57 lines
1.1 KiB
YAML
57 lines
1.1 KiB
YAML
|
- name: setup custom security group
|
||
|
|
cs_securitygroup: name={{ cs_resource_prefix }}_sg
|
||
|
|
register: sg
|
||
|
|
- name: verify setup
|
||
|
|
assert:
|
||
|
|
that:
|
||
|
|
- sg|success
|
||
|
|
|
||
|
|
- name: setup default security group
|
||
|
|
cs_securitygroup: name=default
|
||
|
|
register: sg
|
||
|
|
- name: verify setup
|
||
|
|
assert:
|
||
|
|
that:
|
||
|
|
- sg|success
|
||
|
|
|
||
|
|
- name: setup remove icmp rule
|
||
|
|
cs_securitygroup_rule:
|
||
|
|
security_group: default
|
||
|
|
protocol: icmp
|
||
|
|
type: ingress
|
||
|
|
icmp_type: -1
|
||
|
|
icmp_code: -1
|
||
|
|
state: absent
|
||
|
|
register: sg_rule
|
||
|
|
- name: verify remove icmp rule
|
||
|
|
assert:
|
||
|
|
that:
|
||
|
|
- sg_rule|success
|
||
|
|
|
||
|
|
- name: setup remove http range rule
|
||
|
|
cs_securitygroup_rule:
|
||
|
|
security_group: default
|
||
|
|
start_port: 8000
|
||
|
|
end_port: 8888
|
||
|
|
cidr: 1.2.3.4/32
|
||
|
|
state: absent
|
||
|
|
register: sg_rule
|
||
|
|
- name: verify remove http range rule
|
||
|
|
assert:
|
||
|
|
that:
|
||
|
|
- sg_rule|success
|
||
|
|
|
||
|
|
- name: setup remove single port udp rule
|
||
|
|
cs_securitygroup_rule:
|
||
|
|
security_group: default
|
||
|
|
port: 5353
|
||
|
|
protocol: udp
|
||
|
|
type: egress
|
||
|
|
user_security_group: '{{ cs_resource_prefix }}-user-sg'
|
||
|
|
state: absent
|
||
|
|
register: sg_rule
|
||
|
|
- name: verify remove single port udp rule
|
||
|
|
assert:
|
||
|
|
that:
|
||
|
|
- sg_rule|success
|