版本：v1.8

创建和使用云资源

KubeVela 可以帮助开发者集成、编排不同类型的云资源，涵盖混合多云环境，让你用统一地方式去使用不同厂商的云资源。

本教程将主要集中在通过 Terraform 插件创建云资源，KubeVela 也支持使用 Crossplane，你可以参考这个教程。

请平台工程师启用云资源 Terraform 插件并授权目标云服务商的认证信息。我们将使用阿里云作为示例。

KubeVela 支持的所有由 Terraform 编排的云资源请见列表，你也可以通过命令 vela components --label type=terraform 查看。

你可以使用一下任意方式来检查云资源的使用参数：

通过命令 vela show <component type name>。

$ vela show alibaba-oss
### Properties
+----------------------------+-------------------------------------------------------------------------+-----------------------------------------------------------+----------+---------+
|            NAME            |                               DESCRIPTION                               |                           TYPE                            | REQUIRED | DEFAULT |
+----------------------------+-------------------------------------------------------------------------+-----------------------------------------------------------+----------+---------+
| acl                        | OSS bucket ACL, supported 'private', 'public-read', 'public-read-write' | string                                                    | false    |         |
| bucket                     | OSS bucket name                                                         | string                                                    | false    |         |
| writeConnectionSecretToRef | The secret which the cloud resource connection will be written to       | [writeConnectionSecretToRef](#writeConnectionSecretToRef) | false    |         |
+----------------------------+-------------------------------------------------------------------------+-----------------------------------------------------------+----------+---------+
...snip...

你也可以使用 --web 参数来在本地浏览器中查看使用说明。

阅读官网文档.

比如，你可以在这里查看阿里云 OSS 的使用参数。

For different vendors, these parameters update accordingly. All cloud resources have the following common parameters.

writeConnectionSecretToRef: struct Type, represents the outputs of Terraform will become key/values in the secret with the name specified here.
- name, specifies the name of the secret.
- namespace, specifies the namespace of the secret.
providerRef: struct Type, represents the Provider which is referenced by a cloud service.
- name, specifies the name of the provider.
deleteResource: bool Type, specify whether to delete the corresponding cloud service when the app is deleted. By Default it’s true.
customRegion: string Type, specify region for resources, it will override the default region from providerRef.

首先，我们需要准备一个可用的提供商配置，通过下述命令可以查询是否存在，如果已有则忽略该步骤。

vela config list -t terraform-alibaba

如果不存在，可以参考下述命令创建一个默认的可以提供商配置，在这之前你需要获取云厂商的 Access Key 和 Secret Key。

vela config create default -t terraform-alibaba ALICLOUD_REGION=<Region> ALICLOUD_SECRET_KEY=<Secret> ALICLOUD_ACCESS_KEY=<AccessKey>

接下来，我们以 OSS bucket 为例展示如何部署云资源。

apiVersion: core.oam.dev/v1beta1
kind: Application
metadata:
  name: provision-cloud-resource-sample
spec:
  components:
    - name: sample-oss
      type: alibaba-oss
      properties:
        bucket: vela-website-0911
        acl: private
        writeConnectionSecretToRef:
          name: oss-conn

alibaba-oss 类型的组件的参数在上面文档有清晰的描述，包括每一个 property 的名字、类型、描述、是否必填和默认值。

部署应用程序并检查应用程序的状态。

$ vela ls
APP                             COMPONENT   TYPE        TRAITS  PHASE   HEALTHY STATUS                                          CREATED-TIME
provision-cloud-resource-sample sample-oss  alibaba-oss         running healthy Cloud resources are deployed and ready to use   2021-09-11 12:55:57 +0800 CST

当应用程序处于 running 和 healthy状态。你也可以在阿里云控制台查看。

除了命令行以外，使用 UI 控制台也可以很方便的创建云资源。

Enable VelaUX addon.
Enable Terraform addon, just like the prerequisites in CLI part above. VelaUX can also enable these addons in UI console.

The UI console operations are the same, you can refer to this guide.

Firstly, Create an application and choose the type of your cloud service, they will always has a prefix of vendor such as aws-, azure or alibaba-.

Set the above parameters according to your needs to complete creating the application, and then deploy the application. The resources will be provisioned after the application become ready.