Question

我正在尝试创建一个安装puppet和aws puppet模块的cloudformation模板。我能够用puppet创建我的实例，定义安全组等，它似乎工作正常，但我也想安装aws puppet模块作为我的模板的一部分。这是我的木偶实例的代码

    "PuppetMasterInstance" : {
  "Type" : "AWS::EC2::Instance",
  "Metadata" : {
    "AWS::CloudFormation::Init" : {
      "config" : {
        "packages" : {
          "yum" : {
          "puppet3" : [],
            "puppet3-server" : [],
            "ruby-devel" : [],
            "gcc" : [],
            "make" : [],
            "rubygems" : []
          },
          "rubygems" : {
            "json" : []
          }
        },
        "files": {
          "/etc/yum.repos.d/epel.repo": {
            "source": "https://s3.amazonaws.com/cloudformation-examples/enable-epel-on-amazon-linux-ami",
            "mode": "000644",
            "owner": "root",
            "group": "root"
          },

          "/etc/puppet/autosign.conf": {
            "content": "*.internal\n",
            "mode": "100644",
            "owner": "root",
            "group": "wheel"
          },
          "/etc/puppet/fileserver.conf": {
            "content": "[modules]\n allow *.internal\n",
            "mode": "100644",
            "owner": "root",
            "group": "wheel"
          },
          "/etc/puppet/puppet.conf": {
            "content": {
              "Fn::Join": [
                "",
                [
                  "[main]\n",
                  " logdir=/var/log/puppet\n",
                  " rundir=/var/run/puppet\n",
                  " ssldir=$vardir/ssl\n",
                  " pluginsync=true\n",
                  "[agent]\n",
                  " classfile=$vardir/classes.txt\n",
                  " localconfig=$vardir/localconfig\n"
                ]
              ]
            },
            "mode": "000644",
            "owner": "root",
            "group": "root"
          },
          "/etc/puppet/modules/cfn/manifests/init.pp": {
            "content": "class cfn {}",
            "mode": "100644",
            "owner": "root",
            "group": "wheel"
          },
          "/etc/puppet/modules/cfn/lib/facter/cfn.rb": {
            "source": "https://s3.amazonaws.com/cloudformation-examples/cfn-facter-plugin.rb",
            "mode": "100644",
            "owner": "root",
            "group": "wheel"
          }
        },
        "services": {
          "sysvinit": {
            "puppetmaster": {
              "enabled": "true",
              "ensureRunning": "true"
            }
          }
        }
      }
    }
  },
  "Properties": {
    "InstanceType": {
      "Ref": "InstanceType"
    },
    "SecurityGroups": [
      {
        "Ref": "PuppetGroup"
      }
    ],
    "ImageId": {

      "Ref": "AmiID"

    },
    "KeyName": {
      "Ref": "KeyName"
    },
    "UserData": {
      "Fn::Base64": {
        "Fn::Join": [
          "",
          [
            "#!/bin/bash\n",
            "yum update -y \n",


            "/opt/aws/bin/cfn-init --region ",
            {
              "Ref": "AWS::Region"
            },
            " -s ",
            {
              "Ref": "AWS::StackName"
            },
            " -r PuppetMasterInstance ",
            " --access-key ",
            {
              "Ref": "CFNKeys"
            },
            " --secret-key ",
            {
              "Fn::GetAtt": [
                "CFNKeys",
                "SecretAccessKey"
              ]
            },
            "\n",
            "/opt/aws/bin/cfn-signal -e $? '",
            {
              "Ref": "PuppetMasterWaitHandle"
            },
            "'\n"
          ]
        ]
      }
    }
  }
}

这很好用，但我想在安装puppet后执行以下命令：

"gem install aws-sdk-core",
"gem install retries",
"export AWS_ACCESS_KEY_ID=my_key",
"export AWS_SECRET_ACCESS_KEY=my_secret",
 "puppet module install puppetlabs-aws"

我尝试使用＆＃34;命令：＆＃34;标记之前＆＃34;文件：＆＃34;并且模板失败了。我试着将代码放在＆＃34; UserData＆＃34;中但是它又失败了。我无法找到有关模板中不同部分的执行顺序的信息，我认为失败是由于错误的执行顺序（当命令运行时没有安装puppet＆amp; ruby）。

任何帮助将不胜感激。

Answer 1

我在aws论坛上发现了关于执行顺序的非常翔实的帖子。 AWS :: CloudFormation :: Init按以下顺序执行：

包 - ＆gt;群组 - ＆gt;用户 - ＆GT;来源 - ＆gt;文件 - ＆gt;命令 - ＆gt;服务

来源：https://forums.aws.amazon.com/message.jspa?messageID=414670

我解决问题的方式可能远非理想，但它有效：

"PuppetMasterInstance" : { "Type" : "AWS::EC2::Instance", "Metadata" : { "AWS::CloudFormation::Init" : { "configSets" : { "ascending" : [ "config" , "config2" ], "descending" : [ "config2" , "config" ] }, "config" : { "packages" : { "yum" : { "puppet3" : [], "puppet3-server" : [], "ruby-devel" : [], "gcc" : [], "make" : [], "rubygems" : [] }, "rubygems" : { "json" : [] } }, "files": { "/etc/yum.repos.d/epel.repo": { "source": "https://s3.amazonaws.com/cloudformation-examples/enable-epel-on-amazon-linux-ami", "mode": "000644", "owner": "root", "group": "root" }, "/etc/puppet/autosign.conf": { "content": "*.internal\n", "mode": "100644", "owner": "root", "group": "wheel" }, "/etc/puppet/fileserver.conf": { "content": "[modules]\n allow *.internal\n", "mode": "100644", "owner": "root", "group": "wheel" }, "/etc/puppet/puppet.conf": { "content": { "Fn::Join": [ "", [ "[main]\n", " logdir=/var/log/puppet\n", " rundir=/var/run/puppet\n", " ssldir=$vardir/ssl\n", " pluginsync=true\n", "[agent]\n", " classfile=$vardir/classes.txt\n", " localconfig=$vardir/localconfig\n" ] ] }, "mode": "000644", "owner": "root", "group": "root" }, "/etc/puppet/modules/cfn/manifests/init.pp": { "content": "class cfn {}", "mode": "100644", "owner": "root", "group": "wheel" }, "/etc/puppet/modules/cfn/lib/facter/cfn.rb": { "source": "https://s3.amazonaws.com/cloudformation-examples/cfn-facter-plugin.rb", "mode": "100644", "owner": "root", "group": "wheel" } }, "services": { "sysvinit": { "puppetmaster": { "enabled": "true", "ensureRunning": "true" } } } }, "config2" : { "commands" : { "1" : { "command" : "gem install aws-sdk-core" }, "2" : { "command" : "gem install retries" }, "3" : { "command" : "export _MYAWSKEY_" }, "4" : { "command" : "export MY_AWS_SECRET_" }, "5" : { "command" : "puppet module install puppetlabs-aws" } } } } }, "Properties": { "InstanceType": { "Ref": "InstanceType" }, "SecurityGroups": [ { "Ref": "PuppetGroup" } ], "ImageId": { "Ref": "AmiID" }, "KeyName": { "Ref": "KeyName" }, "UserData": { "Fn::Base64": { "Fn::Join": [ "", [ "#!/bin/bash\n", "yum update -y \n", "/opt/aws/bin/cfn-init -c ascending --region ", { "Ref": "AWS::Region" }, " -s ", { "Ref": "AWS::StackName" }, " -r PuppetMasterInstance ", " --access-key ", { "Ref": "CFNKeys" }, " --secret-key ", { "Fn::GetAtt": [ "CFNKeys", "SecretAccessKey" ] }, "\n", "/opt/aws/bin/cfn-signal -e $? '", { "Ref": "PuppetMasterWaitHandle" }, "'\n" ] ] } } } }

通过指定configSets的执行顺序，我能够运行我需要安装和配置puppet的所有内容，然后运行安装插件的命令。

Cloudformation模板执行顺序？

1 个答案: