mirror of
https://github.com/ansible-collections/community.general.git
synced 2024-09-14 20:13:21 +02:00
7600c664fe
Refactor the currently well-factored ec2 modules (i.e. those that already use ec2_connect) to have a common argument spec. The idea is that new modules can use this spec without duplication of code, and that new functionality can be added to the ec2 connection code (e.g. security token argument)
266 lines
8.2 KiB
Python
266 lines
8.2 KiB
Python
#!/usr/bin/python
|
|
DOCUMENTATION = '''
|
|
---
|
|
module: ec2_eip
|
|
short_description: associate an EC2 elastic IP with an instance.
|
|
description:
|
|
- This module associates AWS EC2 elastic IP addresses with instances
|
|
version_added: 1.4
|
|
options:
|
|
instance_id:
|
|
description:
|
|
- The EC2 instance id
|
|
required: false
|
|
public_ip:
|
|
description:
|
|
- The elastic IP address to associate with the instance.
|
|
- If absent, allocate a new address
|
|
required: false
|
|
state:
|
|
description:
|
|
- If present, associate the IP with the instance.
|
|
- If absent, disassociate the IP with the instance.
|
|
required: false
|
|
choices: ['present', 'absent']
|
|
default: present
|
|
ec2_url:
|
|
description:
|
|
- URL to use to connect to EC2-compatible cloud (by default the module will use EC2 endpoints)
|
|
required: false
|
|
default: null
|
|
aliases: [ EC2_URL ]
|
|
ec2_access_key:
|
|
description:
|
|
- EC2 access key. If not specified then the EC2_ACCESS_KEY environment variable is used.
|
|
required: false
|
|
default: null
|
|
aliases: [ EC2_ACCESS_KEY ]
|
|
ec2_secret_key:
|
|
description:
|
|
- EC2 secret key. If not specified then the EC2_SECRET_KEY environment variable is used.
|
|
required: false
|
|
default: null
|
|
aliases: [ EC2_SECRET_KEY ]
|
|
region:
|
|
description:
|
|
- the EC2 region to use
|
|
required: false
|
|
default: null
|
|
aliases: [ ec2_region ]
|
|
in_vpc:
|
|
description:
|
|
- allocate an EIP inside a VPC or not
|
|
required: false
|
|
default: false
|
|
version_added: "1.4"
|
|
requirements: [ "boto" ]
|
|
author: Lorin Hochstein <lorin@nimbisservices.com>
|
|
notes:
|
|
- This module will return C(public_ip) on success, which will contain the
|
|
public IP address associated with the instance.
|
|
- There may be a delay between the time the Elastic IP is assigned and when
|
|
the cloud instance is reachable via the new address. Use wait_for and pause
|
|
to delay further playbook execution until the instance is reachable, if
|
|
necessary.
|
|
'''
|
|
|
|
EXAMPLES = '''
|
|
- name: associate an elastic IP with an instance
|
|
ec2_eip: instance_id=i-1212f003 ip=93.184.216.119
|
|
|
|
- name: disassociate an elastic IP from an instance
|
|
ec2_eip: instance_id=i-1212f003 ip=93.184.216.119 state=absent
|
|
|
|
- name: allocate a new elastic IP and associate it with an instance
|
|
ec2_eip: instance_id=i-1212f003
|
|
|
|
- name: allocate a new elastic IP without associating it to anything
|
|
ec2_eip:
|
|
register: eip
|
|
- name: output the IP
|
|
debug: msg="Allocated IP is {{ eip.public_ip }}"
|
|
|
|
- name: provision new instances with ec2
|
|
ec2: keypair=mykey instance_type=c1.medium image=emi-40603AD1 wait=yes group=webserver count=3
|
|
register: ec2
|
|
- name: associate new elastic IPs with each of the instances
|
|
ec2_eip: "instance_id={{ item }}"
|
|
with_items: ec2.instance_ids
|
|
|
|
- name: allocate a new elastic IP inside a VPC in us-west-2
|
|
ec2_eip: region=us-west-2 in_vpc=yes
|
|
register: eip
|
|
- name: output the IP
|
|
debug: msg="Allocated IP inside a VPC is {{ eip.public_ip }}"
|
|
'''
|
|
|
|
try:
|
|
import boto.ec2
|
|
except ImportError:
|
|
boto_found = False
|
|
else:
|
|
boto_found = True
|
|
|
|
|
|
def associate_ip_and_instance(ec2, address, instance_id, module):
|
|
if ip_is_associated_with_instance(ec2, address.public_ip, instance_id, module):
|
|
module.exit_json(changed=False, public_ip=address.public_ip)
|
|
|
|
# If we're in check mode, nothing else to do
|
|
if module.check_mode:
|
|
module.exit_json(changed=True)
|
|
|
|
try:
|
|
if address.domain == "vpc":
|
|
res = ec2.associate_address(instance_id, allocation_id=address.allocation_id)
|
|
else:
|
|
res = ec2.associate_address(instance_id, public_ip=address.public_ip)
|
|
except boto.exception.EC2ResponseError, e:
|
|
module.fail_json(msg=str(e))
|
|
|
|
if res:
|
|
module.exit_json(changed=True, public_ip=address.public_ip)
|
|
else:
|
|
module.fail_json(msg="association failed")
|
|
|
|
|
|
def disassociate_ip_and_instance(ec2, address, instance_id, module):
|
|
if not ip_is_associated_with_instance(ec2, address.public_ip, instance_id, module):
|
|
module.exit_json(changed=False, public_ip=address.public_ip)
|
|
|
|
# If we're in check mode, nothing else to do
|
|
if module.check_mode:
|
|
module.exit_json(changed=True)
|
|
|
|
try:
|
|
if address.domain == "vpc":
|
|
res = ec2.disassociate_address(association_id=address.association_id)
|
|
else:
|
|
res = ec2.disassociate_address(public_ip=address.public_ip)
|
|
except boto.exception.EC2ResponseError, e:
|
|
module.fail_json(msg=str(e))
|
|
|
|
if res:
|
|
module.exit_json(changed=True)
|
|
else:
|
|
module.fail_json(msg="disassociation failed")
|
|
|
|
|
|
def find_address(ec2, public_ip, module):
|
|
""" Find an existing Elastic IP address """
|
|
|
|
try:
|
|
addresses = ec2.get_all_addresses([public_ip])
|
|
except boto.exception.EC2ResponseError, e:
|
|
module.fail_json(msg=str(e.message))
|
|
|
|
return addresses[0]
|
|
|
|
|
|
def ip_is_associated_with_instance(ec2, public_ip, instance_id, module):
|
|
""" Check if the elastic IP is currently associated with the instance """
|
|
address = find_address(ec2, public_ip, module)
|
|
if address:
|
|
return address.instance_id == instance_id
|
|
else:
|
|
return False
|
|
|
|
|
|
def allocate_address(ec2, domain, module):
|
|
""" Allocate a new elastic IP address and return it """
|
|
# If we're in check mode, nothing else to do
|
|
if module.check_mode:
|
|
module.exit_json(change=True)
|
|
|
|
address = ec2.allocate_address(domain=domain)
|
|
return address
|
|
|
|
|
|
def release_address(ec2, public_ip, module):
|
|
""" Release a previously allocated elastic IP address """
|
|
|
|
address = find_address(ec2, public_ip, module)
|
|
|
|
# If we're in check mode, nothing else to do
|
|
if module.check_mode:
|
|
module.exit_json(change=True)
|
|
|
|
res = address.release()
|
|
if res:
|
|
module.exit_json(changed=True)
|
|
else:
|
|
module.fail_json(msg="release failed")
|
|
|
|
|
|
def find_instance(ec2, instance_id, module):
|
|
""" Attempt to find the EC2 instance and return it """
|
|
|
|
try:
|
|
reservations = ec2.get_all_reservations(instance_ids=[instance_id])
|
|
except boto.exception.EC2ResponseError, e:
|
|
module.fail_json(msg=str(e))
|
|
|
|
if len(reservations) == 1:
|
|
instances = reservations[0].instances
|
|
if len(instances) == 1:
|
|
return instances[0]
|
|
|
|
module.fail_json(msg="could not find instance" + instance_id)
|
|
|
|
|
|
def main():
|
|
argument_spec = ec2_argument_spec()
|
|
argument_spec.update(dict(
|
|
instance_id = dict(required=False),
|
|
public_ip = dict(required=False, aliases= ['ip']),
|
|
state = dict(required=False, default='present',
|
|
choices=['present', 'absent']),
|
|
in_vpc = dict(required=False, choices=BOOLEANS, default=False),
|
|
)
|
|
)
|
|
|
|
module = AnsibleModule(
|
|
argument_spec=argument_spec,
|
|
supports_check_mode=True
|
|
)
|
|
|
|
if not boto_found:
|
|
module.fail_json(msg="boto is required")
|
|
|
|
ec2 = ec2_connect(module)
|
|
|
|
instance_id = module.params.get('instance_id')
|
|
public_ip = module.params.get('public_ip')
|
|
state = module.params.get('state')
|
|
in_vpc = module.params.get('in_vpc')
|
|
domain = "vpc" if in_vpc else None
|
|
|
|
if state == 'present':
|
|
if public_ip is None:
|
|
if instance_id is None:
|
|
address = allocate_address(ec2, domain, module)
|
|
module.exit_json(changed=True, public_ip=address.public_ip)
|
|
else:
|
|
# Determine if the instance is inside a VPC or not
|
|
instance = find_instance(ec2, instance_id, module)
|
|
if instance.vpc_id != None:
|
|
domain = "vpc"
|
|
address = allocate_address(ec2, domain, module)
|
|
else:
|
|
address = find_address(ec2, public_ip, module)
|
|
associate_ip_and_instance(ec2, address, instance_id, module)
|
|
else:
|
|
if instance_id is None:
|
|
release_address(ec2, public_ip, module)
|
|
else:
|
|
address = find_address(ec2, public_ip, module)
|
|
disassociate_ip_and_instance(ec2, address, instance_id, module)
|
|
|
|
|
|
|
|
# import module snippets
|
|
from ansible.module_utils.basic import *
|
|
from ansible.module_utils.ec2 import *
|
|
|
|
if __name__ == '__main__':
|
|
main()
|