cmueller/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
ansible/test/integration/targets/ec2_vpc_net/tasks/main.yml
Mark Chappell 551b17b8a2 ec2_vpc_net_info: integration tests (#62649) 
* ec2_vpc_net: (integration tests) migrate to using module_defaults

* ec2_vpc_net: (integration tests) use a private subnet for the tests

* ec2_vpc_net_info: Add integration tests

* ec2_vpc_net_info: add cidr_block_association_set to documentation

* Update AWS hacking test policy to allow VPC CIDR disassociation

* Update test/integration/targets/ec2_vpc_net/tasks/main.yml

Co-Authored-By: Jill R <4121322+jillr@users.noreply.github.com>

* Store vpc2 ID to make it clearer which VPC we're changing

* Be more consistent with our quoting

* Explicitly test that the VPC IDs haven't changed
2019-11-14 13:36:42 -07:00

1306 lines
53 KiB
YAML
Raw Blame History

---
- name: Setup AWS Environment
module_defaults:
group/aws:
aws_access_key: "{{ aws_access_key }}"
aws_secret_key: "{{ aws_secret_key }}"
security_token: "{{ security_token | default(omit) }}"
region: "{{ aws_region }}"
block:
# ============================================================
- name: Get the current caller identity facts
aws_caller_info:
register: caller_facts
- name: run the module without parameters
ec2_vpc_net:
ignore_errors: yes
register: result
- name: assert failure
assert:
that:
- result is failed
- result.msg.startswith("missing required arguments")
# ============================================================
- name: attempt to create a VPC without providing connnection information
module_defaults: { group/aws: {} }
ec2_vpc_net:
state: present
cidr_block: "{{ vpc_cidr }}"
name: "{{ resource_prefix }}"
region: us-east-1
ignore_errors: yes
register: result
- name: assert connection failure
assert:
that:
- result is failed
- '"Unable to locate credentials" in result.msg'
# ============================================================
- name: Fetch existing VPC info
ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: Check no-one is using the Prefix before we start
assert:
that:
- vpc_info.vpcs | length == 0
- name: test check mode creating a VPC
ec2_vpc_net:
state: present
cidr_block: "{{ vpc_cidr }}"
name: "{{ resource_prefix }}"
check_mode: true
register: result
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: check for a change
assert:
that:
- result is changed
- vpc_info.vpcs | length == 0
# ============================================================
- name: create a VPC
ec2_vpc_net:
state: present
cidr_block: "{{ vpc_cidr }}"
name: "{{ resource_prefix }}"
ipv6_cidr: True
register: result
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: assert the VPC was created successfully
assert:
that:
- result is successful
- result is changed
- vpc_info.vpcs | length == 1
- name: assert the output
assert:
that:
- '"cidr_block" in result.vpc'
- result.vpc.cidr_block == vpc_cidr
- result.vpc.cidr_block_association_set | length == 1
- result.vpc.cidr_block_association_set[0].association_id.startswith("vpc-cidr-assoc-")
- result.vpc.cidr_block_association_set[0].cidr_block == vpc_cidr
- result.vpc.cidr_block_association_set[0].cidr_block_state.state == "associated"
- '"classic_link_enabled" in result.vpc'
- result.vpc.dhcp_options_id.startswith("dopt-")
- result.vpc.id.startswith("vpc-")
- '"instance_tenancy" in result.vpc'
- result.vpc.ipv6_cidr_block_association_set | length == 1
- result.vpc.ipv6_cidr_block_association_set[0].association_id.startswith("vpc-cidr-assoc-")
- result.vpc.ipv6_cidr_block_association_set[0].ipv6_cidr_block | ipv6
- result.vpc.ipv6_cidr_block_association_set[0].ipv6_cidr_block_state.state == "associated"
- '"is_default" in result.vpc'
- '"state" in result.vpc'
- result.vpc.tags.keys() | length == 1
- result.vpc.tags.Name == resource_prefix
- name: set the first VPC's details as facts for comparison and cleanup
set_fact:
vpc_1_result: "{{ result }}"
vpc_1: "{{ result.vpc.id }}"
vpc_1_ipv6_cidr: "{{ result.vpc.ipv6_cidr_block_association_set.0.ipv6_cidr_block }}"
default_dhcp_options_id: "{{ result.vpc.dhcp_options_id }}"
- name: create a VPC (retry)
ec2_vpc_net:
state: present
cidr_block: "{{ vpc_cidr }}"
name: "{{ resource_prefix }}"
ipv6_cidr: True
register: result
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: assert nothing changed
assert:
that:
- result is successful
- result is not changed
- vpc_info.vpcs | length == 1
- '"cidr_block" in result.vpc'
- result.vpc.cidr_block == vpc_cidr
- result.vpc.cidr_block_association_set | length == 1
- result.vpc.cidr_block_association_set[0].association_id.startswith("vpc-cidr-assoc-")
- result.vpc.cidr_block_association_set[0].cidr_block == vpc_cidr
- result.vpc.cidr_block_association_set[0].cidr_block_state.state == "associated"
- '"classic_link_enabled" in result.vpc'
- result.vpc.dhcp_options_id.startswith("dopt-")
- result.vpc.id.startswith("vpc-")
- '"instance_tenancy" in result.vpc'
- result.vpc.ipv6_cidr_block_association_set | length == 1
- result.vpc.ipv6_cidr_block_association_set[0].association_id.startswith("vpc-cidr-assoc-")
- result.vpc.ipv6_cidr_block_association_set[0].ipv6_cidr_block | ipv6
- result.vpc.ipv6_cidr_block_association_set[0].ipv6_cidr_block_state.state == "associated"
- '"is_default" in result.vpc'
- '"state" in result.vpc'
- result.vpc.tags.keys() | length == 1
- result.vpc.tags.Name == resource_prefix
- result.vpc.id == vpc_1
# ============================================================
- name: VPC info (no filters)
ec2_vpc_net_info:
register: vpc_info
- name: Test that our new VPC shows up in the results
assert:
that:
- vpc_1 in ( vpc_info | json_query("vpcs[].vpc_id") | list )
- name: VPC info (Simple tag filter)
ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: Test vpc_info results
assert:
that:
- vpc_info.vpcs[0].cidr_block == vpc_cidr
- vpc_info.vpcs[0].cidr_block_association_set | length == 1
- vpc_info.vpcs[0].cidr_block_association_set[0].association_id == result.vpc.cidr_block_association_set[0].association_id
- vpc_info.vpcs[0].cidr_block_association_set[0].cidr_block == result.vpc.cidr_block_association_set[0].cidr_block
- vpc_info.vpcs[0].cidr_block_association_set[0].cidr_block_state.state == "associated"
- '"classic_link_dns_supported" in vpc_info.vpcs[0]'
- '"classic_link_enabled" in vpc_info.vpcs[0]'
- vpc_info.vpcs[0].dhcp_options_id == result.vpc.dhcp_options_id
- ( vpc_info.vpcs[0].enable_dns_hostnames | bool ) == True
- ( vpc_info.vpcs[0].enable_dns_support | bool ) == True
- vpc_info.vpcs[0].id == result.vpc.id
- '"instance_tenancy" in vpc_info.vpcs[0]'
- vpc_info.vpcs[0].ipv6_cidr_block_association_set | length == 1
- vpc_info.vpcs[0].ipv6_cidr_block_association_set[0].association_id == result.vpc.ipv6_cidr_block_association_set[0].association_id
- vpc_info.vpcs[0].ipv6_cidr_block_association_set[0].ipv6_cidr_block == result.vpc.ipv6_cidr_block_association_set[0].ipv6_cidr_block
- vpc_info.vpcs[0].ipv6_cidr_block_association_set[0].ipv6_cidr_block_state.state == "associated"
- '"is_default" in vpc_info.vpcs[0]'
- vpc_info.vpcs[0].owner_id == caller_facts.account
- '"state" in vpc_info.vpcs[0]'
- vpc_info.vpcs[0].vpc_id == result.vpc.id
# ============================================================
- name: Try to add IPv6 CIDR when one already exists
ec2_vpc_net:
state: present
cidr_block: "{{ vpc_cidr }}"
name: "{{ resource_prefix }}"
ipv6_cidr: True
register: result
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: Assert no changes made
assert:
that:
- '"Only one IPv6 CIDR is permitted per VPC, {{ result.vpc.id }} already has CIDR {{ vpc_1_ipv6_cidr }}" in result.warnings'
- result is not changed
- vpc_info.vpcs | length == 1
# ============================================================
- name: test check mode creating an identical VPC (multi_ok)
ec2_vpc_net:
state: present
cidr_block: "{{ vpc_cidr }}"
name: "{{ resource_prefix }}"
ipv6_cidr: True
multi_ok: yes
check_mode: true
register: result
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: assert a change would be made
assert:
that:
- result is changed
- name: assert a change was not actually made
assert:
that:
- vpc_info.vpcs | length == 1
# ============================================================
- name: create a VPC with a dedicated tenancy using the same CIDR and name
ec2_vpc_net:
state: present
cidr_block: "{{ vpc_cidr }}"
name: "{{ resource_prefix }}"
ipv6_cidr: True
tenancy: dedicated
multi_ok: yes
register: result
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: assert a new VPC was created
assert:
that:
- result is successful
- result is changed
- result.vpc.instance_tenancy == "dedicated"
- result.vpc.id != vpc_1
- vpc_info.vpcs | length == 2
- name: set the second VPC's details as facts for comparison and cleanup
set_fact:
vpc_2_result: "{{ result }}"
vpc_2: "{{ result.vpc.id }}"
# ============================================================
- name: VPC info (Simple VPC-ID filter)
ec2_vpc_net_info:
filters:
"vpc-id": "{{ vpc_2 }}"
register: vpc_info
- name: Test vpc_info results
assert:
that:
- vpc_info.vpcs[0].cidr_block == vpc_cidr
- vpc_info.vpcs[0].cidr_block_association_set | length == 1
- vpc_info.vpcs[0].cidr_block_association_set[0].association_id == result.vpc.cidr_block_association_set[0].association_id
- vpc_info.vpcs[0].cidr_block_association_set[0].cidr_block == result.vpc.cidr_block_association_set[0].cidr_block
- vpc_info.vpcs[0].cidr_block_association_set[0].cidr_block_state.state == "associated"
- '"classic_link_dns_supported" in vpc_info.vpcs[0]'
- '"classic_link_enabled" in vpc_info.vpcs[0]'
- vpc_info.vpcs[0].dhcp_options_id == result.vpc.dhcp_options_id
- ( vpc_info.vpcs[0].enable_dns_hostnames | bool ) == True
- ( vpc_info.vpcs[0].enable_dns_support | bool ) == True
- vpc_info.vpcs[0].id == vpc_2
- '"instance_tenancy" in vpc_info.vpcs[0]'
- vpc_info.vpcs[0].ipv6_cidr_block_association_set | length == 1
- vpc_info.vpcs[0].ipv6_cidr_block_association_set[0].association_id == result.vpc.ipv6_cidr_block_association_set[0].association_id
- vpc_info.vpcs[0].ipv6_cidr_block_association_set[0].ipv6_cidr_block == result.vpc.ipv6_cidr_block_association_set[0].ipv6_cidr_block
- vpc_info.vpcs[0].ipv6_cidr_block_association_set[0].ipv6_cidr_block_state.state == "associated"
- '"is_default" in vpc_info.vpcs[0]'
- vpc_info.vpcs[0].owner_id == caller_facts.account
- '"state" in vpc_info.vpcs[0]'
- vpc_info.vpcs[0].vpc_id == vpc_2
# ============================================================
# This will only fail if there are already *2* vpcs otherwise ec2_vpc_net
# assumes you want to update your existing VPC...
- name: attempt to create another VPC with the same CIDR and name without multi_ok
ec2_vpc_net:
state: present
cidr_block: "{{ vpc_cidr }}"
name: "{{ resource_prefix }}"
ipv6_cidr: True
tenancy: dedicated
multi_ok: no
register: new_result
ignore_errors: yes
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: assert failure
assert:
that:
- new_result is failed
- '"If you would like to create the VPC anyway please pass True to the multi_ok param" in new_result.msg'
- vpc_info.vpcs | length == 2
# ============================================================
# FIXME: right now if there are multiple matching VPCs they cannot be removed,
# as there is no vpc_id option for idempotence. A workaround is to retag the VPC.
- name: remove Name tag on new VPC
ec2_tag:
state: absent
resource: "{{ vpc_2 }}"
tags:
Name: "{{ resource_prefix }}"
- name: add a unique name tag
ec2_tag:
state: present
resource: "{{ vpc_2 }}"
tags:
Name: "{{ resource_prefix }}-changed"
- name: delete one of the VPCs
ec2_vpc_net:
state: absent
cidr_block: "{{ vpc_cidr }}"
name: "{{ resource_prefix }}-changed"
register: result
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: assert success
assert:
that:
- result is changed
- not result.vpc
- vpc_info.vpcs | length == 1
# ============================================================
- name: attempt to delete a VPC that doesn't exist
ec2_vpc_net:
state: absent
cidr_block: "{{ vpc_cidr }}"
name: "{{ resource_prefix }}-changed"
register: result
- name: assert no changes were made
assert:
that:
- result is not changed
- not result.vpc
# ============================================================
- name: create a DHCP option set to use in next test
ec2_vpc_dhcp_option:
dns_servers:
- 4.4.4.4
- 8.8.8.8
tags:
Name: "{{ resource_prefix }}"
register: new_dhcp
- name: assert the DHCP option set was successfully created
assert:
that:
- new_dhcp is changed
- name: modify the DHCP options set for a VPC (check_mode)
ec2_vpc_net:
state: present
cidr_block: "{{ vpc_cidr }}"
name: "{{ resource_prefix }}"
dhcp_opts_id: "{{ new_dhcp.dhcp_options_id }}"
register: result
check_mode: True
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: assert the DHCP option set changed but didn't update
assert:
that:
- result is changed
- result.vpc.id == vpc_1
- vpc_info.vpcs | length == 1
- vpc_info.vpcs[0].dhcp_options_id == default_dhcp_options_id
- name: modify the DHCP options set for a VPC
ec2_vpc_net:
state: present
cidr_block: "{{ vpc_cidr }}"
name: "{{ resource_prefix }}"
dhcp_opts_id: "{{ new_dhcp.dhcp_options_id }}"
register: result
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: assert the DHCP option set changed
assert:
that:
- result is changed
- result.vpc.id == vpc_1
- default_dhcp_options_id != result.vpc.dhcp_options_id
- result.vpc.dhcp_options_id == new_dhcp.dhcp_options_id
- vpc_info.vpcs | length == 1
- vpc_info.vpcs[0].dhcp_options_id == new_dhcp.dhcp_options_id
- name: modify the DHCP options set for a VPC (retry)
ec2_vpc_net:
state: present
cidr_block: "{{ vpc_cidr }}"
name: "{{ resource_prefix }}"
dhcp_opts_id: "{{ new_dhcp.dhcp_options_id }}"
register: result
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: assert the DHCP option set changed
assert:
that:
- result is not changed
- result.vpc.id == vpc_1
- result.vpc.dhcp_options_id == new_dhcp.dhcp_options_id
- vpc_info.vpcs | length == 1
- vpc_info.vpcs[0].dhcp_options_id == new_dhcp.dhcp_options_id
# ============================================================
# XXX #62677
#- name: disable dns_hostnames (check mode)
# ec2_vpc_net:
# state: present
# cidr_block: "{{ vpc_cidr }}"
# name: "{{ resource_prefix }}"
# dns_hostnames: False
# register: result
# check_mode: True
#- ec2_vpc_net_info:
# filters:
# "tag:Name": "{{ resource_prefix }}"
# register: vpc_info
#- name: assert changed was set but not made
# assert:
# that:
# - result is successful
# - result is changed
# - vpc_info.vpcs | length == 1
# - vpc_info.vpcs[0].enable_dns_hostnames | bool == True
# - vpc_info.vpcs[0].enable_dns_support | bool == True
- name: disable dns_hostnames
ec2_vpc_net:
state: present
cidr_block: "{{ vpc_cidr }}"
name: "{{ resource_prefix }}"
dns_hostnames: False
register: result
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: assert a change was made
assert:
that:
- result is successful
- result is changed
- result.vpc.id == vpc_1
- vpc_info.vpcs | length == 1
- vpc_info.vpcs[0].enable_dns_hostnames | bool == False
- vpc_info.vpcs[0].enable_dns_support | bool == True
- name: disable dns_hostnames (retry)
ec2_vpc_net:
state: present
cidr_block: "{{ vpc_cidr }}"
name: "{{ resource_prefix }}"
dns_hostnames: False
register: result
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: assert a change was made
assert:
that:
- result is successful
- result is not changed
- result.vpc.id == vpc_1
- vpc_info.vpcs | length == 1
- vpc_info.vpcs[0].enable_dns_hostnames | bool == False
- vpc_info.vpcs[0].enable_dns_support | bool == True
# XXX #62677
#- name: disable dns_support (check mode)
# ec2_vpc_net:
# state: present
# cidr_block: "{{ vpc_cidr }}"
# name: "{{ resource_prefix }}"
# dns_hostnames: False
# dns_support: False
# check_mode: True
# register: result
#- ec2_vpc_net_info:
# filters:
# "tag:Name": "{{ resource_prefix }}"
# register: vpc_info
#- name: assert changed was set but not made
# assert:
# that:
# - result is successful
# - result is changed
# - result.vpc.id == vpc_1
# - vpc_info.vpcs | length == 1
# - vpc_info.vpcs[0].enable_dns_hostnames | bool == False
# - vpc_info.vpcs[0].enable_dns_support | bool == True
- name: disable dns_support
ec2_vpc_net:
state: present
cidr_block: "{{ vpc_cidr }}"
name: "{{ resource_prefix }}"
dns_hostnames: False
dns_support: False
register: result
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: assert a change was made
assert:
that:
- result is successful
- result is changed
- result.vpc.id == vpc_1
- vpc_info.vpcs | length == 1
- vpc_info.vpcs[0].enable_dns_hostnames | bool == False
- vpc_info.vpcs[0].enable_dns_support | bool == False
- name: disable dns_support (retry)
ec2_vpc_net:
state: present
cidr_block: "{{ vpc_cidr }}"
name: "{{ resource_prefix }}"
dns_hostnames: False
dns_support: False
register: result
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: assert a change was not made
assert:
that:
- result is successful
- result is not changed
- result.vpc.id == vpc_1
- vpc_info.vpcs | length == 1
- vpc_info.vpcs[0].enable_dns_hostnames | bool == False
- vpc_info.vpcs[0].enable_dns_support | bool == False
# XXX #62677
#- name: re-enable dns_support (check mode)
# ec2_vpc_net:
# state: present
# cidr_block: "{{ vpc_cidr }}"
# name: "{{ resource_prefix }}"
# register: result
# check_mode: True
#- ec2_vpc_net_info:
# filters:
# "tag:Name": "{{ resource_prefix }}"
# register: vpc_info
#- name: assert a change was made
# assert:
# that:
# - result is successful
# - result is changed
# - result.vpc.id == vpc_1
# - vpc_info.vpcs | length == 1
# - vpc_info.vpcs[0].enable_dns_hostnames | bool == True
# - vpc_info.vpcs[0].enable_dns_support | bool == True
- name: re-enable dns_support
ec2_vpc_net:
state: present
cidr_block: "{{ vpc_cidr }}"
name: "{{ resource_prefix }}"
register: result
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: assert a change was made
assert:
that:
- result is successful
- result is changed
- result.vpc.id == vpc_1
- vpc_info.vpcs | length == 1
- vpc_info.vpcs[0].enable_dns_hostnames | bool == True
- vpc_info.vpcs[0].enable_dns_support | bool == True
- name: re-enable dns_support (retry)
ec2_vpc_net:
state: present
cidr_block: "{{ vpc_cidr }}"
name: "{{ resource_prefix }}"
register: result
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: assert a change was not made
assert:
that:
- result is successful
- result is not changed
- result.vpc.id == vpc_1
- vpc_info.vpcs | length == 1
- vpc_info.vpcs[0].enable_dns_hostnames | bool == True
- vpc_info.vpcs[0].enable_dns_support | bool == True
# ============================================================
- name: modify tags (check mode)
ec2_vpc_net:
state: present
cidr_block: "{{ vpc_cidr }}"
name: "{{ resource_prefix }}"
tags:
Ansible: Test
check_mode: true
register: result
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: assert the VPC has Name but not Ansible tag
assert:
that:
- result is successful
- result is changed
- result.vpc.id == vpc_1
- result.vpc.tags | length == 1
- result.vpc.tags.Name == resource_prefix
- vpc_info.vpcs | length == 1
- vpc_info.vpcs[0].tags | length == 1
- vpc_info.vpcs[0].tags.Name == resource_prefix
- name: modify tags
ec2_vpc_net:
state: present
cidr_block: "{{ vpc_cidr }}"
name: "{{ resource_prefix }}"
tags:
Ansible: Test
register: result
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: assert the VPC has Name and Ansible tags
assert:
that:
- result is successful
- result is changed
- result.vpc.id == vpc_1
- result.vpc.tags | length == 2
- result.vpc.tags.Ansible == "Test"
- result.vpc.tags.Name == resource_prefix
- vpc_info.vpcs | length == 1
- vpc_info.vpcs[0].tags | length == 2
- vpc_info.vpcs[0].tags.Ansible == "Test"
- vpc_info.vpcs[0].tags.Name == resource_prefix
- name: modify tags (no change)
ec2_vpc_net:
state: present
cidr_block: "{{ vpc_cidr }}"
name: "{{ resource_prefix }}"
dns_support: True
dns_hostnames: True
tags:
Ansible: Test
register: result
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: assert the VPC has Name and Ansible tags
assert:
that:
- result is successful
- result is not changed
- result.vpc.id == vpc_1
- result.vpc.tags|length == 2
- result.vpc.tags.Ansible == "Test"
- result.vpc.tags.Name == resource_prefix
- vpc_info.vpcs | length == 1
- vpc_info.vpcs[0].tags|length == 2
- vpc_info.vpcs[0].tags.Ansible == "Test"
- vpc_info.vpcs[0].tags.Name == resource_prefix
# ============================================================
# #62678
#- name: modify CIDR (check mode)
# ec2_vpc_net:
# state: present
# cidr_block:
# - "{{ vpc_cidr }}"
# - "{{ vpc_cidr_a }}"
# name: "{{ resource_prefix }}"
# check_mode: true
# register: result
#- ec2_vpc_net_info:
# filters:
# "tag:Name": "{{ resource_prefix }}"
# register: vpc_info
#- name: Check the CIDRs weren't changed
# assert:
# that:
# - result is successful
# - result is changed
# - result.vpc.id == vpc_1
# - vpc_info.vpcs | length == 1
# - vpc_info.vpcs[0].cidr_block == vpc_cidr
# - vpc_cidr in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
# - vpc_cidr_a not in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
# - vpc_cidr_b not in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
# - vpc_info.vpcs[0].cidr_block_association_set | length == 1
# - vpc_info.vpcs[0].cidr_block_association_set[0].association_id.startswith("vpc-cidr-assoc-")
# - vpc_info.vpcs[0].cidr_block_association_set[1].association_id.startswith("vpc-cidr-assoc-")
# - vpc_info.vpcs[0].cidr_block_association_set[0].cidr_block_state.state == "associated"
# - vpc_info.vpcs[0].cidr_block_association_set[1].cidr_block_state.state == "associated"
# - vpc_cidr in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
# - vpc_cidr_a not in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
# - vpc_cidr_b not in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
- name: modify CIDR
ec2_vpc_net:
state: present
cidr_block:
- "{{ vpc_cidr }}"
- "{{ vpc_cidr_a }}"
name: "{{ resource_prefix }}"
register: result
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: assert the CIDRs changed
assert:
that:
- result is successful
- result is changed
- result.vpc.id == vpc_1
- vpc_info.vpcs | length == 1
- result.vpc.cidr_block == vpc_cidr
- vpc_info.vpcs[0].cidr_block == vpc_cidr
- result.vpc.cidr_block_association_set | length == 2
- result.vpc.cidr_block_association_set[0].association_id.startswith("vpc-cidr-assoc-")
- result.vpc.cidr_block_association_set[1].association_id.startswith("vpc-cidr-assoc-")
- result.vpc.cidr_block_association_set[0].cidr_block_state.state == "associated"
- result.vpc.cidr_block_association_set[1].cidr_block_state.state == "associated"
- vpc_cidr in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_a in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_b not in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_info.vpcs[0].cidr_block_association_set | length == 2
- vpc_info.vpcs[0].cidr_block_association_set[0].association_id.startswith("vpc-cidr-assoc-")
- vpc_info.vpcs[0].cidr_block_association_set[1].association_id.startswith("vpc-cidr-assoc-")
- vpc_info.vpcs[0].cidr_block_association_set[0].cidr_block_state.state == "associated"
- vpc_info.vpcs[0].cidr_block_association_set[1].cidr_block_state.state == "associated"
- vpc_cidr in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_a in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_b not in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
- name: modify CIDR (no change)
ec2_vpc_net:
state: present
cidr_block:
- "{{ vpc_cidr }}"
- "{{ vpc_cidr_a }}"
name: "{{ resource_prefix }}"
register: result
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: assert the CIDRs didn't change
assert:
that:
- result is successful
- result is not changed
- result.vpc.id == vpc_1
- vpc_info.vpcs | length == 1
- result.vpc.cidr_block == vpc_cidr
- vpc_info.vpcs[0].cidr_block == vpc_cidr
- result.vpc.cidr_block_association_set | length == 2
- result.vpc.cidr_block_association_set[0].association_id.startswith("vpc-cidr-assoc-")
- result.vpc.cidr_block_association_set[1].association_id.startswith("vpc-cidr-assoc-")
- result.vpc.cidr_block_association_set[0].cidr_block_state.state == "associated"
- result.vpc.cidr_block_association_set[1].cidr_block_state.state == "associated"
- vpc_cidr in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_a in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_b not in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_info.vpcs[0].cidr_block_association_set | length == 2
- vpc_info.vpcs[0].cidr_block_association_set[0].association_id.startswith("vpc-cidr-assoc-")
- vpc_info.vpcs[0].cidr_block_association_set[1].association_id.startswith("vpc-cidr-assoc-")
- vpc_info.vpcs[0].cidr_block_association_set[0].cidr_block_state.state == "associated"
- vpc_info.vpcs[0].cidr_block_association_set[1].cidr_block_state.state == "associated"
- vpc_cidr in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_a in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_b not in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
# #62678
#- name: modify CIDR - no purge (check mode)
# ec2_vpc_net:
# state: present
# cidr_block:
# - "{{ vpc_cidr }}"
# - "{{ vpc_cidr_b }}"
# name: "{{ resource_prefix }}"
# check_mode: true
# register: result
#- ec2_vpc_net_info:
# filters:
# "tag:Name": "{{ resource_prefix }}"
# register: vpc_info
#- name: Check the CIDRs weren't changed
# assert:
# that:
# - result is successful
# - result is changed
# - vpc_info.vpcs | length == 1
# - vpc_info.vpcs[0].cidr_block == vpc_cidr
# - vpc_cidr in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
# - vpc_cidr_a in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
# - vpc_cidr_b not in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
# - vpc_info.vpcs[0].cidr_block_association_set | length == 2
# - vpc_info.vpcs[0].cidr_block_association_set[0].association_id.startswith("vpc-cidr-assoc-")
# - vpc_info.vpcs[0].cidr_block_association_set[1].association_id.startswith("vpc-cidr-assoc-")
# - vpc_info.vpcs[0].cidr_block_association_set[0].cidr_block_state.state == "associated"
# - vpc_info.vpcs[0].cidr_block_association_set[1].cidr_block_state.state == "associated"
# - vpc_cidr in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
# - vpc_cidr_a in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
# - vpc_cidr_b not in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
- name: modify CIDR - no purge
ec2_vpc_net:
state: present
cidr_block:
- "{{ vpc_cidr }}"
- "{{ vpc_cidr_b }}"
name: "{{ resource_prefix }}"
register: result
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: assert the CIDRs changed
assert:
that:
- result is successful
- result is changed
- result.vpc.id == vpc_1
- vpc_info.vpcs | length == 1
- result.vpc.cidr_block == vpc_cidr
- vpc_info.vpcs[0].cidr_block == vpc_cidr
- result.vpc.cidr_block_association_set | length == 3
- result.vpc.cidr_block_association_set[0].association_id.startswith("vpc-cidr-assoc-")
- result.vpc.cidr_block_association_set[1].association_id.startswith("vpc-cidr-assoc-")
- result.vpc.cidr_block_association_set[2].association_id.startswith("vpc-cidr-assoc-")
- result.vpc.cidr_block_association_set[0].cidr_block_state.state == "associated"
- result.vpc.cidr_block_association_set[1].cidr_block_state.state == "associated"
- result.vpc.cidr_block_association_set[2].cidr_block_state.state == "associated"
- vpc_cidr in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_a in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_b in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_info.vpcs[0].cidr_block_association_set | length == 3
- vpc_info.vpcs[0].cidr_block_association_set[0].association_id.startswith("vpc-cidr-assoc-")
- vpc_info.vpcs[0].cidr_block_association_set[1].association_id.startswith("vpc-cidr-assoc-")
- vpc_info.vpcs[0].cidr_block_association_set[2].association_id.startswith("vpc-cidr-assoc-")
- vpc_info.vpcs[0].cidr_block_association_set[0].cidr_block_state.state == "associated"
- vpc_info.vpcs[0].cidr_block_association_set[1].cidr_block_state.state == "associated"
- vpc_info.vpcs[0].cidr_block_association_set[2].cidr_block_state.state == "associated"
- vpc_cidr in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_a in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_b in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
- name: modify CIDR - no purge (no change)
ec2_vpc_net:
state: present
cidr_block:
- "{{ vpc_cidr }}"
- "{{ vpc_cidr_b }}"
name: "{{ resource_prefix }}"
register: result
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: assert the CIDRs didn't change
assert:
that:
- result is successful
- result is not changed
- vpc_info.vpcs | length == 1
- result.vpc.cidr_block == vpc_cidr
- vpc_info.vpcs[0].cidr_block == vpc_cidr
- result.vpc.cidr_block_association_set | length == 3
- result.vpc.cidr_block_association_set[0].association_id.startswith("vpc-cidr-assoc-")
- result.vpc.cidr_block_association_set[1].association_id.startswith("vpc-cidr-assoc-")
- result.vpc.cidr_block_association_set[2].association_id.startswith("vpc-cidr-assoc-")
- result.vpc.cidr_block_association_set[0].cidr_block_state.state == "associated"
- result.vpc.cidr_block_association_set[1].cidr_block_state.state == "associated"
- result.vpc.cidr_block_association_set[2].cidr_block_state.state == "associated"
- vpc_cidr in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_a in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_b in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_info.vpcs[0].cidr_block_association_set | length == 3
- vpc_info.vpcs[0].cidr_block_association_set[0].association_id.startswith("vpc-cidr-assoc-")
- vpc_info.vpcs[0].cidr_block_association_set[1].association_id.startswith("vpc-cidr-assoc-")
- vpc_info.vpcs[0].cidr_block_association_set[2].association_id.startswith("vpc-cidr-assoc-")
- vpc_info.vpcs[0].cidr_block_association_set[0].cidr_block_state.state == "associated"
- vpc_info.vpcs[0].cidr_block_association_set[1].cidr_block_state.state == "associated"
- vpc_info.vpcs[0].cidr_block_association_set[2].cidr_block_state.state == "associated"
- vpc_cidr in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_a in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_b in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
- name: modify CIDR - no purge (no change - list all - check mode)
ec2_vpc_net:
state: present
cidr_block:
- "{{ vpc_cidr }}"
- "{{ vpc_cidr_a }}"
- "{{ vpc_cidr_b }}"
name: "{{ resource_prefix }}"
register: result
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: assert the CIDRs didn't change
assert:
that:
- result is successful
- result is not changed
- vpc_info.vpcs | length == 1
- result.vpc.cidr_block == vpc_cidr
- vpc_info.vpcs[0].cidr_block == vpc_cidr
- result.vpc.cidr_block_association_set | length == 3
- result.vpc.cidr_block_association_set[0].association_id.startswith("vpc-cidr-assoc-")
- result.vpc.cidr_block_association_set[1].association_id.startswith("vpc-cidr-assoc-")
- result.vpc.cidr_block_association_set[2].association_id.startswith("vpc-cidr-assoc-")
- result.vpc.cidr_block_association_set[0].cidr_block_state.state == "associated"
- result.vpc.cidr_block_association_set[1].cidr_block_state.state == "associated"
- result.vpc.cidr_block_association_set[2].cidr_block_state.state == "associated"
- vpc_cidr in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_a in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_b in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_info.vpcs[0].cidr_block_association_set | length == 3
- vpc_info.vpcs[0].cidr_block_association_set[0].association_id.startswith("vpc-cidr-assoc-")
- vpc_info.vpcs[0].cidr_block_association_set[1].association_id.startswith("vpc-cidr-assoc-")
- vpc_info.vpcs[0].cidr_block_association_set[2].association_id.startswith("vpc-cidr-assoc-")
- vpc_info.vpcs[0].cidr_block_association_set[0].cidr_block_state.state == "associated"
- vpc_info.vpcs[0].cidr_block_association_set[1].cidr_block_state.state == "associated"
- vpc_info.vpcs[0].cidr_block_association_set[2].cidr_block_state.state == "associated"
- vpc_cidr in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_a in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_b in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
- name: modify CIDR - no purge (no change - list all)
ec2_vpc_net:
state: present
cidr_block:
- "{{ vpc_cidr }}"
- "{{ vpc_cidr_a }}"
- "{{ vpc_cidr_b }}"
name: "{{ resource_prefix }}"
register: result
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: assert the CIDRs didn't change
assert:
that:
- result is successful
- result is not changed
- vpc_info.vpcs | length == 1
- result.vpc.cidr_block == vpc_cidr
- vpc_info.vpcs[0].cidr_block == vpc_cidr
- result.vpc.cidr_block_association_set | length == 3
- result.vpc.cidr_block_association_set[0].association_id.startswith("vpc-cidr-assoc-")
- result.vpc.cidr_block_association_set[1].association_id.startswith("vpc-cidr-assoc-")
- result.vpc.cidr_block_association_set[2].association_id.startswith("vpc-cidr-assoc-")
- result.vpc.cidr_block_association_set[0].cidr_block_state.state == "associated"
- result.vpc.cidr_block_association_set[1].cidr_block_state.state == "associated"
- result.vpc.cidr_block_association_set[2].cidr_block_state.state == "associated"
- vpc_cidr in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_a in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_b in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_info.vpcs[0].cidr_block_association_set | length == 3
- vpc_info.vpcs[0].cidr_block_association_set[0].association_id.startswith("vpc-cidr-assoc-")
- vpc_info.vpcs[0].cidr_block_association_set[1].association_id.startswith("vpc-cidr-assoc-")
- vpc_info.vpcs[0].cidr_block_association_set[2].association_id.startswith("vpc-cidr-assoc-")
- vpc_info.vpcs[0].cidr_block_association_set[0].cidr_block_state.state == "associated"
- vpc_info.vpcs[0].cidr_block_association_set[1].cidr_block_state.state == "associated"
- vpc_info.vpcs[0].cidr_block_association_set[2].cidr_block_state.state == "associated"
- vpc_cidr in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_a in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_b in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
- name: modify CIDR - no purge (no change - different order - check mode)
ec2_vpc_net:
state: present
cidr_block:
- "{{ vpc_cidr }}"
- "{{ vpc_cidr_b }}"
- "{{ vpc_cidr_a }}"
name: "{{ resource_prefix }}"
register: result
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: assert the CIDRs didn't change
assert:
that:
- result is successful
- result is not changed
- vpc_info.vpcs | length == 1
- result.vpc.cidr_block == vpc_cidr
- vpc_info.vpcs[0].cidr_block == vpc_cidr
- result.vpc.cidr_block_association_set | length == 3
- result.vpc.cidr_block_association_set[0].association_id.startswith("vpc-cidr-assoc-")
- result.vpc.cidr_block_association_set[1].association_id.startswith("vpc-cidr-assoc-")
- result.vpc.cidr_block_association_set[2].association_id.startswith("vpc-cidr-assoc-")
- result.vpc.cidr_block_association_set[0].cidr_block_state.state == "associated"
- result.vpc.cidr_block_association_set[1].cidr_block_state.state == "associated"
- result.vpc.cidr_block_association_set[2].cidr_block_state.state == "associated"
- vpc_cidr in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_a in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_b in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_info.vpcs[0].cidr_block_association_set | length == 3
- vpc_info.vpcs[0].cidr_block_association_set[0].association_id.startswith("vpc-cidr-assoc-")
- vpc_info.vpcs[0].cidr_block_association_set[1].association_id.startswith("vpc-cidr-assoc-")
- vpc_info.vpcs[0].cidr_block_association_set[2].association_id.startswith("vpc-cidr-assoc-")
- vpc_info.vpcs[0].cidr_block_association_set[0].cidr_block_state.state == "associated"
- vpc_info.vpcs[0].cidr_block_association_set[1].cidr_block_state.state == "associated"
- vpc_info.vpcs[0].cidr_block_association_set[2].cidr_block_state.state == "associated"
- vpc_cidr in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_a in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_b in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
- name: modify CIDR - no purge (no change - different order)
ec2_vpc_net:
state: present
cidr_block:
- "{{ vpc_cidr }}"
- "{{ vpc_cidr_b }}"
- "{{ vpc_cidr_a }}"
name: "{{ resource_prefix }}"
register: result
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: assert the CIDRs didn't change
assert:
that:
- result is successful
- result is not changed
- vpc_info.vpcs | length == 1
- result.vpc.cidr_block == vpc_cidr
- vpc_info.vpcs[0].cidr_block == vpc_cidr
- result.vpc.cidr_block_association_set | length == 3
- result.vpc.cidr_block_association_set[0].association_id.startswith("vpc-cidr-assoc-")
- result.vpc.cidr_block_association_set[1].association_id.startswith("vpc-cidr-assoc-")
- result.vpc.cidr_block_association_set[2].association_id.startswith("vpc-cidr-assoc-")
- result.vpc.cidr_block_association_set[0].cidr_block_state.state == "associated"
- result.vpc.cidr_block_association_set[1].cidr_block_state.state == "associated"
- result.vpc.cidr_block_association_set[2].cidr_block_state.state == "associated"
- vpc_cidr in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_a in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_b in (result.vpc | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_info.vpcs[0].cidr_block_association_set | length == 3
- vpc_info.vpcs[0].cidr_block_association_set[0].association_id.startswith("vpc-cidr-assoc-")
- vpc_info.vpcs[0].cidr_block_association_set[1].association_id.startswith("vpc-cidr-assoc-")
- vpc_info.vpcs[0].cidr_block_association_set[2].association_id.startswith("vpc-cidr-assoc-")
- vpc_info.vpcs[0].cidr_block_association_set[0].cidr_block_state.state == "associated"
- vpc_info.vpcs[0].cidr_block_association_set[1].cidr_block_state.state == "associated"
- vpc_info.vpcs[0].cidr_block_association_set[2].cidr_block_state.state == "associated"
- vpc_cidr in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_a in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
- vpc_cidr_b in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
# #62678
#- name: modify CIDR - purge (check mode)
# ec2_vpc_net:
# state: present
# cidr_block:
# - "{{ vpc_cidr }}"
# - "{{ vpc_cidr_b }}"
# name: "{{ resource_prefix }}"
# purge_cidrs: yes
# check_mode: true
# register: result
#- ec2_vpc_net_info:
# filters:
# "tag:Name": "{{ resource_prefix }}"
# register: vpc_info
#- name: Check the CIDRs weren't changed
# assert:
# that:
# - result is successful
# - result is changed
# - vpc_info.vpcs | length == 1
# - vpc_info.vpcs[0].cidr_block == vpc_cidr
# - vpc_info.vpcs[0].cidr_block_association_set | length == 3
# - vpc_info.vpcs[0].cidr_block_association_set[0].association_id.startswith("vpc-cidr-assoc-")
# - vpc_info.vpcs[0].cidr_block_association_set[1].association_id.startswith("vpc-cidr-assoc-")
# - vpc_info.vpcs[0].cidr_block_association_set[2].association_id.startswith("vpc-cidr-assoc-")
# - vpc_info.vpcs[0].cidr_block_association_set[0].cidr_block_state.state == "associated"
# - vpc_info.vpcs[0].cidr_block_association_set[1].cidr_block_state.state == "associated"
# - vpc_info.vpcs[0].cidr_block_association_set[2].cidr_block_state.state == "associated"
# - vpc_cidr in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
# - vpc_cidr_a in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
# - vpc_cidr_b in (vpc_info.vpcs[0] | json_query("cidr_block_association_set[*].cidr_block") | list)
- name: modify CIDR - purge
ec2_vpc_net:
state: present
cidr_block:
- "{{ vpc_cidr }}"
- "{{ vpc_cidr_b }}"
name: "{{ resource_prefix }}"
purge_cidrs: yes
register: result
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: assert the CIDRs changed
vars:
cidr_query: 'cidr_block_association_set[?cidr_block_state.state == `associated`].cidr_block'
assert:
that:
- result is successful
- result is changed
- result.vpc.id == vpc_1
- vpc_info.vpcs | length == 1
- result.vpc.cidr_block == vpc_cidr
- vpc_info.vpcs[0].cidr_block == vpc_cidr
- result.vpc | json_query(cidr_query) | list | length == 2
- vpc_cidr in (result.vpc | json_query(cidr_query) | list)
- vpc_cidr_a not in (result.vpc | json_query(cidr_query) | list)
- vpc_cidr_b in (result.vpc | json_query(cidr_query) | list)
- vpc_info.vpcs[0] | json_query(cidr_query) | list | length == 2
- vpc_cidr in (vpc_info.vpcs[0] | json_query(cidr_query) | list)
- vpc_cidr_a not in (vpc_info.vpcs[0] | json_query(cidr_query) | list)
- vpc_cidr_b in (vpc_info.vpcs[0] | json_query(cidr_query) | list)
- name: modify CIDR - purge (no change)
ec2_vpc_net:
state: present
cidr_block:
- "{{ vpc_cidr }}"
- "{{ vpc_cidr_b }}"
name: "{{ resource_prefix }}"
purge_cidrs: yes
register: result
- ec2_vpc_net_info:
filters:
"tag:Name": "{{ resource_prefix }}"
register: vpc_info
- name: assert the CIDRs didn't change
vars:
cidr_query: 'cidr_block_association_set[?cidr_block_state.state == `associated`].cidr_block'
assert:
that:
- result is successful
- result is not changed
- result.vpc.id == vpc_1
- vpc_info.vpcs | length == 1
- result.vpc.cidr_block == vpc_cidr
- vpc_info.vpcs[0].cidr_block == vpc_cidr
- result.vpc | json_query(cidr_query) | list | length == 2
- vpc_cidr in (result.vpc | json_query(cidr_query) | list)
- vpc_cidr_a not in (result.vpc | json_query(cidr_query) | list)
- vpc_cidr_b in (result.vpc | json_query(cidr_query) | list)
- vpc_info.vpcs[0] | json_query(cidr_query) | list | length == 2
- vpc_cidr in (vpc_info.vpcs[0] | json_query(cidr_query) | list)
- vpc_cidr_a not in (vpc_info.vpcs[0] | json_query(cidr_query) | list)
- vpc_cidr_b in (vpc_info.vpcs[0] | json_query(cidr_query) | list)
# ============================================================
- name: test check mode to delete a VPC
ec2_vpc_net:
cidr_block: "{{ vpc_cidr }}"
name: "{{ resource_prefix }}"
state: absent
check_mode: true
register: result
- name: assert that a change would have been made
assert:
that:
- result is changed
# ============================================================
always:
- name: replace the DHCP options set so the new one can be deleted
ec2_vpc_net:
cidr_block: "{{ vpc_cidr }}"
name: "{{ resource_prefix }}"
state: present
multi_ok: no
dhcp_opts_id: "{{ default_dhcp_options_id }}"
ignore_errors: true
- name: remove the DHCP option set
ec2_vpc_dhcp_option:
dhcp_options_id: "{{ new_dhcp.dhcp_options_id }}"
state: absent
ignore_errors: true
- name: remove the VPC
ec2_vpc_net:
cidr_block: "{{ vpc_cidr }}"
name: "{{ resource_prefix }}"
state: absent
ignore_errors: true
Reference in a new issue View git blame Copy permalink