ansible/test/integration/targets/cloudfront_distribution/defaults/main.yml
Mark Chappell 3aae025cce
cloudfront_distribution: Always add field_level_encryption_id to cache behaviour (#61271)
* cloudfront_distribution: (integration tests) Migrate to using module_defaults

* cloudfront_distribution: (integration tests) Use the ID rather than the alias

Using aliases requires providing a valid SSL certificate, as such we're not longer able to test using an arbitrary hostname

* cloudfront_distribution: (integration tests) Make sure we delete the test s3 bucket when tests fail

* cloudfront_distribution: field_level_encryption_id is now a mandatory field always add it

Setting the field to an empty string has the same effect as the original behaviour.

* Copy & Paste fixup

Co-Authored-By: Jill R <4121322+jillr@users.noreply.github.com>

Co-authored-by: Jill R <4121322+jillr@users.noreply.github.com>
2020-02-19 15:42:46 -05:00

49 lines
1.1 KiB
YAML

cloudfront_hostname: "{{ resource_prefix }}01"
# Use a domain that has a wildcard DNS
# Using an alias requires also having an SSL cert...
#cloudfront_alias: "{{ cloudfront_hostname }}.github.io"
#cloudfront_viewer_cert:
# acm_certificate_arn: ...
# certificate: ...
# certificate_source: ...
# minimum_protocol_version: ...
# ssl_support_method: ...
cloudfront_test_cache_behaviors:
- path_pattern: /test/path
forwarded_values:
headers:
- Host
- X-HTTP-Forwarded-For
- CloudFront-Forwarded-Proto
- Origin
- Referer
allowed_methods:
items:
- GET
- HEAD
- POST
- PATCH
- PUT
- OPTIONS
- DELETE
cached_methods:
- GET
- HEAD
- path_pattern: /another/path
forwarded_values:
cookies:
forward: whitelist
whitelisted_names:
- my_header
query_string: yes
query_string_cache_keys:
- whatever
allowed_methods:
items:
- GET
- HEAD
cached_methods:
- GET
- HEAD