858a1b09bb
* Refactor ec2_group Replace nested for loops with list comprehensions Purge rules before adding new ones in case sg has maximum permitted rules * Add check mode tests for ec2_group * add tests * Remove dead code * Fix integration test assertions for old boto versions * Add waiter for security group that is autocreated * Add support for in-account group rules * Add common util to get AWS account ID Fixes #31383 * Fix protocol number and add separate tests for egress rule handling * Return egress rule treatment to be backwards compatible * Remove functions that were obsoleted by `Rule` namedtuple * IP tests * Move description updates to a function * Fix string formatting missing index * Add tests for auto-creation of the same group in quick succession * Resolve use of brand-new group in a rule without a description * Clean up duplicated get-security-group function * Add reverse cleanup in case of dependency issues * Add crossaccount ELB group support * Deal with non-STS calls to account API * Add filtering of owner IDs that match the current account
44 lines
1.3 KiB
YAML
44 lines
1.3 KiB
YAML
---
|
|
- block:
|
|
- name: set up aws connection info
|
|
set_fact:
|
|
aws_connection_info: &aws_connection_info
|
|
aws_access_key: "{{ aws_access_key }}"
|
|
aws_secret_key: "{{ aws_secret_key }}"
|
|
security_token: "{{ security_token }}"
|
|
region: "{{ aws_region }}"
|
|
no_log: yes
|
|
- name: Create a group with only the default rule
|
|
ec2_group:
|
|
name: '{{ec2_group_name}}-input-tests'
|
|
vpc_id: '{{ vpc_result.vpc.id }}'
|
|
description: '{{ec2_group_description}}'
|
|
<<: *aws_connection_info
|
|
|
|
- name: Run through some common weird port specs
|
|
ec2_group:
|
|
name: '{{ec2_group_name}}-input-tests'
|
|
description: '{{ec2_group_description}}'
|
|
<<: *aws_connection_info
|
|
rules:
|
|
- "{{ item }}"
|
|
with_items:
|
|
- proto: tcp
|
|
from_port: "8182"
|
|
to_port: 8182
|
|
cidr_ipv6: "64:ff9b::/96"
|
|
rule_desc: Mixed string and non-string ports
|
|
- proto: tcp
|
|
ports:
|
|
- "9000"
|
|
- 9001
|
|
- 9002-9005
|
|
cidr_ip: "1.2.3.0/24"
|
|
always:
|
|
- name: tidy up input testing group
|
|
ec2_group:
|
|
name: '{{ec2_group_name}}-input-tests'
|
|
vpc_id: '{{ vpc_result.vpc.id }}'
|
|
state: absent
|
|
<<: *aws_connection_info
|
|
ignore_errors: yes
|