60fb9fc208
* Update testing policies to ensure all required permissions are present * Tidy up security policies to reduce duplicate permissions * Make roles static so that they can be present before CI is run, meaning that role creation permission is not required by the CI itself, only by someone setting up the roles prior to testing * Move contents to cloudfront policy to network policy to ensure policy count (maximum of 10) stays low * Maintain compute policy below 6144 bytes
36 lines
1.3 KiB
YAML
36 lines
1.3 KiB
YAML
- block:
|
|
- name: set up aws connection info
|
|
set_fact:
|
|
aws_connection_info: &aws_connection_info
|
|
aws_access_key: "{{ aws_access_key }}"
|
|
aws_secret_key: "{{ aws_secret_key }}"
|
|
security_token: "{{ security_token }}"
|
|
region: "{{ aws_region }}"
|
|
no_log: True
|
|
|
|
- name: create t3.nano with cpu options (fails gracefully)
|
|
ec2_instance:
|
|
state: present
|
|
name: "ansible-test-{{ resource_prefix | regex_search('([0-9]+)$') }}-ec2"
|
|
image_id: "{{ ec2_ami_image[aws_region] }}"
|
|
instance_type: t3.nano
|
|
cpu_options:
|
|
core_count: 1
|
|
threads_per_core: 1
|
|
<<: *aws_connection_info
|
|
register: ec2_instance_cpu_options_creation
|
|
ignore_errors: yes
|
|
|
|
- name: check that graceful error message is returned when creation with cpu_options and old botocore
|
|
assert:
|
|
that:
|
|
- ec2_instance_cpu_options_creation.failed
|
|
- 'ec2_instance_cpu_options_creation.msg == "cpu_options is only supported with botocore >= 1.10.16"'
|
|
|
|
always:
|
|
- name: cleanup t3.nano in case graceful failure was in fact a graceful success
|
|
ec2_instance:
|
|
state: absent
|
|
name: "ansible-test-{{ resource_prefix | regex_search('([0-9]+)$') }}-ec2"
|
|
<<: *aws_connection_info
|
|
ignore_errors: yes
|