Packages

import com.monsanto.arch.cloudformation.model._ import com.monsanto.arch.cloudformation.model.resource._ import com.monsanto.arch.cloudformation.model.simple.Builders._ object SimpleVPC extends VPCWriter { val ownerParameter = StringParameter( name = "Owner", Description = Some("Individual responsible for this template"), MinLength = Some(StringBackedInt(1)), MaxLength = Some(StringBackedInt(64)), AllowedPattern = Some("[-_ a-zA-Z0-9]*"), ConstraintDescription = Some("Can contain only alphanumeric characters, spaces, dashes and underscores.") ) val keyNameParameter = `AWS::EC2::KeyPair::KeyName_Parameter`( name = "KeyName", Description = Some("Name of an existing EC2 KeyPair to enable SSH access to the instances"), ConstraintDescription = Some("Value must be a valid AWS key pair name in your account.") ) val allowSSHFromParameter = CidrBlockParameter( name = "AllowSSHFrom", Description = Some("The net block (CIDR) that SSH is available to.") ) val simpleParameters = Seq( ownerParameter, keyNameParameter, allowSSHFromParameter ) val simpleConditions = Seq( Condition( name = "ShouldDisablePassword", function = `Fn::Equals`( a = ParameterRef(ownerParameter), b = StringToken("rms") ) ) ) val amazonLinuxAMIMapping = Mapping[AMIId]( "AmazonLinuxAMI", Map( "us-east-1" -> Map("AMI" -> AMIId("ami-1ecae776")), "us-west-1" -> Map("AMI" -> AMIId("ami-d114f295")), "us-west-2" -> Map("AMI" -> AMIId("ami-e7527ed7")), "eu-west-1" -> Map("AMI" -> AMIId("ami-a10897d6")), "ap-southeast-1" -> Map("AMI" -> AMIId("ami-68d8e93a")), "ap-southeast-2" -> Map("AMI" -> AMIId("ami-fd9cecc7")), "ap-northeast-1" -> Map("AMI" -> AMIId("ami-cbf90ecb")) ) ) val simpleMappings = Seq(amazonLinuxAMIMapping) val simpleResourceAndOutputs = withVpc(CidrBlock(10, 0, 0, 0, 16)) { implicit vpc => val (internetGatewayResource, gatewayToInternetResource) = withInternetGateway val publicRouteTable = withRouteTable("Public", 1) val publicRouteTableRoute = publicRouteTable.withRoute( visibility = "Public", routeTableOrdinal = 1, routeOrdinal = 1, connectionBobber = InternetGatewayRoute(ResourceRef(internetGatewayResource)) ) val gatewayStuff = Template.fromResource(internetGatewayResource) ++ gatewayToInternetResource ++ publicRouteTable ++ publicRouteTableRoute val withinAZ = withAZ("us-east-1a") { implicit az => withSubnet("PubSubnet1", CidrBlock(10, 0, 0, 1, 24)) { implicit pubSubnet => val bastionName = "bastion" val bastion = ec2( name = bastionName, InstanceType = "t2.micro", KeyName = ParameterRef(keyNameParameter), ImageId = `Fn::FindInMap`[AMIId](MappingRef(amazonLinuxAMIMapping), `AWS::Region`, "AMI"), SecurityGroupIds = Seq(), Tags = AmazonTag.fromName(bastionName), UserData = Some(`Fn::Base64`( `Fn::Join`("", Seq[Token[String]]( "#!/bin/bash -v\n", "yum update -y --security\n", "# EOF\n" ) ) )) ) val sshToBastion = ParameterRef(allowSSHFromParameter) ->- 22 ->- bastion Template.fromSecurityGroupRoutable(bastion) ++ bastion.map(_.withEIP("BastionEIP").andOutput("BastionEIP", "Bastion Host EIP")) ++ Template.collapse(sshToBastion) } } gatewayStuff ++ withinAZ } val simpleTemplate = simpleResourceAndOutputs ++ Template( AWSTemplateFormatVersion = Some("2010-09-09"), Description = Some("Simple template"), Parameters = Some(simpleParameters), Conditions = Some(simpleConditions), Mappings = Some(simpleMappings), Resources = Seq.empty, Outputs = None ) writeStaxModule("vpc-simple.json", simpleTemplate) } SimpleVPC

com.monsanto.arch.cloudformation.model.resource

JobContainerProperties

Companion object JobContainerProperties

case class JobContainerProperties(Image: Token[String], Memory: Token[Int], Vcpus: Token[Int], Command: Option[TokenSeq[String]] = None, Environment: Option[Seq[Environment]] = None, JobRoleArn: Option[Token[String]] = None, MountPoints: Option[Seq[MountPoint]] = None, Volumes: Option[Seq[VolumeDefinition]] = None, User: Option[Token[String]] = None, Privileged: Option[Boolean] = None, ReadonlyRootFilesystem: Option[Boolean] = None, Ulimits: Option[Seq[Ulimit]] = None) extends Product with Serializable

The ContainerProperties property type specifies various properties specific to container-based jobs.

Image

The image used to start a container. This string is passed directly to the Docker daemon. Images in the Docker Hub registry are available by default. Other repositories are specified with repository-url/image:tag. Up to 255 letters (uppercase and lowercase), numbers, hyphens, underscores, colons, periods, forward slashes, and number signs are allowed. This parameter maps to Image in the Create a container section of the Docker Remote API and the IMAGE parameter of docker run.

Images in Amazon ECR repositories use the full registry and repository URI (for example, 012345678910.dkr.ecr.region-name.amazonaws.com/repository-name).
Images in official repositories on Docker Hub use a single name (for example, ubuntu or mongo).
Images in other repositories on Docker Hub are qualified with an organization name (for example, amazon/amazon-ecs-agent).
Images in other online repositories are qualified further by a domain name (for example, quay.io/assemblyline/ubuntu).

Memory

The hard limit (in MiB) of memory to present to the container. If your container attempts to exceed the memory specified here, the container is killed. This parameter maps to Memory in the Create a container section of the Docker Remote API and the --memory option to docker run.

Vcpus

The number of vCPUs reserved for the container. This parameter maps to CpuShares in the Create a container section of the Docker Remote API and the --cpu-shares option to docker run. Each vCPU is equivalent to 1,024 CPU shares.

Command

The command that is passed to the container. This parameter maps to Cmd in the Create a container section of the Docker Remote API and the COMMAND parameter to docker run.

Environment

The environment variables to pass to a container. This parameter maps to Env in the Create a container section of the Docker Remote API and the --env option to docker run. Important We do not recommend using plain text environment variables for sensitive information, such as credential data.

JobRoleArn

The Amazon Resource Name (ARN) of the IAM role that the container can assume for AWS permissions.

MountPoints

The mount points for data volumes in your container. This parameter maps to Volumes in the Create a container section of the Docker Remote API and the --volume option to docker run.

Volumes

A list of data volumes used in a job.

User

The user name to use inside the container. This parameter maps to User in the Create a container section of the Docker Remote API and the --user option to docker run.

Privileged

When this parameter is true, the container is given elevated privileges on the host container instance (similar to the root user). This parameter maps to Privileged in the Create a container section of the Docker Remote API and the --privileged option to docker run.

ReadonlyRootFilesystem

When this parameter is true, the container is given read-only access to its root file system. This parameter maps to ReadonlyRootfs in the Create a container section of the Docker Remote API and the --read-only option to docker run.

Ulimits

A list of ulimits to set in the container. This parameter maps to Ulimits in the Create a container section of the Docker Remote API and the --ulimit option to docker run.

Linear Supertypes

Serializable, Serializable, Product, Equals, AnyRef, Any

Ordering

Alphabetic
By Inheritance

Inherited

JobContainerProperties
Serializable
Serializable
Product
Equals
AnyRef
Any

Hide All
Show All

Visibility

Public
All

Instance Constructors

new JobContainerProperties(Image: Token[String], Memory: Token[Int], Vcpus: Token[Int], Command: Option[TokenSeq[String]] = None, Environment: Option[Seq[Environment]] = None, JobRoleArn: Option[Token[String]] = None, MountPoints: Option[Seq[MountPoint]] = None, Volumes: Option[Seq[VolumeDefinition]] = None, User: Option[Token[String]] = None, Privileged: Option[Boolean] = None, ReadonlyRootFilesystem: Option[Boolean] = None, Ulimits: Option[Seq[Ulimit]] = None)
Image
The image used to start a container. This string is passed directly to the Docker daemon. Images in the Docker Hub registry are available by default. Other repositories are specified with repository-url/image:tag. Up to 255 letters (uppercase and lowercase), numbers, hyphens, underscores, colons, periods, forward slashes, and number signs are allowed. This parameter maps to Image in the Create a container section of the Docker Remote API and the IMAGE parameter of docker run.
- Images in Amazon ECR repositories use the full registry and repository URI (for example, 012345678910.dkr.ecr.region-name.amazonaws.com/repository-name).
- Images in official repositories on Docker Hub use a single name (for example, ubuntu or mongo).
- Images in other repositories on Docker Hub are qualified with an organization name (for example, amazon/amazon-ecs-agent).
- Images in other online repositories are qualified further by a domain name (for example, quay.io/assemblyline/ubuntu).
Memory
The hard limit (in MiB) of memory to present to the container. If your container attempts to exceed the memory specified here, the container is killed. This parameter maps to Memory in the Create a container section of the Docker Remote API and the --memory option to docker run.
Vcpus
The number of vCPUs reserved for the container. This parameter maps to CpuShares in the Create a container section of the Docker Remote API and the --cpu-shares option to docker run. Each vCPU is equivalent to 1,024 CPU shares.
Command
The command that is passed to the container. This parameter maps to Cmd in the Create a container section of the Docker Remote API and the COMMAND parameter to docker run.
Environment
The environment variables to pass to a container. This parameter maps to Env in the Create a container section of the Docker Remote API and the --env option to docker run. Important We do not recommend using plain text environment variables for sensitive information, such as credential data.
JobRoleArn
The Amazon Resource Name (ARN) of the IAM role that the container can assume for AWS permissions.
MountPoints
The mount points for data volumes in your container. This parameter maps to Volumes in the Create a container section of the Docker Remote API and the --volume option to docker run.
Volumes
A list of data volumes used in a job.
User
The user name to use inside the container. This parameter maps to User in the Create a container section of the Docker Remote API and the --user option to docker run.
Privileged
When this parameter is true, the container is given elevated privileges on the host container instance (similar to the root user). This parameter maps to Privileged in the Create a container section of the Docker Remote API and the --privileged option to docker run.
ReadonlyRootFilesystem
When this parameter is true, the container is given read-only access to its root file system. This parameter maps to ReadonlyRootfs in the Create a container section of the Docker Remote API and the --read-only option to docker run.
Ulimits
A list of ulimits to set in the container. This parameter maps to Ulimits in the Create a container section of the Docker Remote API and the --ulimit option to docker run.

Value Members

final def !=(arg0: Any): Boolean

Definition Classes
AnyRef → Any
final def ##(): Int

Definition Classes
AnyRef → Any
final def ==(arg0: Any): Boolean

Definition Classes
AnyRef → Any
val Command: Option[TokenSeq[String]]
val Environment: Option[Seq[Environment]]
val Image: Token[String]
val JobRoleArn: Option[Token[String]]
val Memory: Token[Int]
val MountPoints: Option[Seq[MountPoint]]
val Privileged: Option[Boolean]
val ReadonlyRootFilesystem: Option[Boolean]
val Ulimits: Option[Seq[Ulimit]]
val User: Option[Token[String]]
val Vcpus: Token[Int]
val Volumes: Option[Seq[VolumeDefinition]]
final def asInstanceOf[T0]: T0

Definition Classes
Any
def clone(): AnyRef

Attributes
protected[java.lang]
Definition Classes
AnyRef
Annotations
@native() @throws( ... )
final def eq(arg0: AnyRef): Boolean

Definition Classes
AnyRef
def finalize(): Unit

Attributes
protected[java.lang]
Definition Classes
AnyRef
Annotations
@throws( classOf[java.lang.Throwable] )
final def getClass(): Class[_]

Definition Classes
AnyRef → Any
Annotations
@native()
final def isInstanceOf[T0]: Boolean

Definition Classes
Any
final def ne(arg0: AnyRef): Boolean

Definition Classes
AnyRef
final def notify(): Unit

Definition Classes
AnyRef
Annotations
@native()
final def notifyAll(): Unit

Definition Classes
AnyRef
Annotations
@native()
final def synchronized[T0](arg0: ⇒ T0): T0

Definition Classes
AnyRef
final def wait(): Unit

Definition Classes
AnyRef
Annotations
@throws( ... )
final def wait(arg0: Long, arg1: Int): Unit

Definition Classes
AnyRef
Annotations
@throws( ... )
final def wait(arg0: Long): Unit

Definition Classes
AnyRef
Annotations
@native() @throws( ... )

Packages

JobContainerProperties

Companion object JobContainerProperties

Instance Constructors

Value Members

Inherited from Serializable

Inherited from Serializable

Inherited from Product

Inherited from Equals

Inherited from AnyRef

Inherited from Any

Ungrouped

Packages

JobContainerProperties 

Companion object JobContainerProperties

Instance Constructors

Value Members

Inherited from Serializable

Inherited from Serializable

Inherited from Product

Inherited from Equals

Inherited from AnyRef

Inherited from Any

Ungrouped

JobContainerProperties