Creating Security Groups with EC2_group mod

18 views
Skip to first unread message

Dan

unread,
Dec 9, 2016, 5:57:09 PM12/9/16
to Ansible Project
I've had great success in building out my security groups with this module, until today.

The issue is that I cannot code in yaml a destination referencing a prefix-list. "pl-XXXXXX"

Is this supported? Or planned in the future?

Dan

unread,
Dec 12, 2016, 7:31:44 AM12/12/16
to Ansible Project
Has anyone found a method around this?

Josh Smift

unread,
Dec 12, 2016, 9:30:53 AM12/12/16
to ansible...@googlegroups.com
This came up about a year ago on the ansible-devel list,
https://groups.google.com/forum/#!searchin/ansible-devel/prefix$20list%7Csort:relevance/ansible-devel/YjfcFY75wJk/qXoEDQbrEwAJ
is the thread: I'd asked about it, someone replied "yes but it'd be
tricky", I don't think anything's happened since then.

Our workaround is to do it by hand in the AWS console, and put a note in
our configs and docs about it. :^(

You could also probably do something clever with a 'command' module that
called the AWS CLI with appropriate arguments, but I haven't tried that.

-Josh (j...@care.com)

(apologies for the automatic corporate disclaimer that follows)

This email is intended for the person(s) to whom it is addressed and may contain information that is PRIVILEGED or CONFIDENTIAL. Any unauthorized use, distribution, copying, or disclosure by any person other than the addressee(s) is strictly prohibited. If you have received this email in error, please notify the sender immediately by return email and delete the message and any attachments from your system.

DG

unread,
Dec 12, 2016, 10:56:25 AM12/12/16
to ansible...@googlegroups.com
I was thinking about possibly using vars in the yaml to deduce what the prefix list actually is.

Like, if it's possible to do a  var where pl-123456 can be deduced by describing it in AWS cli, then substituting it in. Thanks for the response, now I don't feel like a small island :)

Daniel Girard, CISSP AWS-ASA


--
You received this message because you are subscribed to a topic in the Google Groups "Ansible Project" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/ansible-project/I_kXv-ZFXek/unsubscribe.
To unsubscribe from this group and all its topics, send an email to ansible-project+unsubscribe@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/22606.46223.45257.968242%40gargle.gargle.HOWL.
For more options, visit https://groups.google.com/d/optout.

Reply all
Reply to author
Forward
0 new messages