mirror of https://github.com/ansible/ansible.git
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
768 lines
25 KiB
YAML
768 lines
25 KiB
YAML
---
|
|
# Tests for Elastic IP allocation: ec2_eip and ec2_eip_info
|
|
#
|
|
# Tests ec2_eip:
|
|
# - Basic allocation (no conditions)
|
|
# - Allocation matching a Public IP
|
|
# - Allocation matching a tag name
|
|
# - Allocation matching a tag name + value
|
|
# - Allocation from a specific pool
|
|
# - Attaching an EIP to an ENI
|
|
#
|
|
# Tests ec2_eip_info:
|
|
# - Listing all eips
|
|
# - Searching for a specific eip by public IP
|
|
# - Searching for a specific eip by allocation-id
|
|
#
|
|
# Possible Bugs:
|
|
# - check_mode not honoured #62318
|
|
#
|
|
- name: Integration testing for ec2_eip
|
|
module_defaults:
|
|
group/aws:
|
|
aws_access_key: "{{ aws_access_key }}"
|
|
aws_secret_key: "{{ aws_secret_key }}"
|
|
security_token: "{{ security_token | default(omit) }}"
|
|
region: "{{ aws_region }}"
|
|
ec2_eip:
|
|
in_vpc: yes
|
|
|
|
block:
|
|
- name: Get the current caller identity facts
|
|
aws_caller_info:
|
|
register: caller_info
|
|
|
|
- name: list available AZs
|
|
aws_az_info:
|
|
register: region_azs
|
|
|
|
- name: pick an AZ for testing
|
|
set_fact:
|
|
subnet_az: "{{ region_azs.availability_zones[0].zone_name }}"
|
|
|
|
- name: create a VPC
|
|
ec2_vpc_net:
|
|
name: "{{ resource_prefix }}-vpc"
|
|
state: present
|
|
cidr_block: "{{ vpc_cidr }}"
|
|
tags:
|
|
AnsibleEIPTest: "Pending"
|
|
AnsibleEIPTestPrefix: "{{ resource_prefix }}"
|
|
register: vpc_result
|
|
|
|
- name: create subnet
|
|
ec2_vpc_subnet:
|
|
cidr: "{{ subnet_cidr }}"
|
|
az: "{{ subnet_az }}"
|
|
vpc_id: "{{ vpc_result.vpc.id }}"
|
|
state: present
|
|
register: vpc_subnet_create
|
|
|
|
- ec2_vpc_igw:
|
|
state: present
|
|
vpc_id: "{{ vpc_result.vpc.id }}"
|
|
register: vpc_igw
|
|
|
|
# =================================================
|
|
# A rough Lock using the VPC...
|
|
#
|
|
# Because we're testing the behaviour when dealing with objects that are
|
|
# both tagged and untagged, we need to know that EIPs aren't being poached
|
|
# underneath us. See specifically the behaviour around
|
|
# I(reuse_existing_ip_allowed), I(tag_name) and I(tag_value)
|
|
#
|
|
# We also want to know that things like only 1 EIP was allocated / released.
|
|
#
|
|
# Because Python 2.x and Python 3.x tests are run concurrently there's a
|
|
# high chance of the tests interfering with each other if we don't try to
|
|
# perform some kind of locking here.
|
|
|
|
- name: Look for signs of concurrent EIP tests. Pause if they are running or their prefix comes before ours.
|
|
vars:
|
|
running_query: "vpcs[?tags.AnsibleEIPTest=='Running']"
|
|
pending_query: "vpcs[?tags.AnsibleEIPTest=='Pending'].tags.AnsibleEIPTestPrefix"
|
|
ec2_vpc_net_info:
|
|
filters:
|
|
"tag:AnsibleEIPTest": ["Pending", "Running"]
|
|
register: vpc_info
|
|
retries: 120
|
|
delay: 5
|
|
until:
|
|
# Anyone else running?
|
|
- ( vpc_info | json_query(running_query) | length == 0 )
|
|
# Are we first in the queue?
|
|
- ( vpc_info | json_query(pending_query) | sort | first == resource_prefix )
|
|
|
|
- name: Make a crude lock
|
|
ec2_vpc_net:
|
|
name: "{{ resource_prefix }}-vpc"
|
|
state: present
|
|
cidr_block: "{{ vpc_cidr }}"
|
|
tags:
|
|
AnsibleEIPTest: "Running"
|
|
AnsibleEIPTestPrefix: "{{ resource_prefix }}"
|
|
|
|
# =================================================
|
|
|
|
- name: Get current state of EIPs
|
|
ec2_eip_info:
|
|
register: eip_info_start
|
|
|
|
- name: Require that there are no free IPs when we start, otherwise we can't test things properly
|
|
assert:
|
|
that:
|
|
- eip_info_start is defined
|
|
- '"addresses" in eip_info_start'
|
|
- ( eip_info_start.addresses | length ) == ( eip_info_start | json_query("addresses[].association_id") | length )
|
|
|
|
#==================================================================
|
|
# EIP Creation 'no conditions'
|
|
|
|
# XXX check_mode not honoured
|
|
#- name: Allocate a new eip (CHECK MODE)
|
|
# ec2_eip:
|
|
# state: present
|
|
# register: eip
|
|
# check_mode: yes
|
|
#- ec2_eip_info:
|
|
# register: eip_info
|
|
#- assert:
|
|
# that:
|
|
# - eip is defined
|
|
# - eip is changed
|
|
# - ( eip_info_start.addresses | length ) == ( eip_info.addresses | length )
|
|
|
|
- name: Allocate a new eip (no conditions)
|
|
ec2_eip:
|
|
state: present
|
|
register: eip
|
|
- ec2_eip_info:
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- eip is defined
|
|
- eip is changed
|
|
- eip.public_ip is defined and ( eip.public_ip | ipaddr )
|
|
- eip.allocation_id is defined and eip.allocation_id.startswith("eipalloc-")
|
|
- ( eip_info_start.addresses | length ) + 1 == ( eip_info.addresses | length )
|
|
|
|
# Get the info for our specific eip
|
|
- ec2_eip_info:
|
|
filters:
|
|
public-ip: '{{ eip.public_ip }}'
|
|
- assert:
|
|
that:
|
|
- '"addresses" in eip_info'
|
|
- eip_info.addresses | length == 1
|
|
- eip_info.addresses[0].allocation_id == eip.allocation_id
|
|
- eip_info.addresses[0].domain == "vpc"
|
|
- eip_info.addresses[0].public_ip == eip.public_ip
|
|
|
|
# Get the info for our specific eip
|
|
- ec2_eip_info:
|
|
filters:
|
|
allocation-id: '{{ eip.allocation_id }}'
|
|
- assert:
|
|
that:
|
|
- '"addresses" in eip_info'
|
|
- eip_info.addresses | length == 1
|
|
- eip_info.addresses[0].allocation_id == eip.allocation_id
|
|
- eip_info.addresses[0].domain == "vpc"
|
|
- eip_info.addresses[0].public_ip == eip.public_ip
|
|
|
|
# Clean up EIPs as we go to reduce the risk of hitting limits
|
|
- name: Release eip
|
|
ec2_eip:
|
|
state: absent
|
|
public_ip: "{{ eip.public_ip }}"
|
|
register: eip_release
|
|
- ec2_eip_info:
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- eip_release is defined
|
|
- eip_release is changed
|
|
- ( eip_info_start.addresses | length ) == ( eip_info.addresses | length )
|
|
|
|
#==================================================================
|
|
# EIP Creation: reuse allowed
|
|
|
|
- name: Allocate a new eip - attempt reusing unallocated ones (none available)
|
|
ec2_eip:
|
|
state: present
|
|
reuse_existing_ip_allowed: yes
|
|
register: eip
|
|
- ec2_eip_info:
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- eip is defined
|
|
- eip is changed
|
|
- eip.public_ip is defined and ( eip.public_ip | ipaddr )
|
|
- eip.allocation_id is defined and eip.allocation_id.startswith("eipalloc-")
|
|
- ( eip_info_start.addresses | length ) + 1 == ( eip_info.addresses | length )
|
|
|
|
- name: Re-Allocate a new eip - attempt reusing unallocated ones (one available)
|
|
ec2_eip:
|
|
state: present
|
|
reuse_existing_ip_allowed: yes
|
|
register: reallocate_eip
|
|
- ec2_eip_info:
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- reallocate_eip is defined
|
|
- reallocate_eip is not changed
|
|
- reallocate_eip.public_ip is defined and ( reallocate_eip.public_ip | ipaddr )
|
|
- reallocate_eip.allocation_id is defined and reallocate_eip.allocation_id.startswith("eipalloc-")
|
|
- ( eip_info_start.addresses | length ) + 1 == ( eip_info.addresses | length )
|
|
|
|
- name: Release eip
|
|
ec2_eip:
|
|
state: absent
|
|
public_ip: "{{ eip.public_ip }}"
|
|
register: eip_release
|
|
- ec2_eip_info:
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- ( eip_info_start.addresses | length ) == ( eip_info.addresses | length )
|
|
- eip_release is defined
|
|
- eip_release is changed
|
|
|
|
#==================================================================
|
|
# EIP Creation: Matching an existing IP
|
|
|
|
- name: Allocate a new eip
|
|
ec2_eip:
|
|
state: present
|
|
register: eip
|
|
- ec2_eip_info:
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- eip is defined
|
|
- eip is changed
|
|
- eip.public_ip is defined and ( eip.public_ip | ipaddr )
|
|
- eip.allocation_id is defined and eip.allocation_id.startswith("eipalloc-")
|
|
- ( eip_info_start.addresses | length ) + 1 == ( eip_info.addresses | length )
|
|
|
|
- name: Match an existing eip (changed == false)
|
|
ec2_eip:
|
|
state: present
|
|
public_ip: "{{ eip.public_ip }}"
|
|
register: reallocate_eip
|
|
- ec2_eip_info:
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- reallocate_eip is defined
|
|
- reallocate_eip is not changed
|
|
- reallocate_eip.public_ip is defined and ( reallocate_eip.public_ip | ipaddr )
|
|
- reallocate_eip.allocation_id is defined and reallocate_eip.allocation_id.startswith("eipalloc-")
|
|
- ( eip_info_start.addresses | length ) + 1 == ( eip_info.addresses | length )
|
|
|
|
- name: Release eip
|
|
ec2_eip:
|
|
state: absent
|
|
public_ip: "{{ eip.public_ip }}"
|
|
register: eip_release
|
|
- ec2_eip_info:
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- eip_release is defined
|
|
- eip_release is changed
|
|
- ( eip_info_start.addresses | length ) == ( eip_info.addresses | length )
|
|
|
|
#==================================================================
|
|
# EIP Creation: Matching Tags
|
|
|
|
- name: Allocate a new eip (no tags)
|
|
ec2_eip:
|
|
state: present
|
|
register: eip
|
|
- ec2_eip_info:
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- eip is defined
|
|
- eip is changed
|
|
- eip.public_ip is defined and ( eip.public_ip | ipaddr )
|
|
- eip.allocation_id is defined and eip.allocation_id.startswith("eipalloc-")
|
|
- ( eip_info_start.addresses | length ) + 1 == ( eip_info.addresses | length )
|
|
|
|
- name: attempt reusing an existing eip with a tag (No match available)
|
|
ec2_eip:
|
|
state: present
|
|
reuse_existing_ip_allowed: yes
|
|
tag_name: Team
|
|
register: no_tagged_eip
|
|
- ec2_eip_info:
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- no_tagged_eip is defined
|
|
- no_tagged_eip is changed
|
|
- no_tagged_eip.public_ip is defined and ( no_tagged_eip.public_ip | ipaddr )
|
|
- no_tagged_eip.allocation_id is defined and no_tagged_eip.allocation_id.startswith("eipalloc-")
|
|
- ( eip_info_start.addresses | length ) + 2 == ( eip_info.addresses | length )
|
|
|
|
- name: tag eip so we can try matching it
|
|
ec2_tag:
|
|
state: present
|
|
resource: '{{ eip.allocation_id }}'
|
|
tags:
|
|
Team: Frontend
|
|
|
|
- name: attempt reusing an existing eip with a tag (Match available)
|
|
ec2_eip:
|
|
state: present
|
|
reuse_existing_ip_allowed: yes
|
|
tag_name: Team
|
|
register: reallocate_eip
|
|
- ec2_eip_info:
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- reallocate_eip is defined
|
|
- reallocate_eip is not changed
|
|
- reallocate_eip.public_ip is defined and ( reallocate_eip.public_ip | ipaddr )
|
|
- reallocate_eip.allocation_id is defined and reallocate_eip.allocation_id.startswith("eipalloc-")
|
|
- ( eip_info_start.addresses | length ) + 2 == ( eip_info.addresses | length )
|
|
|
|
- name: attempt reusing an existing eip with a tag and it's value (no match available)
|
|
ec2_eip:
|
|
state: present
|
|
reuse_existing_ip_allowed: yes
|
|
tag_name: Team
|
|
tag_value: Backend
|
|
register: backend_eip
|
|
- ec2_eip_info:
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- backend_eip is defined
|
|
- backend_eip is changed
|
|
- backend_eip.public_ip is defined and ( backend_eip.public_ip | ipaddr )
|
|
- backend_eip.allocation_id is defined and backend_eip.allocation_id.startswith("eipalloc-")
|
|
- ( eip_info_start.addresses | length ) + 3 == ( eip_info.addresses | length )
|
|
|
|
- name: tag eip so we can try matching it
|
|
ec2_tag:
|
|
state: present
|
|
resource: '{{ eip.allocation_id }}'
|
|
tags:
|
|
Team: Backend
|
|
|
|
- name: attempt reusing an existing eip with a tag and it's value (match available)
|
|
ec2_eip:
|
|
state: present
|
|
reuse_existing_ip_allowed: yes
|
|
tag_name: Team
|
|
tag_value: Backend
|
|
register: reallocate_eip
|
|
- ec2_eip_info:
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- reallocate_eip is defined
|
|
- reallocate_eip is not changed
|
|
- reallocate_eip.public_ip is defined and reallocate_eip.public_ip != ""
|
|
- reallocate_eip.allocation_id is defined and reallocate_eip.allocation_id != ""
|
|
- ( eip_info_start.addresses | length ) + 3 == ( eip_info.addresses | length )
|
|
|
|
- name: Release backend_eip
|
|
ec2_eip:
|
|
state: absent
|
|
public_ip: "{{ backend_eip.public_ip }}"
|
|
register: eip_release
|
|
- ec2_eip_info:
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- eip_release is defined
|
|
- eip_release is changed
|
|
- ( eip_info_start.addresses | length ) + 2 == ( eip_info.addresses | length )
|
|
|
|
- name: Release no_tagged_eip
|
|
ec2_eip:
|
|
state: absent
|
|
public_ip: "{{ no_tagged_eip.public_ip }}"
|
|
register: eip_release
|
|
- ec2_eip_info:
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- eip_release is defined
|
|
- eip_release is changed
|
|
- ( eip_info_start.addresses | length ) + 1 == ( eip_info.addresses | length )
|
|
|
|
- name: Release eip
|
|
ec2_eip:
|
|
state: absent
|
|
public_ip: "{{ eip.public_ip }}"
|
|
register: eip_release
|
|
- ec2_eip_info:
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- eip_release is defined
|
|
- eip_release is changed
|
|
- ( eip_info_start.addresses | length ) == ( eip_info.addresses | length )
|
|
|
|
#==================================================================
|
|
# Allocation from a pool
|
|
|
|
- name: allocate a new eip from a pool
|
|
ec2_eip:
|
|
state: present
|
|
public_ipv4_pool: amazon
|
|
register: eip
|
|
- ec2_eip_info:
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- eip is defined
|
|
- eip is changed
|
|
- eip.public_ip is defined and ( eip.public_ip | ipaddr )
|
|
- eip.allocation_id is defined and eip.allocation_id.startswith("eipalloc-")
|
|
- ( eip_info_start.addresses | length ) + 1 == ( eip_info.addresses | length )
|
|
|
|
#==================================================================
|
|
# Assigning EIP to an ENI
|
|
|
|
- name: create ENI A
|
|
ec2_eni:
|
|
subnet_id: '{{ vpc_subnet_create.subnet.id }}'
|
|
register: eni_create_a
|
|
|
|
- name: create ENI B
|
|
ec2_eni:
|
|
subnet_id: '{{ vpc_subnet_create.subnet.id }}'
|
|
register: eni_create_b
|
|
|
|
# Test attaching EIP to ENI
|
|
- name: Attach EIP to ENI A
|
|
ec2_eip:
|
|
public_ip: "{{ eip.public_ip }}"
|
|
device_id: "{{ eni_create_a.interface.id }}"
|
|
register: associate_eip
|
|
- ec2_eip_info:
|
|
filters:
|
|
public-ip: '{{ eip.public_ip }}'
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- associate_eip is defined
|
|
- associate_eip is changed
|
|
- eip_info.addresses | length == 1
|
|
- associate_eip.public_ip is defined and eip.public_ip == associate_eip.public_ip
|
|
- associate_eip.allocation_id is defined and eip.allocation_id == associate_eip.allocation_id
|
|
- eip_info.addresses[0].allocation_id == eip.allocation_id
|
|
- eip_info.addresses[0].domain == "vpc"
|
|
- eip_info.addresses[0].public_ip == eip.public_ip
|
|
- eip_info.addresses[0].association_id is defined and eip_info.addresses[0].association_id.startswith("eipassoc-")
|
|
- eip_info.addresses[0].network_interface_id == eni_create_a.interface.id
|
|
- eip_info.addresses[0].private_ip_address is defined and ( eip_info.addresses[0].private_ip_address | ipaddr )
|
|
- eip_info.addresses[0].network_interface_owner_id == caller_info.account
|
|
|
|
- name: Re-Attach EIP to ENI A (no change)
|
|
ec2_eip:
|
|
public_ip: "{{ eip.public_ip }}"
|
|
device_id: "{{ eni_create_a.interface.id }}"
|
|
register: associate_eip
|
|
- ec2_eip_info:
|
|
filters:
|
|
public-ip: '{{ eip.public_ip }}'
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- associate_eip is defined
|
|
- associate_eip is not changed
|
|
- associate_eip.public_ip is defined and eip.public_ip == associate_eip.public_ip
|
|
- associate_eip.allocation_id is defined and eip.allocation_id == associate_eip.allocation_id
|
|
- eip_info.addresses | length == 1
|
|
- eip_info.addresses[0].allocation_id == eip.allocation_id
|
|
- eip_info.addresses[0].domain == "vpc"
|
|
- eip_info.addresses[0].public_ip == eip.public_ip
|
|
- eip_info.addresses[0].association_id is defined and eip_info.addresses[0].association_id.startswith("eipassoc-")
|
|
- eip_info.addresses[0].network_interface_id == eni_create_a.interface.id
|
|
- eip_info.addresses[0].private_ip_address is defined and ( eip_info.addresses[0].private_ip_address | ipaddr )
|
|
|
|
# Test attaching EIP to ENI B
|
|
- name: Attach EIP to ENI B (should fail, already associated)
|
|
ec2_eip:
|
|
public_ip: "{{ eip.public_ip }}"
|
|
device_id: "{{ eni_create_b.interface.id }}"
|
|
register: associate_eip
|
|
ignore_errors: yes
|
|
- ec2_eip_info:
|
|
filters:
|
|
public-ip: '{{ eip.public_ip }}'
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- associate_eip is defined
|
|
- associate_eip is failed
|
|
- eip_info.addresses | length == 1
|
|
- eip_info.addresses[0].allocation_id == eip.allocation_id
|
|
- eip_info.addresses[0].domain == "vpc"
|
|
- eip_info.addresses[0].public_ip == eip.public_ip
|
|
- eip_info.addresses[0].association_id is defined and eip_info.addresses[0].association_id.startswith("eipassoc-")
|
|
- eip_info.addresses[0].network_interface_id == eni_create_a.interface.id
|
|
- eip_info.addresses[0].private_ip_address is defined and ( eip_info.addresses[0].private_ip_address | ipaddr )
|
|
|
|
- name: Attach EIP to ENI B
|
|
ec2_eip:
|
|
public_ip: "{{ eip.public_ip }}"
|
|
device_id: "{{ eni_create_b.interface.id }}"
|
|
allow_reassociation: yes
|
|
register: associate_eip
|
|
- ec2_eip_info:
|
|
filters:
|
|
public-ip: '{{ eip.public_ip }}'
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- associate_eip is defined
|
|
- associate_eip is changed
|
|
- associate_eip.public_ip is defined and eip.public_ip == associate_eip.public_ip
|
|
- associate_eip.allocation_id is defined and eip.allocation_id == associate_eip.allocation_id
|
|
- eip_info.addresses | length == 1
|
|
- eip_info.addresses[0].allocation_id == eip.allocation_id
|
|
- eip_info.addresses[0].domain == "vpc"
|
|
- eip_info.addresses[0].public_ip == eip.public_ip
|
|
- eip_info.addresses[0].association_id is defined and eip_info.addresses[0].association_id.startswith("eipassoc-")
|
|
- eip_info.addresses[0].network_interface_id == eni_create_b.interface.id
|
|
- eip_info.addresses[0].private_ip_address is defined and ( eip_info.addresses[0].private_ip_address | ipaddr )
|
|
|
|
- name: Detach EIP from ENI B, without enabling release on disassociation
|
|
ec2_eip:
|
|
state: absent
|
|
public_ip: "{{ eip.public_ip }}"
|
|
device_id: "{{ eni_create_b.interface.id }}"
|
|
register: disassociate_eip
|
|
- ec2_eip_info:
|
|
filters:
|
|
public-ip: '{{ eip.public_ip }}'
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- associate_eip is defined
|
|
- associate_eip is changed
|
|
- eip_info.addresses | length == 1
|
|
|
|
- name: Re-detach EIP from ENI B, without enabling release on disassociation
|
|
ec2_eip:
|
|
state: absent
|
|
public_ip: "{{ eip.public_ip }}"
|
|
device_id: "{{ eni_create_b.interface.id }}"
|
|
register: associate_eip
|
|
- ec2_eip_info:
|
|
filters:
|
|
public-ip: '{{ eip.public_ip }}'
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- associate_eip is defined
|
|
- associate_eip is not changed
|
|
- eip_info.addresses | length == 1
|
|
|
|
- name: Attach EIP to ENI A
|
|
ec2_eip:
|
|
public_ip: "{{ eip.public_ip }}"
|
|
device_id: "{{ eni_create_a.interface.id }}"
|
|
register: associate_eip
|
|
- ec2_eip_info:
|
|
filters:
|
|
public-ip: '{{ eip.public_ip }}'
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- associate_eip is defined
|
|
- associate_eip is changed
|
|
- associate_eip.public_ip is defined and eip.public_ip == associate_eip.public_ip
|
|
- associate_eip.allocation_id is defined and eip.allocation_id == associate_eip.allocation_id
|
|
- eip_info.addresses[0].network_interface_id == eni_create_a.interface.id
|
|
|
|
- name: Detach EIP from ENI A, enabling release on disassociation
|
|
ec2_eip:
|
|
state: absent
|
|
public_ip: "{{ eip.public_ip }}"
|
|
device_id: "{{ eni_create_a.interface.id }}"
|
|
release_on_disassociation: yes
|
|
register: disassociate_eip
|
|
- ec2_eip_info:
|
|
filters:
|
|
public-ip: '{{ eip.public_ip }}'
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- associate_eip is defined
|
|
- associate_eip is changed
|
|
- eip_info.addresses | length == 0
|
|
|
|
- name: Re-detach EIP from ENI A, enabling release on disassociation
|
|
ec2_eip:
|
|
state: absent
|
|
public_ip: "{{ eip.public_ip }}"
|
|
device_id: "{{ eni_create_a.interface.id }}"
|
|
release_on_disassociation: yes
|
|
register: associate_eip
|
|
- ec2_eip_info:
|
|
filters:
|
|
public-ip: '{{ eip.public_ip }}'
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- associate_eip is defined
|
|
- associate_eip is not changed
|
|
- eip_info.addresses | length == 0
|
|
|
|
- ec2_eip_info:
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- ( eip_info_start.addresses | length ) == ( eip_info.addresses | length )
|
|
|
|
- name: Cleanup ENI B
|
|
ec2_eni:
|
|
state: absent
|
|
eni_id: "{{ eni_create_b.interface.id }}"
|
|
|
|
- name: Cleanup ENI A
|
|
ec2_eni:
|
|
state: absent
|
|
eni_id: "{{ eni_create_a.interface.id }}"
|
|
|
|
- name: Cleanup IGW
|
|
ec2_vpc_igw:
|
|
state: absent
|
|
vpc_id: "{{ vpc_result.vpc.id }}"
|
|
register: vpc_igw
|
|
|
|
- name: Cleanup Subnet
|
|
ec2_vpc_subnet:
|
|
state: absent
|
|
cidr: "{{ subnet_cidr }}"
|
|
vpc_id: "{{ vpc_result.vpc.id }}"
|
|
|
|
- name: Release eip
|
|
ec2_eip:
|
|
state: absent
|
|
public_ip: "{{ eip.public_ip }}"
|
|
register: eip_release
|
|
ignore_errors: true
|
|
|
|
#==================================================================
|
|
# EIP Deletion
|
|
|
|
- name: allocate a new eip
|
|
ec2_eip:
|
|
state: present
|
|
register: eip
|
|
- ec2_eip_info:
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- eip is defined
|
|
- eip is changed
|
|
- eip.public_ip is defined and ( eip.public_ip | ipaddr )
|
|
- eip.allocation_id is defined and eip.allocation_id.startswith("eipalloc-")
|
|
- ( eip_info_start.addresses | length ) + 1 == ( eip_info.addresses | length )
|
|
|
|
- name: Release eip
|
|
ec2_eip:
|
|
state: absent
|
|
public_ip: "{{ eip.public_ip }}"
|
|
register: eip_release
|
|
- ec2_eip_info:
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- eip_release is defined
|
|
- eip_release is changed
|
|
- ( eip_info_start.addresses | length ) == ( eip_info.addresses | length )
|
|
|
|
- name: Rerelease eip (no change)
|
|
ec2_eip:
|
|
state: absent
|
|
public_ip: "{{ eip.public_ip }}"
|
|
register: eip_release
|
|
- ec2_eip_info:
|
|
register: eip_info
|
|
- assert:
|
|
that:
|
|
- eip_release is defined
|
|
- eip_release is not changed
|
|
- ( eip_info_start.addresses | length ) == ( eip_info.addresses | length )
|
|
|
|
- name: Cleanup VPC
|
|
ec2_vpc_net:
|
|
state: absent
|
|
name: "{{ resource_prefix }}-vpc"
|
|
cidr_block: "{{ vpc_cidr }}"
|
|
|
|
always:
|
|
|
|
- name: Cleanup ENI A
|
|
ec2_eni:
|
|
state: absent
|
|
eni_id: "{{ eni_create_a.interface.id }}"
|
|
ignore_errors: yes
|
|
|
|
- name: Cleanup ENI B
|
|
ec2_eni:
|
|
state: absent
|
|
eni_id: "{{ eni_create_b.interface.id }}"
|
|
ignore_errors: yes
|
|
|
|
- name: Cleanup IGW
|
|
ec2_vpc_igw:
|
|
state: absent
|
|
vpc_id: "{{ vpc_result.vpc.id }}"
|
|
register: vpc_igw
|
|
|
|
- name: Cleanup Subnet
|
|
ec2_vpc_subnet:
|
|
state: absent
|
|
cidr: "{{ subnet_cidr }}"
|
|
vpc_id: "{{ vpc_result.vpc.id }}"
|
|
ignore_errors: yes
|
|
|
|
- name: Cleanup eip
|
|
ec2_eip:
|
|
state: absent
|
|
public_ip: "{{ eip.public_ip }}"
|
|
when: eip is changed
|
|
ignore_errors: yes
|
|
|
|
- name: Cleanup reallocate_eip
|
|
ec2_eip:
|
|
state: absent
|
|
public_ip: "{{ reallocate_eip.public_ip }}"
|
|
when: reallocate_eip is changed
|
|
ignore_errors: yes
|
|
|
|
- name: Cleanup backend_eip
|
|
ec2_eip:
|
|
state: absent
|
|
public_ip: "{{ backend_eip.public_ip }}"
|
|
when: backend_eip is changed
|
|
ignore_errors: yes
|
|
|
|
- name: Cleanup no_tagged_eip
|
|
ec2_eip:
|
|
state: absent
|
|
public_ip: "{{ no_tagged_eip.public_ip }}"
|
|
when: no_tagged_eip is changed
|
|
ignore_errors: yes
|
|
|
|
- name: Cleanup VPC
|
|
ec2_vpc_net:
|
|
state: absent
|
|
name: "{{ resource_prefix }}-vpc"
|
|
cidr_block: "{{ vpc_cidr }}"
|
|
ignore_errors: yes
|