ansible/test/integration/targets/aws_lambda/tasks/main.yml

---
# tasks file for aws_lambda test

- name: set connection information for AWS modules and run tests
  module_defaults:
    group/aws:
      aws_access_key: "{{ aws_access_key }}"
      aws_secret_key: "{{ aws_secret_key }}"
      security_token: "{{ security_token | default(omit) }}"
      region: "{{ aws_region }}"

  block:

    # ============================================================
    - name: test with no parameters
      lambda:
      register: result
      ignore_errors: true

    - name: assert failure when called with no parameters
      assert:
        that:
           - 'result.failed'
           - 'result.msg.startswith("missing required arguments: name")'

    # ============================================================
    - name: test with no parameters except state absent
      lambda:
        state: absent
      register: result
      ignore_errors: true

    - name: assert failure when called with no parameters
      assert:
        that:
           - 'result.failed'
           - 'result.msg.startswith("missing required arguments: name")'

    # ============================================================
    - name: test with no role or handler
      lambda:
        name: ansible-testing-fake-should-not-be-created
        runtime: "python2.7"
      register: result
      ignore_errors: true

    - name: assert failure when called with no parameters
      assert:
        that:
           - 'result.failed'
           - 'result.msg.startswith("state is present but all of the following are missing: handler")'

    # ============================================================
    - name: test with all module required variables but no region
      lambda:
        name: ansible-testing-fake-should-not-be-created
        runtime: "python2.7"
        handler: "no-handler"
        role: "arn:fake-role-doesnt-exist"
        region:
      register: result
      ignore_errors: true

    - name: assert failure when called with only 'name'
      assert:
        that:
           - 'result.failed'
           - 'result.msg == "region must be specified"'

    # ============================================================
    - name: test with all module required variables, no region and all possible variables set to blank
      lambda:
        name: ansible-testing-fake-should-not-be-created
        state: present
        runtime: "python2.7"
        role: arn:fake-role-doesnt-exist
        handler:
        s3_bucket:
        s3_key:
        s3_object_version:
        description:
        vpc_subnet_ids:
        vpc_security_group_ids:
        environment_variables:
        dead_letter_arn:
        region:
      register: result
      ignore_errors: true

    - name: assert failure when called with only 'name'
      assert:
        that:
           - 'result.failed'
           - 'result.msg == "region must be specified"'

    # ============================================================
    # direct zip file upload
    - name: move lambda into place for archive module
      copy:
        src: "mini_lambda.py"
        dest: "{{output_dir}}/mini_lambda.py"

    - name: bundle lambda into a zip
      archive:
        format: zip
        path: "{{output_dir}}/mini_lambda.py"
        dest: "{{output_dir}}/mini_lambda.zip"
      register: zip_res

    - name: test state=present - upload the lambda
      lambda:
        name: "{{lambda_function_name}}"
        runtime: "python2.7"
        handler: "mini_lambda.handler"
        role: "ansible_lambda_role"
        zip_file: "{{zip_res.dest}}"
      register: result

    - name: assert lambda upload succeeded
      assert:
        that:
          - result is not failed
          - result.configuration.tracing_config.mode == "PassThrough"

    - name: test lambda works
      execute_lambda:
        name: "{{lambda_function_name}}"
        payload:
          name: "Mr Ansible Tests"
      register: result

    - name: assert lambda manages to respond as expected
      assert:
        that:
           - 'result is not failed'
           - 'result.result.output.message == "hello Mr Ansible Tests"'

    - name: test lambda config updates
      lambda:
        name: "{{lambda_function_name}}"
        runtime: "nodejs10.x"
        tracing_mode: 'Active'
        handler: "mini_lambda.handler"
        role: "ansible_lambda_role"
      register: update_result

    - name: assert that update succeeded
      assert:
        that:
          - update_result is not failed
          - update_result.changed == True
          - update_result.configuration.runtime == 'nodejs10.x'
          - update_result.configuration.tracing_config.mode == 'Active'

    - name: test no changes are made with the same parameters
      lambda:
        name: "{{lambda_function_name}}"
        runtime: "nodejs10.x"
        tracing_mode: 'Active'
        handler: "mini_lambda.handler"
        role: "ansible_lambda_role"
      register: update_result

    - name: assert that update succeeded
      assert:
        that:
          - update_result is not failed
          - update_result.changed == False
          - update_result.configuration.runtime == 'nodejs10.x'
          - update_result.configuration.tracing_config.mode == 'Active'

    - name: reset config updates for the following tests
      lambda:
        name: "{{lambda_function_name}}"
        runtime: "python2.7"
        tracing_mode: 'PassThrough'
        handler: "mini_lambda.handler"
        role: "ansible_lambda_role"
      register: result

    - name: assert that reset succeeded
      assert:
        that:
          - result is not failed
          - result.changed == True
          - result.configuration.runtime == 'python2.7'
          - result.configuration.tracing_config.mode == 'PassThrough'

    - name: lambda_info | Gather all infos for given lambda function
      lambda_info:
        name: "{{ lambda_function_name }}"
        query: all
      register: lambda_infos_all

    - name: lambda_info | Assert successfull retrieval of all information
      assert:
        that:
          - lambda_infos_all is not failed
          - lambda_infos_all.function[lambda_function_name].function_name == lambda_function_name
          - lambda_infos_all.function[lambda_function_name].runtime == "python2.7"
          - lambda_infos_all.function[lambda_function_name].versions is defined
          - lambda_infos_all.function[lambda_function_name].aliases is defined
          - lambda_infos_all.function[lambda_function_name].policy is defined
          - lambda_infos_all.function[lambda_function_name].mappings is defined
          - lambda_infos_all.function[lambda_function_name].description == ""
          - lambda_infos_all.function[lambda_function_name].function_arn is defined
          - lambda_infos_all.function[lambda_function_name].handler == "mini_lambda.handler"

    - name: lambda_info | Gather version infos for given lambda function
      lambda_info:
        name: "{{ lambda_function_name }}"
        query: versions
      register: lambda_infos_versions

    - name: lambda_info | Assert successfull retrieval of versions information
      assert:
        that:
          - lambda_infos_versions is not failed
          - lambda_infos_versions.function[lambda_function_name].versions|length > 0
          - lambda_infos_versions.function[lambda_function_name].function_name is undefined

    - name: lambda_info | Gather config infos for given lambda function
      lambda_info:
        name: "{{ lambda_function_name }}"
        query: config
      register: lambda_infos_config

    - name: lambda_info | Assert successfull retrieval of config information
      assert:
        that:
          - lambda_infos_config is not failed
          - lambda_infos_config.function[lambda_function_name].function_name == lambda_function_name
          - lambda_infos_config.function[lambda_function_name].description is defined
          - lambda_infos_config.function[lambda_function_name].versions is undefined

    - name: lambda_info | Gather policy infos for given lambda function
      lambda_info:
        name: "{{ lambda_function_name }}"
        query: policy
      register: lambda_infos_policy

    - name: lambda_info | Assert successfull retrieval of policy information
      assert:
        that:
          - lambda_infos_policy is not failed
          - lambda_infos_policy.function[lambda_function_name].policy is defined
          - lambda_infos_policy.function[lambda_function_name].versions is undefined

    - name: lambda_info | Gather aliases infos for given lambda function
      lambda_info:
        name: "{{ lambda_function_name }}"
        query: aliases
      register: lambda_infos_aliases

    - name: lambda_info | Assert successfull retrieval of aliases information
      assert:
        that:
          - lambda_infos_aliases is not failed
          - lambda_infos_aliases.function[lambda_function_name].aliases is defined

    - name: lambda_info | Gather mappings infos for given lambda function
      lambda_info:
        name: "{{ lambda_function_name }}"
        query: mappings
      register: lambda_infos_mappings

    - name: lambda_info | Assert successfull retrieval of mappings information
      assert:
        that:
          - lambda_infos_mappings is not failed
          - lambda_infos_mappings.function[lambda_function_name].mappings is defined

    # ============================================================
    - name: test state=present with security group but no vpc
      lambda:
        name: "{{lambda_function_name}}"
        runtime: "python2.7"
        role: "ansible_lambda_role"
        zip_file: "{{zip_res.dest}}"
        handler:
        description:
        vpc_subnet_ids:
        vpc_security_group_ids: sg-FA6E
        environment_variables:
        dead_letter_arn:
      register: result
      ignore_errors: true

    - name: assert lambda fails with proper message
      assert:
        that:
           - 'result is failed'
           - 'result.msg != "MODULE FAILURE"'
           - 'result.changed == False'
           - '"requires at least one security group and one subnet" in result.msg'

    # ============================================================
    - name: test state=present with all nullable variables explicitly set to null
      lambda:
        name: "{{lambda_function_name}}"
        runtime: "python2.7"
        role: "ansible_lambda_role"
        zip_file: "{{zip_res.dest}}"
        handler: "mini_lambda.handler"
# These are not allowed because of mutually exclusive.
#        s3_bucket:
#        s3_key:
#        s3_object_version:
        description:
        vpc_subnet_ids:
        vpc_security_group_ids:
        environment_variables:
        dead_letter_arn:
      register: result

    - name: assert lambda remains as before
      assert:
        that:
           - 'result is not failed'
           - 'result.changed == False'

    # ============================================================
    - name: test putting an environment variable changes lambda
      lambda:
        name: "{{lambda_function_name}}"
        runtime: "python2.7"
        handler: "mini_lambda.handler"
        role: "ansible_lambda_role"
        zip_file: "{{zip_res.dest}}"
        environment_variables:
            EXTRA_MESSAGE: "I think you are great!!"
      register: result

    - name: assert lambda upload succeeded
      assert:
        that:
           - 'result is not failed'
           - 'result.changed == True'

    - name: test lambda works
      execute_lambda:
        name: "{{lambda_function_name}}"
        payload:
          name: "Mr Ansible Tests"
        security_token: '{{security_token}}'
      register: result

    - name: assert lambda manages to respond as expected
      assert:
        that:
           - 'result is not failed'
           - 'result.result.output.message == "hello Mr Ansible Tests. I think you are great!!"'

    # ============================================================
    - name: test state=present triggering a network exception due to bad url
      lambda:
        name: "{{lambda_function_name}}"
        runtime: "python2.7"
        role: "ansible_lambda_role"
        ec2_url: https://noexist.example.com
        ec2_region: '{{ec2_region}}'
        ec2_access_key: 'iamnotreallyanaccesskey'
        ec2_secret_key: 'thisisabadsecretkey'
        security_token: 'andthisisabadsecuritytoken'
        zip_file: "{{zip_res.dest}}"
      register: result
      ignore_errors: true

    - name: assert lambda manages to respond as expected
      assert:
        that:
           - 'result is failed'
           - 'result.changed == False'

    # ============================================================
    - name: test state=absent (expect changed=False)
      lambda:
        name: "{{lambda_function_name}}"
        state: absent
      register: result

    - name: assert state=absent
      assert:
        that:
           - 'result is not failed'
           - 'result.changed == True'

    # ============================================================
    # parallel lambda creation

    - name: parallel lambda creation 1/4
      lambda:
        name: "{{lambda_function_name}}_1"
        runtime: "python2.7"
        handler: "mini_lambda.handler"
        role: "ansible_lambda_role"
        zip_file: "{{zip_res.dest}}"
      async: 1000
      register: async_1

    - name: parallel lambda creation 2/4
      lambda:
        name: "{{lambda_function_name}}_2"
        runtime: "python2.7"
        handler: "mini_lambda.handler"
        role: "ansible_lambda_role"
        zip_file: "{{zip_res.dest}}"
      async: 1000
      register: async_2

    - name: parallel lambda creation 3/4
      lambda:
        name: "{{lambda_function_name}}_3"
        runtime: "python2.7"
        handler: "mini_lambda.handler"
        role: "ansible_lambda_role"
        zip_file: "{{zip_res.dest}}"
      async: 1000
      register: async_3

    - name: parallel lambda creation 4/4
      lambda:
        name: "{{lambda_function_name}}_4"
        runtime: "python2.7"
        handler: "mini_lambda.handler"
        role: "ansible_lambda_role"
        zip_file: "{{zip_res.dest}}"
      register: result

    - name: assert lambda manages to respond as expected
      assert:
        that:
           - 'result is not failed'

    - name: wait for async job 1
      async_status: jid={{ async_1.ansible_job_id }}
      register: job_result
      until: job_result is finished
      retries: 30

    - name: wait for async job 2
      async_status: jid={{ async_1.ansible_job_id }}
      register: job_result
      until: job_result is finished
      retries: 30

    - name: wait for async job 3
      async_status: jid={{ async_3.ansible_job_id }}
      register: job_result
      until: job_result is finished
      retries: 30


    - name: parallel lambda deletion 1/4
      lambda:
        name: "{{lambda_function_name}}_1"
        state: absent
        zip_file: "{{zip_res.dest}}"
      async: 1000
      register: async_1

    - name: parallel lambda deletion 2/4
      lambda:
        name: "{{lambda_function_name}}_2"
        state: absent
        zip_file: "{{zip_res.dest}}"
      async: 1000
      register: async_2

    - name: parallel lambda deletion 3/4
      lambda:
        name: "{{lambda_function_name}}_3"
        state: absent
        zip_file: "{{zip_res.dest}}"
      async: 1000
      register: async_3

    - name: parallel lambda deletion 4/4
      lambda:
        name: "{{lambda_function_name}}_4"
        state: absent
        zip_file: "{{zip_res.dest}}"
      register: result

    - name: assert lambda creation has succeeded
      assert:
        that:
           - 'result is not failed'

    - name: wait for async job 1
      async_status: jid={{ async_1.ansible_job_id }}
      register: job_result
      until: job_result is finished
      retries: 30

    - name: wait for async job 2
      async_status: jid={{ async_1.ansible_job_id }}
      register: job_result
      until: job_result is finished
      retries: 30

    - name: wait for async job 3
      async_status: jid={{ async_3.ansible_job_id }}
      register: job_result
      until: job_result is finished
      retries: 30

  # ============================================================
  always:

    - name: ensure function is absent at end of test
      lambda:
        name: "{{lambda_function_name}}"
        state: absent
      ignore_errors: true