mirror of https://github.com/ansible/ansible.git
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
422 lines
10 KiB
YAML
422 lines
10 KiB
YAML
---
|
|
# __Test Info__
|
|
# Create a self signed cert and upload it to AWS
|
|
# http://www.akadia.com/services/ssh_test_certificate.html
|
|
# http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/ssl-server-cert.html
|
|
|
|
# __Test Outline__
|
|
#
|
|
# __ec2_elb_lb__
|
|
# create test elb with listeners and certificat
|
|
# change AZ's
|
|
# change listeners
|
|
# remove listeners
|
|
# remove elb
|
|
|
|
# __ec2-common__
|
|
# test environment variable EC2_REGION
|
|
# test with no parameters
|
|
# test with only instance_id
|
|
# test invalid region parameter
|
|
# test valid region parameter
|
|
# test invalid ec2_url parameter
|
|
# test valid ec2_url parameter
|
|
# test credentials from environment
|
|
# test credential parameters
|
|
|
|
# ============================================================
|
|
# create test elb with listeners, certificate, and health check
|
|
|
|
- name: Create ELB
|
|
ec2_elb_lb:
|
|
name: "{{ tag_prefix }}"
|
|
region: "{{ ec2_region }}"
|
|
ec2_access_key: "{{ ec2_access_key }}"
|
|
ec2_secret_key: "{{ ec2_secret_key }}"
|
|
state: present
|
|
zones:
|
|
- us-east-1c
|
|
- us-east-1d
|
|
listeners:
|
|
- protocol: http
|
|
load_balancer_port: 80
|
|
instance_port: 80
|
|
- protocol: https
|
|
load_balancer_port: 443
|
|
instance_protocol: http
|
|
instance_port: 80
|
|
ssl_certificate_id: "{{ elb_lb_cert }}"
|
|
health_check:
|
|
ping_protocol: http
|
|
ping_port: 80
|
|
ping_path: "/index.html"
|
|
response_timeout: 5
|
|
interval: 30
|
|
unhealthy_threshold: 2
|
|
healthy_threshold: 10
|
|
register: info
|
|
|
|
- assert:
|
|
that:
|
|
- 'info.changed'
|
|
- '"failed" not in info'
|
|
- 'info.elb.status == "created"'
|
|
- 'info.elb.zones[0] == "us-east-1c"'
|
|
- 'info.elb.zones[1] == "us-east-1d"'
|
|
- 'info.elb.health_check.healthy_threshold == 10'
|
|
- 'info.elb.health_check.interval == 30'
|
|
- 'info.elb.health_check.target == "HTTP:80/index.html"'
|
|
- 'info.elb.health_check.timeout == 5'
|
|
- 'info.elb.health_check.unhealthy_threshold == 2'
|
|
- 'info.elb.listeners[0][0] == 80'
|
|
- 'info.elb.listeners[0][1] == 80'
|
|
- 'info.elb.listeners[0][2] == "HTTP"'
|
|
- 'info.elb.listeners[0][3] == "HTTP"'
|
|
- 'info.elb.listeners[1][0] == 443'
|
|
- 'info.elb.listeners[1][1] == 80'
|
|
- 'info.elb.listeners[1][2] == "HTTPS"'
|
|
- 'info.elb.listeners[1][3] == "HTTP"'
|
|
- 'info.elb.listeners[1][4] == "{{ elb_lb_cert }}"'
|
|
# ============================================================
|
|
|
|
# check ports, would be cool, but we are at the mercy of AWS
|
|
# to start things in a timely manner
|
|
|
|
#- name: check to make sure 80 is listening
|
|
# wait_for: host={{ info.elb.dns_name }} port=80 timeout=600
|
|
# register: result
|
|
|
|
#- name: assert can connect to port#
|
|
# assert: 'result.state == "started"'
|
|
|
|
#- name: check to make sure 443 is listening
|
|
# wait_for: host={{ info.elb.dns_name }} port=443 timeout=600
|
|
# register: result
|
|
|
|
#- name: assert can connect to port#
|
|
# assert: 'result.state == "started"'
|
|
|
|
# ============================================================
|
|
|
|
# Change AZ's
|
|
|
|
- name: Change AZ's
|
|
ec2_elb_lb:
|
|
name: "{{ tag_prefix }}"
|
|
region: "{{ ec2_region }}"
|
|
ec2_access_key: "{{ ec2_access_key }}"
|
|
ec2_secret_key: "{{ ec2_secret_key }}"
|
|
state: present
|
|
zones:
|
|
- us-east-1b
|
|
listeners:
|
|
- protocol: http
|
|
load_balancer_port: 80
|
|
instance_port: 80
|
|
- protocol: https
|
|
load_balancer_port: 443
|
|
instance_protocol: http
|
|
instance_port: 80
|
|
ssl_certificate_id: "{{ elb_lb_cert }}"
|
|
purge_zones: yes
|
|
health_check:
|
|
ping_protocol: http
|
|
ping_port: 80
|
|
ping_path: "/index.html"
|
|
response_timeout: 5
|
|
interval: 30
|
|
unhealthy_threshold: 2
|
|
healthy_threshold: 10
|
|
register: info
|
|
|
|
|
|
|
|
- assert:
|
|
that:
|
|
- '"failed" not in info'
|
|
- 'info.elb.status == "ok"'
|
|
- 'info.changed'
|
|
- 'info.elb.zones[0] == "us-east-1b"'
|
|
|
|
# ============================================================
|
|
|
|
# Update AZ's
|
|
|
|
- name: Update AZ's
|
|
ec2_elb_lb:
|
|
name: "{{ tag_prefix }}"
|
|
region: "{{ ec2_region }}"
|
|
ec2_access_key: "{{ ec2_access_key }}"
|
|
ec2_secret_key: "{{ ec2_secret_key }}"
|
|
state: present
|
|
zones:
|
|
- us-east-1b
|
|
- us-east-1c
|
|
- us-east-1d
|
|
listeners:
|
|
- protocol: http
|
|
load_balancer_port: 80
|
|
instance_port: 80
|
|
- protocol: https
|
|
load_balancer_port: 443
|
|
instance_protocol: http
|
|
instance_port: 80
|
|
ssl_certificate_id: "{{ elb_lb_cert }}"
|
|
purge_zones: yes
|
|
register: info
|
|
|
|
- assert:
|
|
that:
|
|
- '"failed" not in info'
|
|
- 'info.changed'
|
|
- 'info.elb.status == "ok"'
|
|
- 'info.elb.zones[0] == "us-east-1b"'
|
|
- 'info.elb.zones[1] == "us-east-1c"'
|
|
- 'info.elb.zones[2] == "us-east-1d"'
|
|
|
|
|
|
# ============================================================
|
|
|
|
# Purge Listeners
|
|
|
|
- name: Purge Listeners
|
|
ec2_elb_lb:
|
|
name: "{{ tag_prefix }}"
|
|
region: "{{ ec2_region }}"
|
|
ec2_access_key: "{{ ec2_access_key }}"
|
|
ec2_secret_key: "{{ ec2_secret_key }}"
|
|
state: present
|
|
zones:
|
|
- us-east-1b
|
|
- us-east-1c
|
|
- us-east-1d
|
|
listeners:
|
|
- protocol: http
|
|
load_balancer_port: 80
|
|
instance_port: 81
|
|
purge_listeners: yes
|
|
register: info
|
|
|
|
- assert:
|
|
that:
|
|
- '"failed" not in info'
|
|
- 'info.elb.status == "ok"'
|
|
- 'info.changed'
|
|
- 'info.elb.listeners[0][0] == 80'
|
|
- 'info.elb.listeners[0][1] == 81'
|
|
- 'len(info.elb.listeners) == 1'
|
|
|
|
|
|
|
|
# ============================================================
|
|
|
|
# add Listeners
|
|
|
|
- name: Add Listeners
|
|
ec2_elb_lb:
|
|
name: "{{ tag_prefix }}"
|
|
region: "{{ ec2_region }}"
|
|
ec2_access_key: "{{ ec2_access_key }}"
|
|
ec2_secret_key: "{{ ec2_secret_key }}"
|
|
state: present
|
|
zones:
|
|
- us-east-1b
|
|
- us-east-1c
|
|
- us-east-1d
|
|
listeners:
|
|
- protocol: http
|
|
load_balancer_port: 80
|
|
instance_port: 81
|
|
- protocol: https
|
|
load_balancer_port: 443
|
|
instance_protocol: http
|
|
instance_port: 80
|
|
ssl_certificate_id: "{{ elb_lb_cert }}"
|
|
purge_listeners: yes
|
|
register: info
|
|
|
|
- assert:
|
|
that:
|
|
- '"failed" not in info'
|
|
- 'info.elb.status == "ok"'
|
|
- 'info.changed'
|
|
- 'info.elb.listeners[0][0] == 80'
|
|
- 'info.elb.listeners[0][1] == 80'
|
|
- 'info.elb.listeners[0][2] == "HTTP"'
|
|
- 'info.elb.listeners[0][3] == "HTTP"'
|
|
- 'info.elb.listeners[1][0] == 443'
|
|
- 'info.elb.listeners[1][1] == 80'
|
|
- 'info.elb.listeners[1][2] == "HTTPS"'
|
|
- 'info.elb.listeners[1][3] == "HTTP"'
|
|
- 'info.elb.listeners[1][4] == "{{ elb_lb_cert }}"'
|
|
- 'len(info.elb.listeners) == 2'
|
|
|
|
|
|
# ============================================================
|
|
|
|
- name: test with no parameters
|
|
ec2_elb_lb:
|
|
register: result
|
|
ignore_errors: true
|
|
|
|
- name: assert failure when called with no parameters
|
|
assert:
|
|
that:
|
|
- 'result.failed'
|
|
- 'result.msg == "missing required arguments: name,state"'
|
|
|
|
|
|
|
|
# ============================================================
|
|
- name: test with only name
|
|
ec2_elb_lb:
|
|
name="{{ tag_prefix }}"
|
|
register: result
|
|
ignore_errors: true
|
|
|
|
- name: assert failure when called with only name
|
|
assert:
|
|
that:
|
|
- 'result.failed'
|
|
- 'result.msg == "missing required arguments: state"'
|
|
|
|
|
|
# ============================================================
|
|
- name: test invalid region parameter
|
|
ec2_elb_lb:
|
|
name="{{ tag_prefix }}"
|
|
region='asdf querty 1234'
|
|
state=present
|
|
register: result
|
|
ignore_errors: true
|
|
|
|
- name: assert invalid region parameter
|
|
assert:
|
|
that:
|
|
- 'result.failed'
|
|
- 'result.msg.startswith("value of region must be one of:")'
|
|
|
|
|
|
# ============================================================
|
|
- name: test valid region parameter
|
|
ec2_elb_lb:
|
|
name: "{{ tag_prefix }}"
|
|
region: "{{ ec2_region }}"
|
|
state: present
|
|
zones:
|
|
- us-east-1a
|
|
- us-east-1d
|
|
listeners:
|
|
- protocol: http
|
|
load_balancer_port: 80
|
|
instance_port: 80
|
|
|
|
register: result
|
|
ignore_errors: true
|
|
|
|
- name: assert valid region parameter
|
|
assert:
|
|
that:
|
|
- 'result.failed'
|
|
- 'result.msg.startswith("No handler was ready to authenticate.")'
|
|
|
|
|
|
# ============================================================
|
|
|
|
- name: test invalid ec2_url parameter
|
|
ec2_elb_lb:
|
|
name: "{{ tag_prefix }}"
|
|
region: "{{ ec2_region }}"
|
|
state: present
|
|
zones:
|
|
- us-east-1a
|
|
- us-east-1d
|
|
listeners:
|
|
- protocol: http
|
|
load_balancer_port: 80
|
|
instance_port: 80
|
|
environment:
|
|
EC2_URL: bogus.example.com
|
|
register: result
|
|
ignore_errors: true
|
|
|
|
- name: assert invalid ec2_url parameter
|
|
assert:
|
|
that:
|
|
- 'result.failed'
|
|
- 'result.msg.startswith("No handler was ready to authenticate.")'
|
|
|
|
|
|
# ============================================================
|
|
- name: test valid ec2_url parameter
|
|
ec2_elb_lb:
|
|
name: "{{ tag_prefix }}"
|
|
region: "{{ ec2_region }}"
|
|
state: present
|
|
zones:
|
|
- us-east-1a
|
|
- us-east-1d
|
|
listeners:
|
|
- protocol: http
|
|
load_balancer_port: 80
|
|
instance_port: 80
|
|
environment:
|
|
EC2_URL: '{{ec2_url}}'
|
|
register: result
|
|
ignore_errors: true
|
|
|
|
- name: assert valid ec2_url parameter
|
|
assert:
|
|
that:
|
|
- 'result.failed'
|
|
- 'result.msg.startswith("No handler was ready to authenticate.")'
|
|
|
|
|
|
# ============================================================
|
|
- name: test credentials from environment
|
|
ec2_elb_lb:
|
|
name: "{{ tag_prefix }}"
|
|
region: "{{ ec2_region }}"
|
|
state: present
|
|
zones:
|
|
- us-east-1a
|
|
- us-east-1d
|
|
listeners:
|
|
- protocol: http
|
|
load_balancer_port: 80
|
|
instance_port: 80
|
|
environment:
|
|
EC2_ACCESS_KEY: bogus_access_key
|
|
EC2_SECRET_KEY: bogus_secret_key
|
|
register: result
|
|
ignore_errors: true
|
|
|
|
- name: assert credentials from environment
|
|
assert:
|
|
that:
|
|
- 'result.failed'
|
|
- '"InvalidClientTokenId" in result.msg'
|
|
|
|
|
|
# ============================================================
|
|
- name: test credential parameters
|
|
ec2_elb_lb:
|
|
name: "{{ tag_prefix }}"
|
|
region: "{{ ec2_region }}"
|
|
state: present
|
|
zones:
|
|
- us-east-1a
|
|
- us-east-1d
|
|
listeners:
|
|
- protocol: http
|
|
load_balancer_port: 80
|
|
instance_port: 80
|
|
register: result
|
|
ignore_errors: true
|
|
|
|
- name: assert credential parameters
|
|
assert:
|
|
that:
|
|
- 'result.failed'
|
|
- '"No handler was ready to authenticate. 1 handlers were checked." in result.msg'
|