How to manage AWS security groups in file using Salt Cloud?

274 views
Skip to first unread message

pankaj ghadge

unread,
Aug 25, 2015, 3:40:50 AM8/25/15
to Salt-users
 HI,

I have started using salt cloud but don't know how to manage AWS security group in file.
Do we have file like map to mange security group in salt cloud?

E.g:
ec2_group:
   
name: example
   
description: "EC2 group"
   
vpc_id: 12345
   
region: eu-west-1a
   
aws_secret_key: SECRET
   
aws_access_key: ACCESS
   
rules:
     
- proto: tcp
       
from_port: 80
       
to_port: 80
       
cidr_ip: 0.0.0.0/0
     
- proto: tcp
       
from_port: 22
       
to_port: 22
       
cidr_ip: 10.0.0.0/8

--Thanks
Pankaj.

Boris FELD

unread,
Aug 25, 2015, 8:34:02 AM8/25/15
to Salt-users
I think you could put them in pillar and dedicate one minion to make the changes using AWS states for managing security groups (http://docs.saltstack.com/en/latest/ref/states/all/salt.states.boto_secgroup.html)

--
You received this message because you are subscribed to the Google Groups "Salt-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to salt-users+...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

pankaj ghadge

unread,
Aug 26, 2015, 3:27:19 AM8/26/15
to Salt-users
Thanks for Reply

From my understanding boto module is not a part of salt-cloud, it is salt module.

I have checked this link, but we have some following issues with it

1) We are not using amazon web services, but AWS like API.

2) For salt cloud we have made changes in python ec2.py to make it working (signature version 2 was not supported here, so made changes in ec2.py)

3) How do I change the Signature Version in boto for managing security groups?

4) Where I can provide end URL in boto for managing security groups?
 
5) We can't create in new security group and attach it to running instance. (Our cloud provider is not providing this feature) 

--Thanks 

Colton Myers

unread,
Sep 3, 2015, 6:17:16 PM9/3/15
to salt-...@googlegroups.com
You might consider pinging Ryan_Lane in IRC (#salt in freenode) -- he's been heavily involved in the development of the boto modules and might be able to point you in the right direction.

--
Colton Myers
Core Engineer, SaltStack
@basepi on Twitter/Github/IRC

pankaj ghadge

unread,
Sep 9, 2015, 3:14:06 AM9/9/15
to Salt-users
Hey, 
Thanks for reply, I will contact Ryan_Lane and will put the outcome here.

--Thanks
Pankaj

Jatin Rai

unread,
Jun 8, 2016, 9:21:37 AM6/8/16
to Salt-users
Any outcome of this problem.

Thanks
Jatin Rai
Reply all
Reply to author
Forward
0 new messages