Updated module to be compliant with test cases.

* Added integration tests
* Added unit tests
This commit is contained in:
Allen Sanabria 2016-03-28 20:38:52 -07:00
parent 349db85b00
commit ee523be26c
5 changed files with 913 additions and 212 deletions

View file

@ -68,7 +68,7 @@ options:
description: description:
- Wait for operation to complete before returning - Wait for operation to complete before returning
required: false required: false
default: true default: false
wait_timeout: wait_timeout:
description: description:
- How many seconds to wait for an operation to complete before timing out - How many seconds to wait for an operation to complete before timing out
@ -95,14 +95,14 @@ EXAMPLES = '''
- name: Create new nat gateway with client token - name: Create new nat gateway with client token
ec2_vpc_nat_gateway: ec2_vpc_nat_gateway:
state: present state: present
subnet_id: subnet-12345678 subnet_id: subnet-12345678
eip_address: 52.1.1.1 eip_address: 52.1.1.1
region: ap-southeast-2 region: ap-southeast-2
client_token: abcd-12345678 client_token: abcd-12345678
register: new_nat_gateway register: new_nat_gateway
- name: Create new nat gateway allocation-id - name: Create new nat gateway using an allocation-id
ec2_vpc_nat_gateway: ec2_vpc_nat_gateway:
state: present state: present
subnet_id: subnet-12345678 subnet_id: subnet-12345678
@ -110,16 +110,7 @@ EXAMPLES = '''
region: ap-southeast-2 region: ap-southeast-2
register: new_nat_gateway register: new_nat_gateway
- name: Create new nat gateway with when condition - name: Create new nat gateway, using an eip address and wait for available status
ec2_vpc_nat_gateway:
state: present
subnet_id: subnet-12345678
eip_address: 52.1.1.1
region: ap-southeast-2
register: new_nat_gateway
when: existing_nat_gateways.result == []
- name: Create new nat gateway and wait for available status
ec2_vpc_nat_gateway: ec2_vpc_nat_gateway:
state: present state: present
subnet_id: subnet-12345678 subnet_id: subnet-12345678
@ -218,98 +209,98 @@ try:
except ImportError: except ImportError:
HAS_BOTO3 = False HAS_BOTO3 = False
import time
import datetime import datetime
import random
import time
from dateutil.tz import tzutc
DRY_RUN_GATEWAYS = [
{
"nat_gateway_id": "nat-123456789",
"subnet_id": "subnet-123456789",
"nat_gateway_addresses": [
{
"public_ip": "55.55.55.55",
"network_interface_id": "eni-1234567",
"private_ip": "10.0.0.102",
"allocation_id": "eipalloc-1234567"
}
],
"state": "available",
"create_time": "2016-03-05T05:19:20.282000+00:00",
"vpc_id": "vpc-12345678"
}
]
DRY_RUN_GATEWAY_UNCONVERTED = [
{
'VpcId': 'vpc-12345678',
'State': 'available',
'NatGatewayId': 'nat-123456789',
'SubnetId': 'subnet-123456789',
'NatGatewayAddresses': [
{
'PublicIp': '55.55.55.55',
'NetworkInterfaceId': 'eni-1234567',
'AllocationId': 'eipalloc-1234567',
'PrivateIp': '10.0.0.102'
}
],
'CreateTime': datetime.datetime(2016, 3, 5, 5, 19, 20, 282000, tzinfo=tzutc())
}
]
DRY_RUN_ALLOCATION_UNCONVERTED = {
'Addresses': [
{
'PublicIp': '55.55.55.55',
'Domain': 'vpc',
'AllocationId': 'eipalloc-1234567'
}
]
}
DRY_RUN_MSGS = 'DryRun Mode:'
def convert_to_lower(data): def convert_to_lower(data):
"""Convert all uppercase keys in dict with lowercase_ """Convert all uppercase keys in dict with lowercase_
Args: Args:
data (dict): Dictionary with keys that have upper cases in them data (dict): Dictionary with keys that have upper cases in them
Example.. NatGatewayAddresses == nat_gateway_addresses Example.. FooBar == foo_bar
if a val is of type datetime.datetime, it will be converted to if a val is of type datetime.datetime, it will be converted to
the ISO 8601 the ISO 8601
Basic Usage: Basic Usage:
>>> test = {'NatGatewaysAddresses': []} >>> test = {'FooBar': []}
>>> test = convert_to_lower(test) >>> test = convert_to_lower(test)
{ {
'nat_gateways_addresses': [] 'foo_bar': []
} }
Returns: Returns:
Dictionary Dictionary
""" """
results = dict() results = dict()
for key, val in data.items(): if isinstance(data, dict):
key = re.sub('([A-Z]{1})', r'_\1', key).lower()[1:] for key, val in data.items():
if isinstance(val, datetime.datetime): key = re.sub(r'(([A-Z]{1,3}){1})', r'_\1', key).lower()
results[key] = val.isoformat() if key[0] == '_':
else: key = key[1:]
results[key] = val if isinstance(val, datetime.datetime):
results[key] = val.isoformat()
elif isinstance(val, dict):
results[key] = convert_to_lower(val)
elif isinstance(val, list):
converted = list()
for item in val:
converted.append(convert_to_lower(item))
results[key] = converted
else:
results[key] = val
return results return results
def formatted_nat_gw_output(data): def get_nat_gateways(client, subnet_id=None, nat_gateway_id=None,
"""Format the results of NatGateways into lowercase with underscores. states=None, check_mode=False):
Args:
data (list): List of dictionaries with keys that have upper cases in
them. Example.. NatGatewayAddresses == nat_gateway_addresses
if a val is of type datetime.datetime, it will be converted to
the ISO 8601
Basic Usage:
>>> test = [
{
'VpcId': 'vpc-12345',
'State': 'available',
'NatGatewayId': 'nat-0b2f9f2ac3f51a653',
'SubnetId': 'subnet-12345',
'NatGatewayAddresses': [
{
'PublicIp': '52.52.52.52',
'NetworkInterfaceId': 'eni-12345',
'AllocationId': 'eipalloc-12345',
'PrivateIp': '10.0.0.100'
}
],
'CreateTime': datetime.datetime(2016, 3, 5, 5, 19, 20, 282000, tzinfo=tzutc())
}
]
>>> test = formatted_nat_gw_output(test)
[
{
'nat_gateway_id': 'nat-0b2f9f2ac3f51a653',
'subnet_id': 'subnet-12345',
'nat_gateway_addresses': [
{
'public_ip': '52.52.52.52',
'network_interface_id': 'eni-12345',
'private_ip': '10.0.0.100',
'allocation_id': 'eipalloc-12345'
}
],
'state': 'available',
'create_time': '2016-03-05T05:19:20.282000+00:00',
'vpc_id': 'vpc-12345'
}
]
Returns:
List
"""
results = list()
for gw in data:
output = dict()
ng_addresses = gw.pop('NatGatewayAddresses')
output = convert_to_lower(gw)
output['nat_gateway_addresses'] = []
for address in ng_addresses:
gw_data = convert_to_lower(address)
output['nat_gateway_addresses'].append(gw_data)
results.append(output)
return results
def get_nat_gateways(client, subnet_id=None, nat_gateway_id=None):
"""Retrieve a list of NAT Gateways """Retrieve a list of NAT Gateways
Args: Args:
client (botocore.client.EC2): Boto3 client client (botocore.client.EC2): Boto3 client
@ -317,29 +308,31 @@ def get_nat_gateways(client, subnet_id=None, nat_gateway_id=None):
Kwargs: Kwargs:
subnet_id (str): The subnet_id the nat resides in. subnet_id (str): The subnet_id the nat resides in.
nat_gateway_id (str): The Amazon nat id. nat_gateway_id (str): The Amazon nat id.
states (list): States available (pending, failed, available, deleting, and deleted)
default=None
Basic Usage: Basic Usage:
>>> client = boto3.client('ec2') >>> client = boto3.client('ec2')
>>> subnet_id = 'subnet-w4t12897' >>> subnet_id = 'subnet-12345678'
>>> get_nat_gateways(client, subnet_id) >>> get_nat_gateways(client, subnet_id)
[ [
true, true,
"", "",
{ {
"nat_gateway_id": "nat-03835afb6e31df79b", "nat_gateway_id": "nat-123456789",
"subnet_id": "subnet-w4t12897", "subnet_id": "subnet-123456789",
"nat_gateway_addresses": [ "nat_gateway_addresses": [
{ {
"public_ip": "52.87.29.36", "public_ip": "55.55.55.55",
"network_interface_id": "eni-5579742d", "network_interface_id": "eni-1234567",
"private_ip": "10.0.0.102", "private_ip": "10.0.0.102",
"allocation_id": "eipalloc-36014da3" "allocation_id": "eipalloc-1234567"
} }
], ],
"state": "deleted", "state": "deleted",
"create_time": "2016-03-05T00:33:21.209000+00:00", "create_time": "2016-03-05T00:33:21.209000+00:00",
"delete_time": "2016-03-05T00:36:37.329000+00:00", "delete_time": "2016-03-05T00:36:37.329000+00:00",
"vpc_id": "vpc-w68571b5" "vpc_id": "vpc-12345678"
} }
Returns: Returns:
@ -348,6 +341,8 @@ def get_nat_gateways(client, subnet_id=None, nat_gateway_id=None):
params = dict() params = dict()
err_msg = "" err_msg = ""
gateways_retrieved = False gateways_retrieved = False
if not states:
states = ['available', 'pending']
if nat_gateway_id: if nat_gateway_id:
params['NatGatewayIds'] = [nat_gateway_id] params['NatGatewayIds'] = [nat_gateway_id]
else: else:
@ -355,19 +350,39 @@ def get_nat_gateways(client, subnet_id=None, nat_gateway_id=None):
{ {
'Name': 'subnet-id', 'Name': 'subnet-id',
'Values': [subnet_id] 'Values': [subnet_id]
},
{
'Name': 'state',
'Values': states
} }
] ]
try: try:
gateways = client.describe_nat_gateways(**params)['NatGateways'] if not check_mode:
existing_gateways = formatted_nat_gw_output(gateways) gateways = client.describe_nat_gateways(**params)['NatGateways']
gateways_retrieved = True existing_gateways = list()
except botocore.exceptions.ClientError as e: if gateways:
err_msg = str(e) for gw in gateways:
existing_gateways.append(convert_to_lower(gw))
gateways_retrieved = True
else:
gateways_retrieved = True
existing_gateways = []
if nat_gateway_id:
if DRY_RUN_GATEWAYS[0]['nat_gateway_id'] == nat_gateway_id:
existing_gateways = DRY_RUN_GATEWAYS
elif subnet_id:
if DRY_RUN_GATEWAYS[0]['subnet_id'] == subnet_id:
existing_gateways = DRY_RUN_GATEWAYS
err_msg = '{0} Retrieving gateways'.format(DRY_RUN_MSGS)
except botocore.exceptions.ClientError, e:
err_msg = str(e)
return gateways_retrieved, err_msg, existing_gateways return gateways_retrieved, err_msg, existing_gateways
def wait_for_status(client, wait_timeout, nat_gateway_id, status): def wait_for_status(client, wait_timeout, nat_gateway_id, status,
check_mode=False):
"""Wait for the Nat Gateway to reach a status """Wait for the Nat Gateway to reach a status
Args: Args:
client (botocore.client.EC2): Boto3 client client (botocore.client.EC2): Boto3 client
@ -378,27 +393,27 @@ def wait_for_status(client, wait_timeout, nat_gateway_id, status):
Basic Usage: Basic Usage:
>>> client = boto3.client('ec2') >>> client = boto3.client('ec2')
>>> subnet_id = 'subnet-w4t12897' >>> subnet_id = 'subnet-12345678'
>>> allocation_id = 'eipalloc-36014da3' >>> allocation_id = 'eipalloc-12345678'
>>> wait_for_status(client, subnet_id, allocation_id) >>> wait_for_status(client, subnet_id, allocation_id)
[ [
true, true,
"", "",
{ {
"nat_gateway_id": "nat-03835afb6e31df79b", "nat_gateway_id": "nat-123456789",
"subnet_id": "subnet-w4t12897", "subnet_id": "subnet-1234567",
"nat_gateway_addresses": [ "nat_gateway_addresses": [
{ {
"public_ip": "52.87.29.36", "public_ip": "55.55.55.55",
"network_interface_id": "eni-5579742d", "network_interface_id": "eni-1234567",
"private_ip": "10.0.0.102", "private_ip": "10.0.0.102",
"allocation_id": "eipalloc-36014da3" "allocation_id": "eipalloc-12345678"
} }
], ],
"state": "deleted", "state": "deleted",
"create_time": "2016-03-05T00:33:21.209000+00:00", "create_time": "2016-03-05T00:33:21.209000+00:00",
"delete_time": "2016-03-05T00:36:37.329000+00:00", "delete_time": "2016-03-05T00:36:37.329000+00:00",
"vpc_id": "vpc-w68571b5" "vpc_id": "vpc-12345677"
} }
] ]
@ -409,25 +424,40 @@ def wait_for_status(client, wait_timeout, nat_gateway_id, status):
wait_timeout = time.time() + wait_timeout wait_timeout = time.time() + wait_timeout
status_achieved = False status_achieved = False
nat_gateway = list() nat_gateway = list()
states = ['pending', 'failed', 'available', 'deleting', 'deleted']
err_msg = "" err_msg = ""
while wait_timeout > time.time(): while wait_timeout > time.time():
try: try:
gws_retrieved, err_msg, nat_gateway = ( gws_retrieved, err_msg, nat_gateway = (
get_nat_gateways(client, nat_gateway_id=nat_gateway_id) get_nat_gateways(
client, nat_gateway_id=nat_gateway_id,
states=states, check_mode=check_mode
)
) )
if gws_retrieved and nat_gateway: if gws_retrieved and nat_gateway:
if nat_gateway[0].get('state') == status: nat_gateway = nat_gateway[0]
if check_mode:
nat_gateway['state'] = status
if nat_gateway.get('state') == status:
status_achieved = True status_achieved = True
break break
elif nat_gateway[0].get('state') == 'failed': elif nat_gateway.get('state') == 'failed':
err_msg = nat_gateway[0].get('failure_message') err_msg = nat_gateway.get('failure_message')
break break
elif nat_gateway.get('state') == 'pending':
if nat_gateway.has_key('failure_message'):
err_msg = nat_gateway.get('failure_message')
status_achieved = False
break
else: else:
time.sleep(polling_increment_secs) time.sleep(polling_increment_secs)
except botocore.exceptions.ClientError as e:
except botocore.exceptions.ClientError, e:
err_msg = str(e) err_msg = str(e)
if not status_achieved: if not status_achieved:
@ -435,7 +465,8 @@ def wait_for_status(client, wait_timeout, nat_gateway_id, status):
return status_achieved, err_msg, nat_gateway return status_achieved, err_msg, nat_gateway
def gateway_in_subnet_exists(client, subnet_id, allocation_id=None): def gateway_in_subnet_exists(client, subnet_id, allocation_id=None,
check_mode=False):
"""Retrieve all NAT Gateways for a subnet. """Retrieve all NAT Gateways for a subnet.
Args: Args:
subnet_id (str): The subnet_id the nat resides in. subnet_id (str): The subnet_id the nat resides in.
@ -446,26 +477,26 @@ def gateway_in_subnet_exists(client, subnet_id, allocation_id=None):
Basic Usage: Basic Usage:
>>> client = boto3.client('ec2') >>> client = boto3.client('ec2')
>>> subnet_id = 'subnet-w4t12897' >>> subnet_id = 'subnet-1234567'
>>> allocation_id = 'eipalloc-36014da3' >>> allocation_id = 'eipalloc-1234567'
>>> gateway_in_subnet_exists(client, subnet_id, allocation_id) >>> gateway_in_subnet_exists(client, subnet_id, allocation_id)
( (
[ [
{ {
"nat_gateway_id": "nat-03835afb6e31df79b", "nat_gateway_id": "nat-123456789",
"subnet_id": "subnet-w4t12897", "subnet_id": "subnet-123456789",
"nat_gateway_addresses": [ "nat_gateway_addresses": [
{ {
"public_ip": "52.87.29.36", "public_ip": "55.55.55.55",
"network_interface_id": "eni-5579742d", "network_interface_id": "eni-1234567",
"private_ip": "10.0.0.102", "private_ip": "10.0.0.102",
"allocation_id": "eipalloc-36014da3" "allocation_id": "eipalloc-1234567"
} }
], ],
"state": "deleted", "state": "deleted",
"create_time": "2016-03-05T00:33:21.209000+00:00", "create_time": "2016-03-05T00:33:21.209000+00:00",
"delete_time": "2016-03-05T00:36:37.329000+00:00", "delete_time": "2016-03-05T00:36:37.329000+00:00",
"vpc_id": "vpc-w68571b5" "vpc_id": "vpc-1234567"
} }
], ],
False False
@ -476,18 +507,22 @@ def gateway_in_subnet_exists(client, subnet_id, allocation_id=None):
""" """
allocation_id_exists = False allocation_id_exists = False
gateways = [] gateways = []
gws_retrieved, _, gws = get_nat_gateways(client, subnet_id) states = ['available', 'pending']
gws_retrieved, _, gws = (
get_nat_gateways(
client, subnet_id, states=states, check_mode=check_mode
)
)
if not gws_retrieved: if not gws_retrieved:
return gateways, allocation_id_exists return gateways, allocation_id_exists
for gw in gws: for gw in gws:
for address in gw['nat_gateway_addresses']: for address in gw['nat_gateway_addresses']:
if gw.get('state') == 'available' or gw.get('state') == 'pending': if allocation_id:
if allocation_id: if address.get('allocation_id') == allocation_id:
if address.get('allocation_id') == allocation_id: allocation_id_exists = True
allocation_id_exists = True
gateways.append(gw)
else:
gateways.append(gw) gateways.append(gw)
else:
gateways.append(gw)
return gateways, allocation_id_exists return gateways, allocation_id_exists
@ -511,22 +546,40 @@ def get_eip_allocation_id_by_address(client, eip_address, check_mode=False):
Tuple (str, str) Tuple (str, str)
""" """
params = { params = {
'PublicIps': [eip_address] 'PublicIps': [eip_address],
} }
allocation_id = None allocation_id = None
err_msg = "" err_msg = ""
if check_mode:
return "eipalloc-123456", err_msg
try: try:
allocation = client.describe_addresses(**params)['Addresses'][0] if not check_mode:
if not allocation.get('Domain') != 'vpc': allocations = client.describe_addresses(**params)['Addresses']
err_msg = ( if len(allocations) == 1:
"EIP provided is a non-VPC EIP, please allocate a VPC scoped EIP" allocation = allocations[0]
) else:
allocation = None
else: else:
allocation_id = allocation.get('AllocationId') dry_run_eip = (
except botocore.exceptions.ClientError as e: DRY_RUN_ALLOCATION_UNCONVERTED['Addresses'][0]['PublicIp']
err_msg = str(e) )
if dry_run_eip == eip_address:
allocation = DRY_RUN_ALLOCATION_UNCONVERTED['Addresses'][0]
else:
allocation = None
if allocation:
if allocation.get('Domain') != 'vpc':
err_msg = (
"EIP {0} is a non-VPC EIP, please allocate a VPC scoped EIP"
.format(eip_address)
)
else:
allocation_id = allocation.get('AllocationId')
else:
err_msg = (
"EIP {0} does not exist".format(eip_address)
)
except botocore.exceptions.ClientError, e:
err_msg = str(e)
return allocation_id, err_msg return allocation_id, err_msg
@ -547,20 +600,28 @@ def allocate_eip_address(client, check_mode=False):
Returns: Returns:
Tuple (bool, str) Tuple (bool, str)
""" """
if check_mode:
return True, "eipalloc-123456"
ip_allocated = False ip_allocated = False
new_eip = None
err_msg = ''
params = { params = {
'Domain': 'vpc' 'Domain': 'vpc',
} }
try: try:
new_eip = client.allocate_address(**params) if check_mode:
ip_allocated = True ip_allocated = True
except botocore.exceptions.ClientError: random_numbers = (
pass ''.join(str(x) for x in random.sample(range(0, 9), 7))
)
new_eip = 'eipalloc-{0}'.format(random_numbers)
else:
new_eip = client.allocate_address(**params)['AllocationId']
ip_allocated = True
err_msg = 'eipalloc id {0} created'.format(new_eip)
return ip_allocated, new_eip['AllocationId'] except botocore.exceptions.ClientError, e:
err_msg = str(e)
return ip_allocated, err_msg, new_eip
def release_address(client, allocation_id, check_mode=False): def release_address(client, allocation_id, check_mode=False):
"""Release an EIP from your EIP Pool """Release an EIP from your EIP Pool
@ -597,7 +658,8 @@ def release_address(client, allocation_id, check_mode=False):
return ip_released return ip_released
def create(client, subnet_id, allocation_id, client_token=None, def create(client, subnet_id, allocation_id, client_token=None,
wait=False, wait_timeout=0, if_exist_do_not_create=False): wait=False, wait_timeout=0, if_exist_do_not_create=False,
check_mode=False):
"""Create an Amazon NAT Gateway. """Create an Amazon NAT Gateway.
Args: Args:
client (botocore.client.EC2): Boto3 client client (botocore.client.EC2): Boto3 client
@ -617,27 +679,27 @@ def create(client, subnet_id, allocation_id, client_token=None,
Basic Usage: Basic Usage:
>>> client = boto3.client('ec2') >>> client = boto3.client('ec2')
>>> subnet_id = 'subnet-w4t12897' >>> subnet_id = 'subnet-1234567'
>>> allocation_id = 'eipalloc-36014da3' >>> allocation_id = 'eipalloc-1234567'
>>> create(client, subnet_id, allocation_id, if_exist_do_not_create=True, wait=True, wait_timeout=500) >>> create(client, subnet_id, allocation_id, if_exist_do_not_create=True, wait=True, wait_timeout=500)
[ [
true, true,
"", "",
{ {
"nat_gateway_id": "nat-03835afb6e31df79b", "nat_gateway_id": "nat-123456789",
"subnet_id": "subnet-w4t12897", "subnet_id": "subnet-1234567",
"nat_gateway_addresses": [ "nat_gateway_addresses": [
{ {
"public_ip": "52.87.29.36", "public_ip": "55.55.55.55",
"network_interface_id": "eni-5579742d", "network_interface_id": "eni-1234567",
"private_ip": "10.0.0.102", "private_ip": "10.0.0.102",
"allocation_id": "eipalloc-36014da3" "allocation_id": "eipalloc-1234567"
} }
], ],
"state": "deleted", "state": "deleted",
"create_time": "2016-03-05T00:33:21.209000+00:00", "create_time": "2016-03-05T00:33:21.209000+00:00",
"delete_time": "2016-03-05T00:36:37.329000+00:00", "delete_time": "2016-03-05T00:36:37.329000+00:00",
"vpc_id": "vpc-w68571b5" "vpc_id": "vpc-1234567"
} }
] ]
@ -650,6 +712,7 @@ def create(client, subnet_id, allocation_id, client_token=None,
} }
request_time = datetime.datetime.utcnow() request_time = datetime.datetime.utcnow()
changed = False changed = False
success = False
token_provided = False token_provided = False
err_msg = "" err_msg = ""
@ -658,17 +721,34 @@ def create(client, subnet_id, allocation_id, client_token=None,
params['ClientToken'] = client_token params['ClientToken'] = client_token
try: try:
result = client.create_nat_gateway(**params)["NatGateway"] if not check_mode:
result = client.create_nat_gateway(**params)["NatGateway"]
else:
result = DRY_RUN_GATEWAY_UNCONVERTED[0]
result['CreateTime'] = datetime.datetime.utcnow()
result['NatGatewayAddresses'][0]['AllocationId'] = allocation_id
result['SubnetId'] = subnet_id
success = True
changed = True changed = True
create_time = result['CreateTime'].replace(tzinfo=None) create_time = result['CreateTime'].replace(tzinfo=None)
if token_provided and (request_time > create_time): if token_provided and (request_time > create_time):
changed = False changed = False
elif wait: elif wait:
status_achieved, err_msg, result = ( success, err_msg, result = (
wait_for_status( wait_for_status(
client, wait_timeout, result['NatGatewayId'], 'available' client, wait_timeout, result['NatGatewayId'], 'available',
check_mode=check_mode
) )
) )
if success:
err_msg = (
'Nat gateway {0} created'.format(result['nat_gateway_id'])
)
if check_mode:
result['nat_gateway_addresses'][0]['allocation_id'] = allocation_id
result['subnet_id'] = subnet_id
except botocore.exceptions.ClientError as e: except botocore.exceptions.ClientError as e:
if "IdempotentParameterMismatch" in e.message: if "IdempotentParameterMismatch" in e.message:
err_msg = ( err_msg = (
@ -676,8 +756,10 @@ def create(client, subnet_id, allocation_id, client_token=None,
) )
else: else:
err_msg = str(e) err_msg = str(e)
success = False
changed = False
return changed, err_msg, result return success, changed, err_msg, result
def pre_create(client, subnet_id, allocation_id=None, eip_address=None, def pre_create(client, subnet_id, allocation_id=None, eip_address=None,
if_exist_do_not_create=False, wait=False, wait_timeout=0, if_exist_do_not_create=False, wait=False, wait_timeout=0,
@ -729,45 +811,74 @@ def pre_create(client, subnet_id, allocation_id=None, eip_address=None,
] ]
Returns: Returns:
Tuple (bool, str, list) Tuple (bool, bool, str, list)
""" """
success = False
changed = False changed = False
err_msg = "" err_msg = ""
results = list() results = list()
if not allocation_id and not eip_address: if not allocation_id and not eip_address:
existing_gateways, allocation_id_exists = ( existing_gateways, allocation_id_exists = (
gateway_in_subnet_exists(client, subnet_id) gateway_in_subnet_exists(client, subnet_id, check_mode=check_mode)
) )
if len(existing_gateways) > 0 and if_exist_do_not_create: if len(existing_gateways) > 0 and if_exist_do_not_create:
results = existing_gateways success = True
return changed, err_msg, results changed = False
results = existing_gateways[0]
err_msg = (
'Nat Gateway {0} already exists in subnet_id {1}'
.format(
existing_gateways[0]['nat_gateway_id'], subnet_id
)
)
return success, changed, err_msg, results
else: else:
_, allocation_id = allocate_eip_address(client) success, err_msg, allocation_id = (
allocate_eip_address(client, check_mode=check_mode)
)
if not success:
return success, 'False', err_msg, dict()
elif eip_address or allocation_id: elif eip_address or allocation_id:
if eip_address and not allocation_id: if eip_address and not allocation_id:
allocation_id = ( allocation_id, err_msg = (
get_eip_allocation_id_by_address( get_eip_allocation_id_by_address(
client, eip_address, check_mode=check_mode client, eip_address, check_mode=check_mode
) )
) )
if not allocation_id:
success = False
changed = False
return success, changed, err_msg, dict()
existing_gateways, allocation_id_exists = ( existing_gateways, allocation_id_exists = (
gateway_in_subnet_exists(client, subnet_id, allocation_id) gateway_in_subnet_exists(
client, subnet_id, allocation_id, check_mode=check_mode
)
) )
if len(existing_gateways) > 0 and (allocation_id_exists or if_exist_do_not_create): if len(existing_gateways) > 0 and (allocation_id_exists or if_exist_do_not_create):
results = existing_gateways success = True
return changed, err_msg, results changed = False
results = existing_gateways[0]
err_msg = (
'Nat Gateway {0} already exists in subnet_id {1}'
.format(
existing_gateways[0]['nat_gateway_id'], subnet_id
)
)
return success, changed, err_msg, results
changed, err_msg, results = create( success, changed, err_msg, results = create(
client, subnet_id, allocation_id, client_token, client, subnet_id, allocation_id, client_token,
wait, wait_timeout,if_exist_do_not_create wait, wait_timeout, if_exist_do_not_create, check_mode=check_mode
) )
return changed, err_msg, results return success, changed, err_msg, results
def remove(client, nat_gateway_id, wait=False, wait_timeout=0, release_eip=False): def remove(client, nat_gateway_id, wait=False, wait_timeout=0,
release_eip=False, check_mode=False):
"""Delete an Amazon NAT Gateway. """Delete an Amazon NAT Gateway.
Args: Args:
client (botocore.client.EC2): Boto3 client client (botocore.client.EC2): Boto3 client
@ -809,47 +920,71 @@ def remove(client, nat_gateway_id, wait=False, wait_timeout=0, release_eip=False
params = { params = {
'NatGatewayId': nat_gateway_id 'NatGatewayId': nat_gateway_id
} }
success = False
changed = False changed = False
err_msg = "" err_msg = ""
results = list() results = list()
states = ['pending', 'available' ]
try: try:
exist, _, gw = get_nat_gateways(client, nat_gateway_id=nat_gateway_id) exist, _, gw = (
get_nat_gateways(
client, nat_gateway_id=nat_gateway_id,
states=states, check_mode=check_mode
)
)
if exist and len(gw) == 1: if exist and len(gw) == 1:
results = gw[0] results = gw[0]
result = client.delete_nat_gateway(**params) if not check_mode:
result = convert_to_lower(result) client.delete_nat_gateway(**params)
allocation_id = ( allocation_id = (
results['nat_gateway_addresses'][0]['allocation_id'] results['nat_gateway_addresses'][0]['allocation_id']
) )
changed = True changed = True
success = True
err_msg = (
'Nat gateway {0} is in a deleting state. Delete was successfull'
.format(nat_gateway_id)
)
if wait:
status_achieved, err_msg, results = (
wait_for_status(
client, wait_timeout, nat_gateway_id, 'deleted',
check_mode=check_mode
)
)
if status_achieved:
err_msg = (
'Nat gateway {0} was deleted successfully'
.format(nat_gateway_id)
)
except botocore.exceptions.ClientError as e: except botocore.exceptions.ClientError as e:
err_msg = str(e) err_msg = str(e)
if wait and not err_msg:
status_achieved, err_msg, results = (
wait_for_status(client, wait_timeout, nat_gateway_id, 'deleted')
)
if release_eip: if release_eip:
eip_released = release_address(client, allocation_id) eip_released = (
release_address(client, allocation_id, check_mode=check_mode)
)
if not eip_released: if not eip_released:
err_msg = "Failed to release eip %s".format(allocation_id) err_msg = "Failed to release eip %s".format(allocation_id)
return changed, err_msg, results return success, changed, err_msg, results
def main(): def main():
argument_spec = ec2_argument_spec() argument_spec = ec2_argument_spec()
argument_spec.update(dict( argument_spec.update(dict(
subnet_id=dict(), subnet_id=dict(type='str'),
eip_address=dict(), eip_address=dict(type='str'),
allocation_id=dict(), allocation_id=dict(type='str'),
if_exist_do_not_create=dict(type='bool', default=False), if_exist_do_not_create=dict(type='bool', default=False),
state=dict(default='present', choices=['present', 'absent']), state=dict(default='present', choices=['present', 'absent']),
wait=dict(type='bool', default=True), wait=dict(type='bool', default=False),
wait_timeout=dict(type='int', default=320, required=False), wait_timeout=dict(type='int', default=320, required=False),
release_eip=dict(type='bool', default=False), release_eip=dict(type='bool', default=False),
nat_gateway_id=dict(), nat_gateway_id=dict(type='str'),
client_token=dict(), client_token=dict(type='str'),
) )
) )
module = AnsibleModule( module = AnsibleModule(
@ -890,40 +1025,40 @@ def main():
module.fail_json(msg="Boto3 Client Error - " + str(e.msg)) module.fail_json(msg="Boto3 Client Error - " + str(e.msg))
changed = False changed = False
err_msg = None err_msg = ''
#Ensure resource is present #Ensure resource is present
if state == 'present': if state == 'present':
if not subnet_id: if not subnet_id:
module.fail_json(msg='subnet_id is required for creation') module.fail_json(msg='subnet_id is required for creation')
elif check_mode: success, changed, err_msg, results = (
changed = True pre_create(
results = 'Would have created NAT Gateway if not in check mode' client, subnet_id, allocation_id, eip_address,
else: if_exist_do_not_create, wait, wait_timeout,
changed, err_msg, results = ( client_token, check_mode=check_mode
pre_create(
client, subnet_id, allocation_id, eip_address,
if_exist_do_not_create, wait, wait_timeout,
client_token
)
) )
)
else: else:
if not nat_gateway_id: if not nat_gateway_id:
module.fail_json(msg='nat_gateway_id is required for removal') module.fail_json(msg='nat_gateway_id is required for removal')
elif check_mode:
changed = True
results = 'Would have deleted NAT Gateway if not in check mode'
else: else:
changed, err_msg, results = ( success, changed, err_msg, results = (
remove(client, nat_gateway_id, wait, wait_timeout, release_eip) remove(
client, nat_gateway_id, wait, wait_timeout, release_eip,
check_mode=check_mode
)
) )
if err_msg: if not success:
module.fail_json(msg=err_msg) module.exit_json(
msg=err_msg, success=success, changed=changed
)
else: else:
module.exit_json(changed=changed, **results[0]) module.exit_json(
msg=err_msg, success=success, changed=changed, **results
)
# import module snippets # import module snippets
from ansible.module_utils.basic import * from ansible.module_utils.basic import *

View file

@ -0,0 +1 @@
test_subnet_id: 'subnet-123456789'

View file

@ -0,0 +1,76 @@
- name: Launching NAT Gateway and allocate a new eip.
ec2_vpc_nat_gateway:
region: us-west-2
state: present
subnet_id: "{{ test_subnet_id }}"
wait: yes
wait_timeout: 600
register: nat
- debug:
var: nat
- fail:
msg: "Failed to create"
when: '"{{ nat["changed"] }}" != "True"'
- name: Launch a new gateway only if one does not exist already in this subnet.
ec2_vpc_nat_gateway:
if_exist_do_not_create: yes
region: us-west-2
state: present
subnet_id: "{{ test_subnet_id }}"
wait: yes
wait_timeout: 600
register: nat_idempotent
- debug:
var: nat_idempotent
- fail:
msg: "Failed to be idempotent"
when: '"{{ nat_idempotent["changed"] }}" == "True"'
- name: Launching NAT Gateway and allocate a new eip even if one already exists in the subnet.
ec2_vpc_nat_gateway:
region: us-west-2
state: present
subnet_id: "{{ test_subnet_id }}"
wait: yes
wait_timeout: 600
register: new_nat
- debug:
var: new_nat
- fail:
msg: "Failed to create"
when: '"{{ new_nat["changed"] }}" != "True"'
- name: Launching NAT Gateway with allocation id, this call is idempotent and will not create anything.
ec2_vpc_nat_gateway:
allocation_id: eipalloc-1234567
region: us-west-2
state: present
subnet_id: "{{ test_subnet_id }}"
wait: yes
wait_timeout: 600
register: nat_with_eipalloc
- debug:
var: nat_with_eipalloc
- fail:
msg: 'Failed to be idempotent.'
when: '"{{ nat_with_eipalloc["changed"] }}" == "True"'
- name: Delete the 1st nat gateway and do not wait for it to finish
ec2_vpc_nat_gateway:
region: us-west-2
nat_gateway_id: "{{ nat.nat_gateway_id }}"
state: absent
- name: Delete the nat_with_eipalloc and release the eip
ec2_vpc_nat_gateway:
region: us-west-2
nat_gateway_id: "{{ new_nat.nat_gateway_id }}"
release_eip: yes
state: absent
wait: yes
wait_timeout: 600

View file

@ -0,0 +1,3 @@
- hosts: 127.0.0.1
roles:
- { role: ec2_vpc_nat_gateway }

View file

@ -0,0 +1,486 @@
#!/usr/bin/python
import boto3
import unittest
from collections import namedtuple
from ansible.parsing.dataloader import DataLoader
from ansible.vars import VariableManager
from ansible.inventory import Inventory
from ansible.playbook.play import Play
from ansible.executor.task_queue_manager import TaskQueueManager
import cloud.amazon.ec2_vpc_nat_gateway as ng
Options = (
namedtuple(
'Options', [
'connection', 'module_path', 'forks', 'become', 'become_method',
'become_user', 'remote_user', 'private_key_file', 'ssh_common_args',
'sftp_extra_args', 'scp_extra_args', 'ssh_extra_args', 'verbosity',
'check'
]
)
)
# initialize needed objects
variable_manager = VariableManager()
loader = DataLoader()
options = (
Options(
connection='local',
module_path='cloud/amazon',
forks=1, become=None, become_method=None, become_user=None, check=True,
remote_user=None, private_key_file=None, ssh_common_args=None,
sftp_extra_args=None, scp_extra_args=None, ssh_extra_args=None,
verbosity=3
)
)
passwords = dict(vault_pass='')
aws_region = 'us-west-2'
# create inventory and pass to var manager
inventory = Inventory(loader=loader, variable_manager=variable_manager, host_list='localhost')
variable_manager.set_inventory(inventory)
def run(play):
tqm = None
results = None
try:
tqm = TaskQueueManager(
inventory=inventory,
variable_manager=variable_manager,
loader=loader,
options=options,
passwords=passwords,
stdout_callback='default',
)
results = tqm.run(play)
finally:
if tqm is not None:
tqm.cleanup()
return tqm, results
class AnsibleVpcNatGatewayTasks(unittest.TestCase):
def test_create_gateway_using_allocation_id(self):
play_source = dict(
name = "Create new nat gateway with eip allocation-id",
hosts = 'localhost',
gather_facts = 'no',
tasks = [
dict(
action=dict(
module='ec2_vpc_nat_gateway',
args=dict(
subnet_id='subnet-12345678',
allocation_id='eipalloc-12345678',
wait='yes',
region=aws_region,
)
),
register='nat_gateway',
),
dict(
action=dict(
module='debug',
args=dict(
msg='{{nat_gateway}}'
)
)
)
]
)
play = Play().load(play_source, variable_manager=variable_manager, loader=loader)
tqm, results = run(play)
self.failUnless(tqm._stats.ok['localhost'] == 2)
self.failUnless(tqm._stats.changed['localhost'] == 1)
def test_create_gateway_using_allocation_id_idempotent(self):
play_source = dict(
name = "Create new nat gateway with eip allocation-id",
hosts = 'localhost',
gather_facts = 'no',
tasks = [
dict(
action=dict(
module='ec2_vpc_nat_gateway',
args=dict(
subnet_id='subnet-123456789',
allocation_id='eipalloc-1234567',
wait='yes',
region=aws_region,
)
),
register='nat_gateway',
),
dict(
action=dict(
module='debug',
args=dict(
msg='{{nat_gateway}}'
)
)
)
]
)
play = Play().load(play_source, variable_manager=variable_manager, loader=loader)
tqm, results = run(play)
self.failUnless(tqm._stats.ok['localhost'] == 2)
self.assertFalse(tqm._stats.changed.has_key('localhost'))
def test_create_gateway_using_eip_address(self):
play_source = dict(
name = "Create new nat gateway with eip address",
hosts = 'localhost',
gather_facts = 'no',
tasks = [
dict(
action=dict(
module='ec2_vpc_nat_gateway',
args=dict(
subnet_id='subnet-12345678',
eip_address='55.55.55.55',
wait='yes',
region=aws_region,
)
),
register='nat_gateway',
),
dict(
action=dict(
module='debug',
args=dict(
msg='{{nat_gateway}}'
)
)
)
]
)
play = Play().load(play_source, variable_manager=variable_manager, loader=loader)
tqm, results = run(play)
self.failUnless(tqm._stats.ok['localhost'] == 2)
self.failUnless(tqm._stats.changed['localhost'] == 1)
def test_create_gateway_using_eip_address_idempotent(self):
play_source = dict(
name = "Create new nat gateway with eip address",
hosts = 'localhost',
gather_facts = 'no',
tasks = [
dict(
action=dict(
module='ec2_vpc_nat_gateway',
args=dict(
subnet_id='subnet-123456789',
eip_address='55.55.55.55',
wait='yes',
region=aws_region,
)
),
register='nat_gateway',
),
dict(
action=dict(
module='debug',
args=dict(
msg='{{nat_gateway}}'
)
)
)
]
)
play = Play().load(play_source, variable_manager=variable_manager, loader=loader)
tqm, results = run(play)
self.failUnless(tqm._stats.ok['localhost'] == 2)
self.assertFalse(tqm._stats.changed.has_key('localhost'))
def test_create_gateway_in_subnet_only_if_one_does_not_exist_already(self):
play_source = dict(
name = "Create new nat gateway only if one does not exist already",
hosts = 'localhost',
gather_facts = 'no',
tasks = [
dict(
action=dict(
module='ec2_vpc_nat_gateway',
args=dict(
if_exist_do_not_create='yes',
subnet_id='subnet-123456789',
wait='yes',
region=aws_region,
)
),
register='nat_gateway',
),
dict(
action=dict(
module='debug',
args=dict(
msg='{{nat_gateway}}'
)
)
)
]
)
play = Play().load(play_source, variable_manager=variable_manager, loader=loader)
tqm, results = run(play)
self.failUnless(tqm._stats.ok['localhost'] == 2)
self.assertFalse(tqm._stats.changed.has_key('localhost'))
def test_delete_gateway(self):
play_source = dict(
name = "Delete Nat Gateway",
hosts = 'localhost',
gather_facts = 'no',
tasks = [
dict(
action=dict(
module='ec2_vpc_nat_gateway',
args=dict(
nat_gateway_id='nat-123456789',
state='absent',
wait='yes',
region=aws_region,
)
),
register='nat_gateway',
),
dict(
action=dict(
module='debug',
args=dict(
msg='{{nat_gateway}}'
)
)
)
]
)
play = Play().load(play_source, variable_manager=variable_manager, loader=loader)
tqm, results = run(play)
self.failUnless(tqm._stats.ok['localhost'] == 2)
self.assertTrue(tqm._stats.changed.has_key('localhost'))
class AnsibleEc2VpcNatGatewayFunctions(unittest.TestCase):
def test_convert_to_lower(self):
example = ng.DRY_RUN_GATEWAY_UNCONVERTED
converted_example = ng.convert_to_lower(example[0])
keys = converted_example.keys()
keys.sort()
for i in range(len(keys)):
if i == 0:
self.assertEqual(keys[i], 'create_time')
if i == 1:
self.assertEqual(keys[i], 'nat_gateway_addresses')
gw_addresses_keys = converted_example[keys[i]][0].keys()
gw_addresses_keys.sort()
for j in range(len(gw_addresses_keys)):
if j == 0:
self.assertEqual(gw_addresses_keys[j], 'allocation_id')
if j == 1:
self.assertEqual(gw_addresses_keys[j], 'network_interface_id')
if j == 2:
self.assertEqual(gw_addresses_keys[j], 'private_ip')
if j == 3:
self.assertEqual(gw_addresses_keys[j], 'public_ip')
if i == 2:
self.assertEqual(keys[i], 'nat_gateway_id')
if i == 3:
self.assertEqual(keys[i], 'state')
if i == 4:
self.assertEqual(keys[i], 'subnet_id')
if i == 5:
self.assertEqual(keys[i], 'vpc_id')
def test_get_nat_gateways(self):
client = boto3.client('ec2', region_name=aws_region)
success, err_msg, stream = (
ng.get_nat_gateways(client, 'subnet-123456789', check_mode=True)
)
should_return = ng.DRY_RUN_GATEWAYS
self.assertTrue(success)
self.assertEqual(stream, should_return)
def test_get_nat_gateways_no_gateways_found(self):
client = boto3.client('ec2', region_name=aws_region)
success, err_msg, stream = (
ng.get_nat_gateways(client, 'subnet-1234567', check_mode=True)
)
self.assertTrue(success)
self.assertEqual(stream, [])
def test_wait_for_status(self):
client = boto3.client('ec2', region_name=aws_region)
success, err_msg, gws = (
ng.wait_for_status(
client, 5, 'nat-123456789', 'available', check_mode=True
)
)
should_return = ng.DRY_RUN_GATEWAYS[0]
self.assertTrue(success)
self.assertEqual(gws, should_return)
def test_wait_for_status_to_timeout(self):
client = boto3.client('ec2', region_name=aws_region)
success, err_msg, gws = (
ng.wait_for_status(
client, 2, 'nat-12345678', 'available', check_mode=True
)
)
self.assertFalse(success)
self.assertEqual(gws, [])
def test_gateway_in_subnet_exists_with_allocation_id(self):
client = boto3.client('ec2', region_name=aws_region)
gws, err_msg = (
ng.gateway_in_subnet_exists(
client, 'subnet-123456789', 'eipalloc-1234567', check_mode=True
)
)
should_return = ng.DRY_RUN_GATEWAYS
self.assertEqual(gws, should_return)
def test_gateway_in_subnet_exists_with_allocation_id_does_not_exist(self):
client = boto3.client('ec2', region_name=aws_region)
gws, err_msg = (
ng.gateway_in_subnet_exists(
client, 'subnet-123456789', 'eipalloc-123', check_mode=True
)
)
should_return = list()
self.assertEqual(gws, should_return)
def test_gateway_in_subnet_exists_without_allocation_id(self):
client = boto3.client('ec2', region_name=aws_region)
gws, err_msg = (
ng.gateway_in_subnet_exists(
client, 'subnet-123456789', check_mode=True
)
)
should_return = ng.DRY_RUN_GATEWAYS
self.assertEqual(gws, should_return)
def test_get_eip_allocation_id_by_address(self):
client = boto3.client('ec2', region_name=aws_region)
allocation_id, _ = (
ng.get_eip_allocation_id_by_address(
client, '55.55.55.55', check_mode=True
)
)
should_return = 'eipalloc-1234567'
self.assertEqual(allocation_id, should_return)
def test_get_eip_allocation_id_by_address_does_not_exist(self):
client = boto3.client('ec2', region_name=aws_region)
allocation_id, err_msg = (
ng.get_eip_allocation_id_by_address(
client, '52.52.52.52', check_mode=True
)
)
self.assertEqual(err_msg, 'EIP 52.52.52.52 does not exist')
self.assertIsNone(allocation_id)
def test_allocate_eip_address(self):
client = boto3.client('ec2', region_name=aws_region)
success, err_msg, eip_id = (
ng.allocate_eip_address(
client, check_mode=True
)
)
self.assertTrue(success)
def test_release_address(self):
client = boto3.client('ec2', region_name=aws_region)
success = (
ng.release_address(
client, 'eipalloc-1234567', check_mode=True
)
)
self.assertTrue(success)
def test_create(self):
client = boto3.client('ec2', region_name=aws_region)
success, changed, err_msg, results = (
ng.create(
client, 'subnet-123456', 'eipalloc-1234567', check_mode=True
)
)
self.assertTrue(success)
self.assertTrue(changed)
def test_pre_create(self):
client = boto3.client('ec2', region_name=aws_region)
success, changed, err_msg, results = (
ng.pre_create(
client, 'subnet-123456', check_mode=True
)
)
self.assertTrue(success)
self.assertTrue(changed)
def test_pre_create_idemptotent_with_allocation_id(self):
client = boto3.client('ec2', region_name=aws_region)
success, changed, err_msg, results = (
ng.pre_create(
client, 'subnet-123456789', allocation_id='eipalloc-1234567', check_mode=True
)
)
self.assertTrue(success)
self.assertFalse(changed)
def test_pre_create_idemptotent_with_eip_address(self):
client = boto3.client('ec2', region_name=aws_region)
success, changed, err_msg, results = (
ng.pre_create(
client, 'subnet-123456789', eip_address='55.55.55.55', check_mode=True
)
)
self.assertTrue(success)
self.assertFalse(changed)
def test_pre_create_idemptotent_if_exist_do_not_create(self):
client = boto3.client('ec2', region_name=aws_region)
success, changed, err_msg, results = (
ng.pre_create(
client, 'subnet-123456789', if_exist_do_not_create=True, check_mode=True
)
)
self.assertTrue(success)
self.assertFalse(changed)
def test_delete(self):
client = boto3.client('ec2', region_name=aws_region)
success, changed, err_msg, _ = (
ng.remove(
client, 'nat-123456789', check_mode=True
)
)
self.assertTrue(success)
self.assertTrue(changed)
def test_delete_and_release_ip(self):
client = boto3.client('ec2', region_name=aws_region)
success, changed, err_msg, _ = (
ng.remove(
client, 'nat-123456789', release_eip=True, check_mode=True
)
)
self.assertTrue(success)
self.assertTrue(changed)
def test_delete_if_does_not_exist(self):
client = boto3.client('ec2', region_name=aws_region)
success, changed, err_msg, _ = (
ng.remove(
client, 'nat-12345', check_mode=True
)
)
self.assertFalse(success)
self.assertFalse(changed)
def main():
unittest.main()
if __name__ == '__main__':
main()