ansible/test/integration/targets/route53/tasks/main.yml

252 lines
6.7 KiB
YAML

---
# tasks file for Route53 integration tests
- set_fact:
zone_one: '{{ resource_prefix | replace("-", "") }}.one.fakeansible.com.'
zone_two: '{{ resource_prefix | replace("-", "") }}.two.fakeansible.com.'
- debug: msg='Set zones {{ zone_one }} and {{ zone_two }}'
- name: Test basics (new zone, A and AAAA records)
module_defaults:
group/aws:
aws_access_key: "{{ aws_access_key }}"
aws_secret_key: "{{ aws_secret_key }}"
security_token: "{{ security_token | default(omit) }}"
region: "{{ aws_region }}"
route53:
region: null
block:
- route53_zone:
zone: '{{ zone_one }}'
comment: Created in Ansible test {{ resource_prefix }}
register: z1
- assert:
that:
- z1 is success
- z1 is changed
- "z1.comment == 'Created in Ansible test {{ resource_prefix }}'"
- name: Get zone details
route53_info:
query: hosted_zone
hosted_zone_id: '{{ z1.zone_id }}'
hosted_zone_method: details
register: hosted_zones
- name: Assert newly created hosted zone only has NS and SOA records
assert:
that:
- hosted_zones.HostedZone.ResourceRecordSetCount == 2
- name: Create A record using zone fqdn
route53:
state: present
zone: '{{ zone_one }}'
record: 'qdn_test.{{ zone_one }}'
type: A
value: 1.2.3.4
register: qdn
- assert:
that:
- qdn is not failed
- qdn is changed
- name: Create same A record using zone non-qualified domain
route53:
state: present
zone: '{{ zone_one[:-1] }}'
record: 'qdn_test.{{ zone_one[:-1] }}'
type: A
value: 1.2.3.4
register: non_qdn
- assert:
that:
- non_qdn is not failed
- non_qdn is not changed
- name: Create A record using zone ID
route53:
state: present
hosted_zone_id: '{{ z1.zone_id }}'
record: 'zid_test.{{ zone_one }}'
type: A
value: 1.2.3.4
register: zid
- assert:
that:
- zid is not failed
- zid is changed
- name: Create a multi-value A record with values in different order
route53:
state: present
zone: '{{ zone_one }}'
record: 'order_test.{{ zone_one }}'
type: A
value:
- 4.5.6.7
- 1.2.3.4
register: mv_a_record
- assert:
that:
- mv_a_record is not failed
- mv_a_record is changed
- name: Create same multi-value A record with values in different order
route53:
state: present
zone: '{{ zone_one }}'
record: 'order_test.{{ zone_one }}'
type: A
value:
- 4.5.6.7
- 1.2.3.4
register: mv_a_record
- assert:
that:
- mv_a_record is not failed
- mv_a_record is not changed
- name: get Route53 A record information
route53_info:
type: A
query: record_sets
hosted_zone_id: '{{ z1.zone_id }}'
start_record_name: 'order_test.{{ zone_one }}'
max_items: 50
register: records
- assert:
that:
- records.ResourceRecordSets|length == 3
- records.ResourceRecordSets[0].ResourceRecords|length == 2
- records.ResourceRecordSets[0].ResourceRecords[0].Value == "4.5.6.7"
- records.ResourceRecordSets[0].ResourceRecords[1].Value == "1.2.3.4"
- name: Remove a member from multi-value A record with values in different order
route53:
state: present
zone: '{{ zone_one }}'
record: 'order_test.{{ zone_one }}'
type: A
value:
- 4.5.6.7
register: del_a_record
ignore_errors: true
- name: This should fail, because `overwrite` is false
assert:
that:
- del_a_record is failed
- name: Remove a member from multi-value A record with values in different order
route53:
state: present
zone: '{{ zone_one }}'
record: 'order_test.{{ zone_one }}'
overwrite: true
type: A
value:
- 4.5.6.7
register: del_a_record
ignore_errors: true
- name: This should not fail, because `overwrite` is true
assert:
that:
- del_a_record is not failed
- del_a_record is changed
- name: get Route53 zone A record information
route53_info:
type: A
query: record_sets
hosted_zone_id: '{{ z1.zone_id }}'
start_record_name: 'order_test.{{ zone_one }}'
max_items: 50
register: records
- assert:
that:
- records.ResourceRecordSets|length == 3
- records.ResourceRecordSets[0].ResourceRecords|length == 1
- records.ResourceRecordSets[0].ResourceRecords[0].Value == "4.5.6.7"
- name: Create a LetsEncrypt CAA record
route53:
state: present
zone: '{{ zone_one }}'
record: '{{ zone_one }}'
type: CAA
value:
- 0 issue "letsencrypt.org;"
- 0 issuewild "letsencrypt.org;"
overwrite: true
register: caa
- assert:
that:
- caa is not failed
- caa is changed
- name: Re-create the same LetsEncrypt CAA record
route53:
state: present
zone: '{{ zone_one }}'
record: '{{ zone_one }}'
type: CAA
value:
- 0 issue "letsencrypt.org;"
- 0 issuewild "letsencrypt.org;"
overwrite: true
register: caa
- assert:
that:
- caa is not failed
- caa is not changed
- name: Re-create the same LetsEncrypt CAA record in opposite-order
route53:
state: present
zone: '{{ zone_one }}'
record: '{{ zone_one }}'
type: CAA
value:
- 0 issuewild "letsencrypt.org;"
- 0 issue "letsencrypt.org;"
overwrite: true
register: caa
- name: This should not be changed, as CAA records are not order sensitive
assert:
that:
- caa is not failed
- caa is not changed
always:
- route53_info:
query: record_sets
hosted_zone_id: '{{ z1.zone_id }}'
register: z1_records
- debug: var=z1_records
- name: Loop over A/AAAA/CNAME records and delete them
route53:
state: absent
zone: '{{ zone_one }}'
record: '{{ item.Name }}'
type: '{{ item.Type }}'
value: '{{ item.ResourceRecords | map(attribute="Value") | join(",") }}'
loop: '{{ z1_records.ResourceRecordSets | selectattr("Type", "in", ["A", "AAAA", "CNAME", "CAA"]) | list }}'
- name: Delete test zone one '{{ zone_one }}'
route53_zone:
state: absent
zone: '{{ zone_one }}'
register: delete_one
ignore_errors: yes
retries: 10
until: delete_one is not failed
- name: Delete test zone two '{{ zone_two }}'
route53_zone:
state: absent
zone: '{{ zone_two }}'
register: delete_two
ignore_errors: yes
retries: 10
until: delete_two is not failed
when: false