Env 命令

s env init-template

s env apply-template --name testing --description 'it is a demo' --code ./infra

s env describe-template --name testing

  name:        test-template
  description: test
  type:        EnvironmentTemplate
  engine:      terraform
  version:     1
  generation:  0
  status: 
    observedGeneration: 0
    observedTime:       2022-05-18T13:17:37Z
    outputs: 
      - 
        name:      vpcId
        sensitive: false
      - 
        name:      vswitchId
        sensitive: false
    phase:              DeploySuccess
    variables: 
      - 
        defaultJson: ""
        name:        namePrefix
        nullable:    true
        sensitive:   false
        type:        string
    ramPolicy:          [{"statement":[{"Effect":"Allow","Action":["vpc:CreateVpc","vpc:CreateVSwitch","vpc:DeleteVpc","vpc:DeleteVSwitch","vpc:ModifyVpcAttribute","vpc:ModifyVSwitchAttribute"],"Resource":"*"},{"Effect":"Allow","Action":["fc:GetAccountSettings"],"Resource":"*"}]},"AliyunVPCReadOnlyAccess"]
    rawContent: 
      """
        
        resource "random_id" "this" {
          byte_length = 8
        }
        locals {
          default_description  = "Auto created by serverless devs with terraform"
          default_name_prefix  = var.namePrefix == "" ? "serverless-devs" : var.namePrefix
          default_name_suffix  = random_id.this.hex
          default_name         = "${local.default_name_prefix}-${local.default_name_suffix}"
          default_vpc_cdir     = "192.168.0.0/16"
          default_vswitch_cdir = "192.168.1.0/24"
        }
        
        resource "alicloud_vpc" "vpc" {
          vpc_name    = local.default_name
          cidr_block  = local.default_vpc_cdir
          description = local.default_description
        }
        data "alicloud_fc_zones" "fc-zone" {}
        
        resource "alicloud_vswitch" "vsw" {
          vpc_id       = alicloud_vpc.vpc.id
          vswitch_name = local.default_name
          cidr_block   = local.default_vswitch_cdir
          zone_id      = data.alicloud_fc_zones.fc-zone.ids.0
          description  = local.default_description
        }
        
        variable "namePrefix" {
          default = ""
          type    = string
        }
        
        output "vpcId" {
          value = alicloud_vpc.vpc.id
        }
        
        output "vswitchId" {
          value = alicloud_vswitch.vsw.id
        }
        
      """

s env remove-template --name testing

s env list-templates

s env init --filename fc-env-testing.yaml

#.s/env/fc-env-testing.yaml
name: fc-env-testing #环境名
region: cn-hangzhou #地域
roleArn: acs:ram::${accountId}:role/aliyunfcdefaultrole #关联角色arn
template: "serverless-devs.com/alicloud-fc/environment"  #引用环境模板
props: #以下参数由环境模板定义
  namePrefix: fc-testing #资源名字前缀
  createLog: true #是否创建sls project、logstore，默认false
  createBucket: true #是否创建oss bucket，默认false
  createNas: true #是否创建nas文件系统、挂载点，默认false

s env deploy --name fc-env-testing

s env info --name fc-env-testing

s deploy --env fc-env-testing

s deploy --env fc-env-testing --overlays '{"function":{"memorySize":256,"timeout":120}}'

s deploy --env fc-test-2 --overlays overlay.yaml --patch-strategy merge

resource "random_id" "this" {
  byte_length = 8
}
locals {
  default_description  = "Auto created by serverless devs with terraform"
  default_name_prefix  = var.namePrefix == "" ? "serverless-devs" : var.namePrefix
  default_name_suffix  = random_id.this.hex
  default_name         = "${local.default_name_prefix}-${local.default_name_suffix}"
  default_vpc_cdir     = "192.168.0.0/16"
  default_vswitch_cdir = "192.168.1.0/24"
}

resource "alicloud_vpc" "vpc" {
  vpc_name    = local.default_name
  cidr_block  = local.default_vpc_cdir
  description = local.default_description
}
data "alicloud_fc_zones" "fc-zone" {}

resource "alicloud_vswitch" "vsw" {
  vpc_id       = alicloud_vpc.vpc.id
  vswitch_name = local.default_name
  cidr_block   = local.default_vswitch_cdir
  zone_id      = data.alicloud_fc_zones.fc-zone.ids.0
  description  = local.default_description
}

locals {
  ingress_with_cidr_blocks = [
    {
      from_port  = -1
      to_port    = -1
      protocol   = "all"
      cidr_block = "192.168.0.0/16"
      priority   = 100
    },
    {
      from_port  = -1
      to_port    = -1
      protocol   = "icmp"
      cidr_block = "0.0.0.0/0"
      priority   = 100
    },
    {
      from_port  = 443
      to_port    = 443
      protocol   = "tcp"
      cidr_block = "0.0.0.0/0"
      priority   = 100
    },
    {
      from_port  = 80
      to_port    = 80
      protocol   = "tcp"
      cidr_block = "0.0.0.0/0"
      priority   = 100
    },
  ]
}

resource "alicloud_security_group_rule" "sg_rule" {
  count             = length(local.ingress_with_cidr_blocks)
  security_group_id = alicloud_security_group.sg.id

  type        = "ingress"
  ip_protocol = local.ingress_with_cidr_blocks[count.index].protocol
  nic_type    = "intranet"
  port_range  = "${local.ingress_with_cidr_blocks[count.index].from_port}/${local.ingress_with_cidr_blocks[count.index].to_port}"
  cidr_ip     = local.ingress_with_cidr_blocks[count.index].cidr_block
  priority    = local.ingress_with_cidr_blocks[count.index].priority
  description = local.default_description
}

resource "alicloud_security_group" "sg" {
  name        = local.default_name
  description = local.default_description
  vpc_id      = alicloud_vpc.vpc.id
}

resource "alicloud_log_project" "project" {
  count       = var.createLog ? 1 : 0
  name        = local.default_name
  description = local.default_description
}

resource "alicloud_log_store" "store" {
  count                 = var.createLog ? 1 : 0
  project               = alicloud_log_project.project.0.name
  name                  = local.default_name
  shard_count           = 3
  auto_split            = true
  max_split_shard_count = 60
  append_meta           = true
}

resource "alicloud_oss_bucket" "bucket" {
  count           = var.createBucket ? 1 : 0
  bucket          = local.default_name
  acl             = "private"
  storage_class   = "Standard"
  redundancy_type = "LRS"
}

resource "alicloud_nas_file_system" "nas_fs" {
  count         = var.createNas ? 1 : 0
  protocol_type = "NFS"
  storage_type  = "Capacity"
}

resource "alicloud_nas_access_group" "nas_ag" {
  count = var.createNas ? 1 : 0
  name  = local.default_name
  type  = "Vpc"
}

resource "alicloud_nas_mount_target" "nas_mt" {
  count             = var.createNas ? 1 : 0
  file_system_id    = alicloud_nas_file_system.nas_fs.0.id
  access_group_name = alicloud_nas_access_group.nas_ag.0.name
  vswitch_id        = alicloud_vswitch.vsw.id
  security_group_id = alicloud_security_group.sg.id
}


variable "namePrefix" {
  default = ""
  type    = string
}

variable "createLog" {
  default = true
  type    = bool
}

variable "createBucket" {
  default = true
  type    = bool
}

variable "createNas" {
  default = true
  type    = bool
}

output "vpcId" {
  value = alicloud_vpc.vpc.id
}

output "vswitchId" {
  value = alicloud_vswitch.vsw.id
}

output "securityGroupId" {
  value = alicloud_security_group.sg.id
}

output "nasId" {
  value = var.createNas ? alicloud_nas_file_system.nas_fs.0.id : null
}

output "nasMountTargetId" {
  value = var.createNas ? replace(alicloud_nas_mount_target.nas_mt.0.id, "${alicloud_nas_file_system.nas_fs.0.id}:", "") : null
}

output "slsProject" {
  value = var.createLog ? alicloud_log_project.project.0.name : null
}

output "slsLogStore" {
  value = var.createLog ? alicloud_log_store.store.0.name : null
}

output "ossBucketName" {
  value = var.createBucket ? alicloud_oss_bucket.bucket.0.bucket : null
}

output "ossExtranetEndpoint" {
  value = var.createBucket ? alicloud_oss_bucket.bucket.0.extranet_endpoint : null
}

output "ossIntranetEndpoint" {
  value = var.createBucket ? alicloud_oss_bucket.bucket.0.intranet_endpoint : null
}

[
  {
    "statement": [
      {
        "Effect": "Allow",
        "Action": [
          "vpc:CreateVpc",
          "vpc:CreateVSwitch",
          "vpc:DeleteVpc",
          "vpc:DeleteVSwitch",
          "vpc:ModifyVpcAttribute",
          "vpc:ModifyVSwitchAttribute"
        ],
        "Resource": "*"
      },
      {
        "Effect": "Allow",
        "Action": [
          "ecs:CreateSecurityGroup",
          "ecs:ModifySecurityGroupAttribute",
          "ecs:ModifySecurityGroupRule",
          "ecs:ModifySecurityGroupPolicy",
          "ecs:ModifySecurityGroupEgressRule",
          "ecs:DeleteSecurityGroup",
          "ecs:AuthorizeSecurityGroup",
          "ecs:AuthorizeSecurityGroupEgress",
          "ecs:RevokeSecurityGroup",
          "ecs:RevokeSecurityGroupEgress"
        ],
        "Resource": "*"
      },
      {
        "Effect": "Allow",
        "Action": [
          "nas:CreateMountTarget",
          "nas:ModifyMountTarget",
          "nas:CreateFileSystem",
          "nas:ModifyFileSystem",
          "nas:CreateAccessGroup",
          "nas:CreateAccessRule",
          "nas:ModifyAccessGroup",
          "nas:ModifyAccessRule",
          "nas:DeleteAccessGroup",
          "nas:DeleteAccessRule",
          "nas:DeleteFileSystem",
          "nas:DeleteMountTarget"
        ],
        "Resource": "*"
      },
      {
        "Effect": "Allow",
        "Action": [
          "fc:GetAccountSettings"
        ],
        "Resource": "*"
      }
    ]
  },
  "AliyunFCDefaultRolePolicy",
  "AliyunECSReadOnlyAccess",
  "AliyunVPCReadOnlyAccess",
  "AliyunNASReadOnlyAccess"
]

s env apply-template --name fc-template --code ./infra

s env init --name env-testing --template-name fc-template

s env init --name env-production --template-name fc-template

edition: 1.0.0        #  命令行YAML规范版本，遵循语义化版本（Semantic Versioning）规范
name: component-test   #  项目名称
access: "default"  #  秘钥别名

services:
  srv-test: #  服务名称
    component: ${path(../..)}  # 这里引入的是相对路径，正式配置替换成你自己的component名称即可
    props:
      #      region: cn-zhangjiakou
      service:
        name: my-svc-${environment.name}
        description: demo for fc-deploy component
        internetAccess: true
        vpcConfig:
          vpcId: ${environment.outputs.vpcId}
          securityGroupId: ${environment.outputs.securityGroupId}
          vswitchIds:
            - ${environment.outputs.vswitchId}
        logConfig:
          project: ${environment.outputs.slsProject}
          logstore: ${environment.outputs.slsLogStore}
        nasConfig:
          userId: 10003
          groupId: 10003
          mountPoints:
            - serverAddr: ${environment.outputs.nasMountTargetId}
              nasDir: /fc-deploy-service
              fcDir: /mnt/auto
      function:
        name: multi-envs
        codeUri: ./
        runtime: nodejs12
        handler: index.handler
        memorySize: 128
        timeout: 60
        instanceConcurrency: 1
        instanceType: e1
      triggers:
        - name: httpTrigger
          type: http
          config:
            authType: anonymous
            methods:
              - GET

s deploy --env env-testing

s deploy --env env-testing --overlays '{"function":{"memorySize":256,"timeout":120}}'