227 lines
6.6 KiB
YAML
227 lines
6.6 KiB
YAML
|
---
|
||
|
- block:
|
||
|
|
||
|
# ============================================================
|
||
|
- name: set connection information for all tasks
|
||
|
set_fact:
|
||
|
aws_connection_info: &aws_connection_info
|
||
|
aws_access_key: "{{ aws_access_key }}"
|
||
|
aws_secret_key: "{{ aws_secret_key }}"
|
||
|
security_token: "{{ security_token }}"
|
||
|
region: "{{ aws_region }}"
|
||
|
no_log: true
|
||
|
|
||
|
- name: Create VPC for use in testing
|
||
|
ec2_vpc_net:
|
||
|
name: "{{ resource_prefix }}-vpc"
|
||
|
cidr_block: 10.22.32.0/23
|
||
|
tags:
|
||
|
Name: Ansible ec2_instance Testing VPC
|
||
|
tenancy: default
|
||
|
<<: *aws_connection_info
|
||
|
register: testing_vpc
|
||
|
|
||
|
# ============================================================
|
||
|
- name: Create a public zone
|
||
|
route53_zone:
|
||
|
zone: "{{ resource_prefix }}.public"
|
||
|
comment: original comment
|
||
|
state: present
|
||
|
<<: *aws_connection_info
|
||
|
register: output
|
||
|
|
||
|
- assert:
|
||
|
that:
|
||
|
- output.changed
|
||
|
- output.comment == 'original comment'
|
||
|
- output.name == '{{ resource_prefix }}.public.'
|
||
|
- not output.private_zone
|
||
|
|
||
|
# ============================================================
|
||
|
- name: Do an idemptotent update of a public zone
|
||
|
route53_zone:
|
||
|
zone: "{{ resource_prefix }}.public"
|
||
|
comment: original comment
|
||
|
state: present
|
||
|
<<: *aws_connection_info
|
||
|
register: output
|
||
|
|
||
|
- assert:
|
||
|
that:
|
||
|
- not output.changed
|
||
|
- output.comment == 'original comment'
|
||
|
- output.name == '{{ resource_prefix }}.public.'
|
||
|
- not output.private_zone
|
||
|
|
||
|
# ============================================================
|
||
|
- name: Update comment of a public zone
|
||
|
route53_zone:
|
||
|
zone: "{{ resource_prefix }}.public"
|
||
|
comment: updated comment
|
||
|
state: present
|
||
|
<<: *aws_connection_info
|
||
|
register: output
|
||
|
|
||
|
- assert:
|
||
|
that:
|
||
|
- output.changed
|
||
|
- output.result.comment == "updated comment"
|
||
|
|
||
|
# ============================================================
|
||
|
- name: Delete public zone
|
||
|
route53_zone:
|
||
|
zone: "{{ resource_prefix }}.public"
|
||
|
state: absent
|
||
|
<<: *aws_connection_info
|
||
|
register: output
|
||
|
- assert:
|
||
|
that:
|
||
|
- output.changed
|
||
|
- "'Successfully deleted' in output.result"
|
||
|
|
||
|
# ============================================================
|
||
|
- name: Create a private zone
|
||
|
route53_zone:
|
||
|
vpc_id: "{{ testing_vpc.vpc.id }}"
|
||
|
vpc_region: "{{ aws_region }}"
|
||
|
zone: "{{ resource_prefix }}.private"
|
||
|
comment: original comment
|
||
|
state: present
|
||
|
<<: *aws_connection_info
|
||
|
|
||
|
|
||
|
# ============================================================
|
||
|
- name: Idemptotent update a private zone
|
||
|
route53_zone:
|
||
|
vpc_id: "{{ testing_vpc.vpc.id }}"
|
||
|
vpc_region: "{{ aws_region }}"
|
||
|
zone: "{{ resource_prefix }}.private"
|
||
|
comment: original comment
|
||
|
state: present
|
||
|
<<: *aws_connection_info
|
||
|
register: output
|
||
|
|
||
|
- assert:
|
||
|
that:
|
||
|
- not output.changed
|
||
|
- "'There is already a private hosted zone in the same region with the same VPC' in output.msg"
|
||
|
|
||
|
# ============================================================
|
||
|
- name: Update private zone comment
|
||
|
route53_zone:
|
||
|
vpc_id: "{{ testing_vpc.vpc.id }}"
|
||
|
vpc_region: "{{ aws_region }}"
|
||
|
zone: "{{ resource_prefix }}.private"
|
||
|
comment: updated_comment
|
||
|
state: present
|
||
|
<<: *aws_connection_info
|
||
|
register: output
|
||
|
|
||
|
- assert:
|
||
|
that:
|
||
|
- output.changed
|
||
|
- output.result.comment == "updated_comment"
|
||
|
|
||
|
# ============================================================
|
||
|
- name: Try to delete private zone without setting vpc_id and vpc_region
|
||
|
route53_zone:
|
||
|
zone: "{{ resource_prefix }}.private"
|
||
|
state: absent
|
||
|
<<: *aws_connection_info
|
||
|
register: output
|
||
|
|
||
|
- assert:
|
||
|
that:
|
||
|
- not output.changed
|
||
|
- "output.result == 'No zone to delete.'"
|
||
|
|
||
|
# ============================================================
|
||
|
- name: Try to delete a public zone that does not exists
|
||
|
route53_zone:
|
||
|
zone: "{{ resource_prefix }}.publicfake"
|
||
|
comment: original comment
|
||
|
state: absent
|
||
|
<<: *aws_connection_info
|
||
|
register: output
|
||
|
|
||
|
- assert:
|
||
|
that:
|
||
|
- not output.changed
|
||
|
- "output.result == 'No zone to delete.'"
|
||
|
|
||
|
# ============================================================
|
||
|
- name: Delete private zone
|
||
|
route53_zone:
|
||
|
vpc_id: "{{ testing_vpc.vpc.id }}"
|
||
|
vpc_region: "{{ aws_region }}"
|
||
|
zone: "{{ resource_prefix }}.private"
|
||
|
state: absent
|
||
|
<<: *aws_connection_info
|
||
|
register: output
|
||
|
|
||
|
- assert:
|
||
|
that:
|
||
|
- output.changed
|
||
|
- "'Successfully deleted' in output.result"
|
||
|
|
||
|
# ============================================================
|
||
|
- name: Create a public zone
|
||
|
route53_zone:
|
||
|
zone: "{{ resource_prefix }}.public2"
|
||
|
comment: this is an example
|
||
|
state: present
|
||
|
<<: *aws_connection_info
|
||
|
register: new_zone
|
||
|
|
||
|
# Delete zone using its id
|
||
|
- name: Delete zone using attribute hosted_zone_id
|
||
|
route53_zone:
|
||
|
zone: "{{ resource_prefix }}.public2"
|
||
|
hosted_zone_id: "{{new_zone.zone_id}}"
|
||
|
state: absent
|
||
|
<<: *aws_connection_info
|
||
|
register: output
|
||
|
|
||
|
- assert:
|
||
|
that:
|
||
|
- output.changed
|
||
|
- "'Successfully deleted' in output.result"
|
||
|
|
||
|
# ============================================================
|
||
|
always:
|
||
|
- name: Ensure public zone is deleted
|
||
|
route53_zone:
|
||
|
zone: "{{ item }}"
|
||
|
state: absent
|
||
|
<<: *aws_connection_info
|
||
|
register: removed
|
||
|
until: removed is not failed
|
||
|
ignore_errors: yes
|
||
|
retries: 10
|
||
|
with_items:
|
||
|
- "{{ resource_prefix }}.public"
|
||
|
- "{{ resource_prefix }}.public2"
|
||
|
|
||
|
- name: Ensure private zone is deleted
|
||
|
route53_zone:
|
||
|
vpc_id: "{{ testing_vpc.vpc.id }}"
|
||
|
vpc_region: "{{ aws_region }}"
|
||
|
zone: "{{ resource_prefix }}.private"
|
||
|
state: absent
|
||
|
<<: *aws_connection_info
|
||
|
register: removed
|
||
|
until: removed is not failed
|
||
|
ignore_errors: yes
|
||
|
retries: 10
|
||
|
|
||
|
- name: remove the VPC
|
||
|
ec2_vpc_net:
|
||
|
name: "{{ resource_prefix }}-vpc"
|
||
|
cidr_block: 10.22.32.0/23
|
||
|
state: absent
|
||
|
<<: *aws_connection_info
|
||
|
register: removed
|
||
|
until: removed is not failed
|
||
|
ignore_errors: yes
|
||
|
retries: 10
|