template.json

{
  "AWSTemplateFormatVersion" : "2010-09-09",
  "Description" : "CloudConductor pattern template",

  "Parameters" : {
    "WordPressTitle": {
      "Description": "Wordpress title name",
      "Type": "String"
    },
    "WordPressAdminUser": {
      "Description": "Wordpress admin user name",
      "Type": "String"
    },
    "WordPressAdminPassword": {
      "Description": "Wordpress admin user password",
      "Type": "String"
    },
    "WordPressAdminEmail": {
      "Description": "Wordpress admin user email address",
      "Type": "String"
    },
    "KeyName" : {
      "Description" : "Name of an existing EC2/OpenStack KeyPair to enable SSH access to the instances",
      "Type" : "String",
      "MinLength" : "1",
      "MaxLength" : "255",
      "AllowedPattern" : "[\\x20-\\x7E]*",
      "ConstraintDescription" : "can contain only ASCII characters."
    },
    "SSHLocation" : {
      "Description" : "The IP address range that can be used to SSH to the EC2/OpenStack instances",
      "Type" : "String",
      "MinLength" : "9",
      "MaxLength" : "18",
      "Default" : "0.0.0.0/0",
      "AllowedPattern" : "(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})/(\\d{1,2})",
      "ConstraintDescription" : "must be a valid IP CIDR range of the form x.x.x.x/x."
    },
    "WordpressInstanceType" : {
      "Description" : "WordPressServer instance type",
      "Type" : "String",
      "Default" : "t2.small"
    },
    "WordpressImageId" : {
      "Description" : "[computed] WordPressServer Image Id. This parameter is automatically filled by CloudConductor.",
      "Type" : "String"
    },
    "CloudConductorLocation" : {
      "Description" : "The IP address range of CloudConductor server to enable Consul api access to frontend instance.",
      "Type" : "String",
      "MinLength": "9",
      "MaxLength": "18",
      "Default": "0.0.0.0/0",
      "AllowedPattern": "(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})/(\\d{1,2})",
      "ConstraintDescription": "must be a valid IP CIDR range of the form x.x.x.x/x."
    }
  },

  "Mappings" : {
  },

  "Resources" : {
    "VPC" : {
      "Type" : "AWS::EC2::VPC",
      "Properties" : {
        "CidrBlock" : "10.0.0.0/16"
      }
    },
    "Subnet" : {
      "Type" : "AWS::EC2::Subnet",
      "Properties" : {
        "CidrBlock" : "10.0.1.0/24",
        "VpcId" : { "Ref" : "VPC" }
      }
    },
    "InternetGateway" : {
      "Type" : "AWS::EC2::InternetGateway"
    },
    "VPCGatewayAttachment" : {
      "Type" : "AWS::EC2::VPCGatewayAttachment",
      "Properties" : {
        "InternetGatewayId" : { "Ref" : "InternetGateway" },
        "VpcId" : { "Ref" : "VPC" }
      }
    },
    "RouteTable" : {
      "Type" : "AWS::EC2::RouteTable",
      "Properties" : {
        "VpcId" : { "Ref" : "VPC" }
      }
    },
    "RouteToInternetGateway" : {
      "Type" : "AWS::EC2::Route",
      "Properties" : {
        "DestinationCidrBlock" : "0.0.0.0/0",
        "GatewayId" : { "Ref" : "InternetGateway" },
        "RouteTableId" : { "Ref" : "RouteTable" }
      }
    },
    "SubnetRouteTableAssociation" : {
      "Type" : "AWS::EC2::SubnetRouteTableAssociation",
      "Properties" : {
        "SubnetId" : { "Ref" : "Subnet" },
        "RouteTableId" : { "Ref" : "RouteTable" }
      }
    },
    "WordPressServer" : {
      "Type" : "AWS::EC2::Instance",
      "Metadata" : {
        "Role" : "wordpress",
        "Frontend" : "true"
      },
      "Properties" : {
        "ImageId" : { "Ref" : "WordpressImageId" },
        "InstanceType" : { "Ref" : "WordpressInstanceType" },
        "KeyName" : { "Ref" : "KeyName" },
        "NetworkInterfaces" : [{
           "DeviceIndex" : "0",
           "NetworkInterfaceId" : { "Ref" : "WordPressNetworkInterface" }
        }],
        "UserData" : { "Fn::Base64" : { "Fn::Join" : ["", [
          "#!/bin/sh -xe\n",
          "set -p pipefail\n",
          "function error_exit() {\n",
          "  cfn-signal -e 1 -r \"$1\" '", { "Ref" : "WordPressWaitHandle" }, "'\n",
          "  exit 1\n",
          "}\n",
          "# Set Parameters\n",
          "cat >> /opt/cloudconductor/config <<EOF\n",
          "ROLE=wordpress\n",
          "STACK_NAME=", { "Ref": "AWS::StackName" }, "\n",
          "RESOURCE_NAME=WordPressServer\n",
          "REGION=", { "Ref": "AWS::Region" }, "\n",
          "EOF\n",
          "",
          "# Create cfn_parameters\n",
          "cat >> /opt/cloudconductor/cfn_parameters <<EOF\n",
          "WordPressTitle='", { "Ref": "WordPressTitle" }, "'\n",
          "WordPressAdminUser='", { "Ref": "WordPressAdminUser" }, "'\n",
          "WordPressAdminPassword='", { "Ref": "WordPressAdminPassword" }, "'\n",
          "WordPressAdminEmail='", { "Ref": "WordPressAdminEmail" }, "'\n",
          "EOF\n",
          "",
          "# Run Consul\n",
          "# this process is required because of init sequence.\n",
          "if ! which systemctl; then\n",
          "  /etc/init.d/consul start || error_exit 'Failed to start consul agent'\n",
          "fi\n",
          "hostname=`hostname`\n",
          "for i in `seq 10`; do\n",
          "  if [ ! -z \"`/usr/local/bin/consul members | grep ${hostname}`\" ]; then\n",
          "    # Send success signal\n",
          "    cfn-signal -e 0 -r 'WordPressServer Setup complete' '", { "Ref" : "WordPressWaitHandle" }, "'\n",
          "    exit 0\n",
          "  fi\n",
          "  sleep 1\n",
          "done\n",
          "error_exit 'Failed to join the consul cluster.'\n"
        ]]}},
        "Tags" : [{"Key": "Name", "Value": "WordPressServer"}, {"Key": "Role", "Value": "wordpress"}]
      }
    },
    "WordPressNetworkInterface" : {
      "Type" : "AWS::EC2::NetworkInterface",
      "Properties" : {
        "GroupSet" : [{"Ref": "SharedSecurityGroup"}, {"Ref": "WordPressSecurityGroup"}],
        "SubnetId" : { "Ref" : "Subnet" }
      }
    },
    "FrontendEIP" : {
      "Type" : "AWS::EC2::EIP",
      "DependsOn" : ["VPCGatewayAttachment", "SubnetRouteTableAssociation"],
      "Properties" : {
        "Domain" : "vpc"
      }
    },
    "EIPAssociation" : {
      "Type" : "AWS::EC2::EIPAssociation",
      "DependsOn" : "WordPressServer",
      "Properties" : {
        "AllocationId" : { "Fn::GetAtt" : [ "FrontendEIP", "AllocationId" ]},
        "NetworkInterfaceId" : { "Ref" : "WordPressNetworkInterface" }
      }
    },
    "SharedSecurityGroup" : {
      "Type" : "AWS::EC2::SecurityGroup",
      "Properties" : {
        "GroupDescription" : "Shared security group over all instances in platform/optional pattern",
        "VpcId" : { "Ref" : "VPC" },
        "SecurityGroupIngress" : [
          {"IpProtocol" : "tcp", "FromPort" : "22", "ToPort" : "22", "CidrIp" : { "Ref" : "SSHLocation" }},
          {"IpProtocol" : "tcp", "FromPort" : "8501", "ToPort" : "8501", "CidrIp" : { "Ref" : "CloudConductorLocation" }},
          {"IpProtocol" : "tcp", "FromPort" : "8300", "ToPort" : "8302", "CidrIp" : "10.0.0.0/16"}
        ]
      }
    },
    "WordPressSecurityGroup" : {
      "Type" : "AWS::EC2::SecurityGroup",
      "Properties" : {
        "GroupDescription" : "HTTP access via port 80",
        "VpcId" : { "Ref" : "VPC" },
        "SecurityGroupIngress" : [
          {"IpProtocol" : "tcp", "FromPort" : "80", "ToPort" : "80", "CidrIp" : "0.0.0.0/0"}
        ]
      }
    },
    "WordPressWaitHandle" : {
      "Type" : "AWS::CloudFormation::WaitConditionHandle"
    },
    "WordPressWaitCondition" : {
      "Type" : "AWS::CloudFormation::WaitCondition",
      "DependsOn" : "WordPressServer",
      "Properties" : {
        "Handle" : { "Ref" : "WordPressWaitHandle" },
        "Timeout" : "600"
      }
    }
  },

  "Outputs" : {
    "FrontendAddress" : {
      "Value" : { "Ref" : "FrontendEIP" },
      "Description" : "Frontend DNS name or IP address to access Consul api port from CloudConductor server. This output is required."
    },
    "ConsulAddresses" : {
      "Value" : { "Ref" : "FrontendEIP" },
      "Description" : "Address to request from CloudConductor server to consul cluster. This output is required."
    },
    "VpcId" : {
      "Value" : { "Ref" : "VPC" },
      "Description" : "Reference of VPC to create subnet, security group on same VPC in optional pattern. This output is required."
    },
    "SubnetId" : {
      "Value" : { "Ref" : "Subnet" },
      "Description" : "Reference of subnet to connect same subnet when create instance in optional pattern. This output is required."
    },
    "ClusterAddresses" : {
      "Value" : { "Fn::GetAtt" : ["WordPressNetworkInterface", "PrimaryPrivateIpAddress"] },
      "Description" : "Private IP Address to join cluster. This output is required."
    },
    "SharedSecurityGroup" : {
      "Value" : { "Ref" : "SharedSecurityGroup" },
      "Description" : "Reference of shared security group to add rules from optional pattern. This output is required."
    }
  }
}