCategory:
        Ref: SystemDiskCategory
      SystemDiskSize:
        Ref: SystemDiskSize
      Tags:
      - Key: '066'
        Value: best_practice
    DependsOn: VSwitch2
  SLBLoadBalance:
    Type: ALIYUN::SLB::LoadBalancer
    Condition: IsCreateManageEnv
    Properties:
      VpcId:
        Ref: Vpc
      VSwitchId:
        Ref: VSwitch
      AddressType: intranet
      LoadBalancerName:
        Ref: LoadBalancerName
      LoadBalancerSpec:
        Ref: LoadBalancerSpec
      MasterZoneId:
        Ref: VSwitchZoneId
      SlaveZoneId:
        Ref: VSwitchZoneId2
      Tags:
      - Key: '066'
        Value: best_practice
    DependsOn:
    - VSwitch
    - VSwitch2
    - Vpc
  BackendServerAttachment:
    Type: ALIYUN::SLB::BackendServerAttachment
    Condition: IsCreateManageEnv
    Properties:
      BackendServerList:
      - Ref: ECS1
      - Ref: ECS2
      BackendServerWeightList:
      - 100
      LoadBalancerId:
        Ref: SLBLoadBalance
    DependsOn:
    - ECS1
    - ECS2
    - SLBLoadBalance
  CommonBandwidthPackage:
    Type: ALIYUN::VPC::CommonBandwidthPackage
    Condition: IsCreateManageEnv
    Properties:
      Bandwidth:
        Ref: Bandwidth
      Name:
        Fn::Join:
        - '-'
        - - CommonBandwidthPackage
          - Ref: ALIYUN::StackId
  CommonBandwidthPackageEip:
    Type: ALIYUN::VPC::CommonBandwidthPackageIp
    Condition: IsCreateManageEnv
    Properties:
      BandwidthPackageId:
        Ref: CommonBandwidthPackage
      Eips:
      - AllocationId:
          Fn::GetAtt:
          - EipSLB
          - AllocationId
      - AllocationId:
          Fn::GetAtt:
          - EipNAT
          - AllocationId
      - AllocationId:
          Fn::GetAtt:
          - EipManage
          - AllocationId
  EipSLB:
    Type: ALIYUN::VPC::EIP
    Condition: IsCreateManageEnv
    Properties:
      Bandwidth:
        Ref: Bandwidth
      InternetChargeType: PayByTraffic
      Name:
        Fn::Join:
        - '-'
        - - BEI_EIP_SLB
          - Ref: ALIYUN::StackId
  DomainRecord:
    Type: ALIYUN::DNS::DomainRecord
    Condition: IsCreateManageEnv
    Properties:
      DomainName:
        Ref: DomainName
      RR:
        Ref: RR
      Type: A
      Value:
        Fn::GetAtt:
        - EipSLB
        - EipAddress
  EipManage:
    Type: ALIYUN::VPC::EIP
    Properties:
      Bandwidth:
        Ref: Bandwidth
      InternetChargeType: PayByTraffic
      Name:
        Fn::Join:
        - '-'
        - - BEI_EIP_manage
          - Ref: ALIYUN::StackId
  DomainRecord2:
    Type: ALIYUN::DNS::DomainRecord
    Condition: IsCreateManageEIP
    Properties:
      DomainName:
        Ref: DomainName
      RR:
        Ref: RR
      Type: A
      Value:
        Fn::GetAtt:
        - EipManage
        - EipAddress
  EipAssociationECS:
    Type: ALIYUN::VPC::EIPAssociation
    Condition: IsCreateManageEIP
    Properties:
      InstanceId:
        Fn::GetAtt:
        - ECS1
        - InstanceId
      AllocationId:
        Fn::GetAtt:
        - EipManage
        - AllocationId
      InstanceType: EcsInstance
  NatGateway:
    Type: ALIYUN::VPC::NatGateway
    Condition: IsCreateManageEnv
    Properties:
      VpcId:
        Ref: Vpc
      VSwitchId:
        Ref: VSwitch
  EipManageAssociation:
    Type: ALIYUN::VPC::EIPAssociation
    Condition: IsCreateManageEnv
    Properties:
      InstanceId:
        Fn::GetAtt:
        - NatGateway
        - NatGatewayId
      AllocationId:
        Fn::GetAtt:
        - EipManage
        - AllocationId
    DependsOn: CommonBandwidthPackageEip
  EipNAT:
    Type: ALIYUN::VPC::EIP
    Condition: IsCreateManageEnv
    Properties:
      Bandwidth:
        Ref: Bandwidth
      InternetChargeType: PayByTraffic
      Name:
        Fn::Join:
        - '-'
        - - BEI_EIP_NAT
          - Ref: ALIYUN::StackId
  EipNATAssociation:
    Type: ALIYUN::VPC::EIPAssociation
    Condition: IsCreateManageEnv
    Properties:
      InstanceId:
        Fn::GetAtt:
        - NatGateway
        - NatGatewayId
      AllocationId:
        Fn::GetAtt:
        - EipNAT
        - AllocationId
    DependsOn: CommonBandwidthPackageEip
  EipSLBAssociation:
    Type: ALIYUN::VPC::EIPAssociation
    Condition: IsCreateManageEnv
    Properties:
      InstanceId:
        Fn::GetAtt:
        - SLBLoadBalance
        - LoadBalancerId
      AllocationId:
        Fn::GetAtt:
        - EipSLB
        - AllocationId
    DependsOn: CommonBandwidthPackageEip
  ForwardEntry1:
    Type: ALIYUN::ECS::ForwardEntry
    Condition: IsCreateManageEnv
    Properties:
      ExternalIp:
        Fn::GetAtt:
        - EipManage
        - EipAddress
      ExternalPort: '10022'
      ForwardTableId:
        Fn::GetAtt:
        - NatGateway
        - ForwardTableId
      InternalIp:
        Fn::GetAtt:
        - ECS1
        - PrivateIp
      InternalPort: '22'
      IpProtocol: TCP
    DependsOn:
    - EipAssociationECS
    - EipManageAssociation
  ForwardEntry2:
    Type: ALIYUN::ECS::ForwardEntry
    Condition: IsCreateManageEnv
    Properties:
      ExternalIp:
        Fn::GetAtt:
        - EipManage
        - EipAddress
      ExternalPort: '20022'
      ForwardTableId:
        Fn::GetAtt:
        - NatGateway
        - ForwardTableId
      InternalIp:
        Fn::GetAtt:
        - ECS2
        - PrivateIp
      InternalPort: '22'
      IpProtocol: TCP
  Listener:
    Type: ALIYUN::SLB::Listener
    Condition: IsCreateManageEnv
    Properties:
      BackendServerPort: 80
      Bandwidth: -1
      ListenerPort:
        Ref: ListenerPort
      LoadBalancerId:
        Ref: SLBLoadBalance
      Persistence:
        StickySession: 'on'
      Protocol: tcp
    DependsOn: SLBLoadBalance
  OssBucket:
    Type: ALIYUN::OSS::Bucket
    Condition: IsCreateManageEnv
    Properties:
      AccessControl:
        Ref: BucketAccessControl
      BucketName:
        Ref: BucketName
      DeletionForce: true
      StorageClass: Standard
      Tags:
        Key: best_practice
        Value: '066'
  RdsDBInstance:
    Type: ALIYUN::RDS::DBInstance
    Properties:
      VpcId:
        Ref: Vpc
      VSwitchId:
        Ref: VSwitch
      DBInstanceClass:
        Ref: DBInstanceClass
      DBInstanceStorage:
        Ref: DBInstanceStorage
      DBMappings:
      - CharacterSetName: utf8
        DBName:
          Ref: DBName
      Engine:
        Fn::Select:
        - '0'
        - Fn::Split:
          - '-'
          - Ref: DBInstanceEngineAndVersion
      EngineVersion:
        Fn::Select:
        - '1'
        - Fn::Split:
          - '-'
          - Ref: DBInstanceEngineAndVersion
      MasterUserPassword:
        Ref: RdsUserPassword
      MasterUserType:
        Ref: RdsUserType
      MasterUsername:
        Ref: RdsUserName
      MultiAZ: true
      SecurityIPList:
        Ref: VpcCidrBlock
      Tags:
        Key: best_practice
        Value: '066'
  SnatEntry:
    Type: ALIYUN::VPC::SnatEntry
    Condition: IsCreateManageEnv
    Properties:
      SourceVSwitchIds:
      - Fn::GetAtt:
        - VSwitch
        - VSwitchId
      - Fn::GetAtt:
        - VSwitch2
        - VSwitchId
      SnatIp:
        Fn::GetAtt:
        - EipNAT
        - EipAddress
      SnatTableId:
        Fn::GetAtt:
        - NatGateway
        - SNatTableId
    DependsOn: EipNATAssociation
Outputs:
  EipAddress:
    Description:
      en: EIP IP
      zh-cn: EIP IP
    Value:
      Fn::GetAtt:
      - EipManage
      - EipAddress
  RdsAccountName:
    Description:
      en: RDS instance data account
      zh-cn: RDS实例数据账号
    Value:
      Ref: RdsUserName
  RdsDBInstanceDBName:
    Description:
      en: name of the RDS database
      zh-cn: RDS数据库名称
    Value:
      Ref: DBName
  RdsInstanceInnerIPAddress:
    Description:
      en: Rds instance database Intranet address connection string
      zh-cn: Rds实例数据库内网地址连接串。
    Value:
      Fn::GetAtt:
      - RdsDBInstance
      - InnerConnectionString
  VpcId:
    Description:
      en: VPC Instance ID
      zh-cn: VPC 实例ID
    Value:
      Fn::GetAtt:
      - Vpc
      - VpcId
Metadata:
  ALIYUN::ROS::Interface:
    ParameterGroups:
    - Parameters:
      - CreateManageEnv
      Label:
        default: ''
    - Parameters:
      - VpcCidrBlock
      - VSwitchZoneId
      - VswCidrBlock
      - VSwitchZoneId2
      - VswCidrBlock2
      - Bandwidth
      Label:
        default: VPC
    - Parameters:
      - EcsInstanceType
      - ECSImageId
      - SystemDiskCategory
      - SystemDiskSize
      - EcsPassword
      Label:
        default: ECS
    - Parameters:
      - LoadBalancerName
      - LoadBalancerSpec
      - ListenerPort
      Label:
        default: SLB
    - Parameters:
      - DBInstanceEngineAndVersion
      - DBInstanceClass
      - DBInstanceStorage
      - DBName
      - RdsUserName
      - RdsUserType
      - RdsUserPassword
      Label:
        default: RDS
    - Parameters:
      - BucketName
      - BucketAccessControl
      Label:
        default: Bucket
    - Parameters:
      - DomainName
      - RR
      Label:
        default: DNS
    TemplateTags:
    - acs:solution:影视娱乐:游戏业务分区合服