template.json

{
  "AWSTemplateFormatVersion" : "2010-09-09",
  "Description" : "CloudConductor pattern template",

  "Parameters" : {
    "KeyName" : {
      "Description" : "Name of an existing EC2/OpenStack KeyPair to enable SSH access to the instances",
      "Type" : "String",
      "MinLength" : "1",
      "MaxLength" : "255",
      "AllowedPattern" : "[\\x20-\\x7E]*",
      "ConstraintDescription" : "can contain only ASCII characters."
    },
    "SSHLocation" : {
      "Description" : "The IP address range that can be used to SSH to the EC2/OpenStack instances",
      "Type" : "String",
      "MinLength" : "9",
      "MaxLength" : "18",
      "Default" : "0.0.0.0/0",
      "AllowedPattern" : "(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})/(\\d{1,2})",
      "ConstraintDescription" : "must be a valid IP CIDR range of the form x.x.x.x/x."
    },
    "MonitoringInstanceType" : {
      "Description" : "MonitoringServer instance type",
      "Type" : "String",
      "Default" : "t2.small"
    },
    "MonitoringImageId" : {
      "Description" : "[computed] MonitoringServer Image Id. This parameter is automatically filled by CloudConductor.",
      "Type" : "String"
    },
    "VpcId" : {
      "Description" : "[computed] The Vpc Id which is used by platform pattern.",
      "Type" : "String"
    },
    "SubnetId" : {
      "Description" : "[computed] The Subnet Id which is used by platform pattern.",
      "Type" : "String"
    },
    "ClusterAddresses" : {
      "Description" : "[computed] Private IP Addresses to join cluster.",
      "Type" : "String"
    },
    "SharedSecurityGroup" : {
      "Description" : "[computed] The SecurityGroup which is used by platform pattern.",
      "Type" : "String"
    },
    "CloudConductorLocation" : {
      "Description" : "The IP address range of CloudConductor server to enable Consul api access to frontend instance.",
      "Type" : "String",
      "MinLength": "9",
      "MaxLength": "18",
      "Default": "0.0.0.0/0",
      "AllowedPattern": "(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})/(\\d{1,2})",
      "ConstraintDescription": "must be a valid IP CIDR range of the form x.x.x.x/x."
    }
  },

  "Mappings" : {
  },

  "Resources" : {

    "MonitoringServer" : {
      "Type" : "AWS::EC2::Instance",
      "Metadata" : {
        "Role" : "monitoring",
        "ClusterAddresses": { "Ref": "ClusterAddresses" }
      },
      "Properties" : {
        "ImageId" : { "Ref" : "MonitoringImageId" },
        "InstanceType" : { "Ref" : "MonitoringInstanceType" },
        "KeyName" : { "Ref" : "KeyName" },
        "NetworkInterfaces" : [{
           "DeviceIndex" : "0",
           "NetworkInterfaceId" : { "Ref" : "MonitoringNetworkInterface" }
        }],
        "UserData" : { "Fn::Base64" : { "Fn::Join" : ["", [
          "#!/bin/sh -v\n",
          "# Helper function\n",
          "function error_exit\n",
          "{\n",
          "  cfn-signal -e 1 -r \"$1\" '", { "Ref" : "MonitoringWaitHandle" }, "'\n",
          "  exit 1\n",
          "}\n",
          "# Set Parameters\n",
          "cat >> /opt/cloudconductor/config <<EOF\n",
          "ROLE=monitoring\n",
          "STACK_NAME=", { "Ref": "AWS::StackName" }, "\n",
          "RESOURCE_NAME=MonitoringServer\n",
          "REGION=", { "Ref": "AWS::Region" }, "\n",
          "EOF\n",
          "# Run Consul\n",
          "# this process is required because of init sequence.\n",
          "if ! which systemctl; then\n",
          "  /etc/init.d/consul start || error_exit 'Failed to start consul agent'\n",
          "fi\n",
          "# Wait member-join event\n",
          "host_name=`hostname`\n",
          "for i in `seq 10`; do\n",
          "  if [ ! -z \"`/usr/local/bin/consul members | grep ${host_name}`\" ]; then\n",
          "    # Send success signal\n",
          "    cfn-signal -e 0 -r 'MonitoringServer Setup complete' '", { "Ref" : "MonitoringWaitHandle" }, "'\n",
          "    exit 0\n",
          "  fi\n",
          "  sleep 1\n",
          "done\n",
          "cfn-signal -e 1 -r \"$1\" '", { "Ref" : "MonitoringWaitHandle" }, "'\n",
          "exit 1\n"
        ]]}},
        "Tags" : [{"Key": "Name", "Value": "MonitoringServer"}, {"Key": "Role", "Value": "monitoring"}]
      }
    },
    "MonitoringNetworkInterface" : {
      "Type" : "AWS::EC2::NetworkInterface",
      "Properties" : {
        "GroupSet" : [{"Ref" : "SharedSecurityGroup"}, {"Ref" : "MonitoringSecurityGroup"}],
        "SubnetId" : { "Ref" : "SubnetId" }
      }
    },
    "FrontendEIP" : {
      "Type" : "AWS::EC2::EIP",
      "Properties" : {
        "Domain" : "vpc"
      }
    },
    "EIPAssociation" : {
      "Type" : "AWS::EC2::EIPAssociation",
      "DependsOn" : "MonitoringServer",
      "Properties" : {
        "AllocationId" : { "Fn::GetAtt" : [ "FrontendEIP", "AllocationId" ]},
        "NetworkInterfaceId" : { "Ref" : "MonitoringNetworkInterface" }
      }
    },
    "MonitoringSecurityGroup" : {
      "Type" : "AWS::EC2::SecurityGroup",
      "Properties" : {
        "GroupDescription" : "Enable HTTP access via port 80, Zabbix-agent access",
        "VpcId" : { "Ref" : "VpcId" },
        "SecurityGroupIngress" : [
          {"IpProtocol" : "tcp", "FromPort" : "80", "ToPort" : "80", "CidrIp" : "0.0.0.0/0"},
          {"IpProtocol" : "tcp", "FromPort" : "10051", "ToPort" : "10051", "CidrIp" : "10.0.0.0/16"}
        ]
      }
    },
    "SharedSecurityGroupInboundRule": {
      "Type": "AWS::EC2::SecurityGroupIngress",
      "Properties":{
        "IpProtocol": "tcp",
        "FromPort": "10050",
        "ToPort": "10050",
        "SourceSecurityGroupId": { "Ref" : "MonitoringSecurityGroup" },
        "GroupId": { "Ref" : "SharedSecurityGroup" }
      }
    },
    "MonitoringWaitHandle" : {
      "Type" : "AWS::CloudFormation::WaitConditionHandle"
    },
    "MonitoringWaitCondition" : {
      "Type" : "AWS::CloudFormation::WaitCondition",
      "DependsOn" : "MonitoringServer",
      "Properties" : {
        "Handle" : { "Ref" : "MonitoringWaitHandle" },
        "Timeout" : "600"
      }
    }
  },
  "Outputs" : {
    "ConsulAddresses" : {
      "Value" : { "Ref" : "FrontendEIP" },
      "Description" : "Address to request from CloudConductor server to consul cluster. This output is required."
    }
  }
}