diff --git a/documents/solution/ai/build-a-dialogue-model-based-on-ChatGLM-and-LangChain.yml b/documents/solution/ai/build-a-dialogue-model-based-on-ChatGLM-and-LangChain.yml index 17374dca..f7007cce 100644 --- a/documents/solution/ai/build-a-dialogue-model-based-on-ChatGLM-and-LangChain.yml +++ b/documents/solution/ai/build-a-dialogue-model-based-on-ChatGLM-and-LangChain.yml @@ -148,6 +148,84 @@ Resources: Ref: Vpc VSwitchId: Ref: VSwitch + AliyunFCServerlessDevsRole: + Type: ALIYUN::RAM::Role + Properties: + RoleName: AliyunFCServerlessDevsRole + Description: 应用中心需要您的角色中包含应用所需策略,推荐创建并使用系统默认角色 AliyunFCServerlessDevsRole。 + AssumeRolePolicyDocument: + Version: '1' + Statement: + - Action: sts:AssumeRole + Effect: Allow + Principal: + Service: + - fc.aliyuncs.com + MaxSessionDuration: 3600 + IgnoreExisting: true + DeletionForce: true + PolicyAttachments: + System: + - AliyunNASFullAccess + - AliyunFCFullAccess + - AliyunFCServerlessDevsRolePolicy + - AliyunOSSReadOnlyAccess + - AliyunECSReadOnlyAccess + - AliyunVPCReadOnlyAccess + - AliyunLogReadOnlyAccess + NasAccessGroup: + Type: ALIYUN::NAS::AccessGroup + Properties: + AccessGroupType: Vpc + AccessGroupName: + Fn::Sub: nas-access-group-${ALIYUN::StackId} + NasMountTarget: + Type: ALIYUN::NAS::MountTarget + DependsOn: + - NasAccessRule + Properties: + VpcId: + Ref: Vpc + VSwitchId: + Ref: VSwitch + NetworkType: Vpc + AccessGroupName: + Ref: NasAccessGroup + FileSystemId: + Ref: NasFileSystem + NasAccessRule: + Type: ALIYUN::NAS::AccessRule + Properties: + SourceCidrIp: 0.0.0.0/0 + AccessGroupName: + Ref: NasAccessGroup + FCApplication: + Type: ALIYUN::FC::Application + Properties: + Name: + Fn::Sub: start-nas-ui-${ALIYUN::StackId} + RoleARN: + Fn::GetAtt: + - AliyunFCServerlessDevsRole + - Arn + Parameters: + serviceName: + Fn::Sub: nas-filemgr-${ALIYUN::StackId} + functionName: kodbox + region: + Ref: ALIYUN::Region + vpcId: + Ref: Vpc + vswitchId: + Ref: VSwitch + securityGroupId: + Ref: SecurityGroup + mountPointsServerAddr: + Fn::GetAtt: + - NasMountTarget + - MountTargetDomain + Template: start-nas-ui + AutoDeploy: true Workspace: Type: ALIYUN::PAI::Workspace DependsOn: