Release Summary
This release fixes bug on roles, remove support for ansible-core < 2.14 and introduces new features.
Breaking Changes / Porting Guide
- Remove support for ansible-core < 2.14
- playbooks/webapp/deploy_flask_app - convert playbook to role (#85).
- playbooks/webapp/migrate_webapp - replace variable name
do_not_delete_source
withdelete_source
to make intent clearer and fix reversed default value logic (#86). - playbooks/webapp/webapp - Rename the playbook vars with role name prefix. 'sshkey_pair_name' changed to 'deploy_flask_app_sshkey_pair_name' 'bastion_host_name' changed to 'deploy_flask_app_bastion_host_name' 'bastion_host_username' changed to 'deploy_flask_app_bastion_host_username' 'bastion_host_required_packages' changed to 'deploy_flask_app_bastion_host_required_packages' 'app_listening_port' changed to 'deploy_flask_app_listening_port' 'rds_master_user' changed to 'deploy_flask_app_rds_master_username' 'rds_master_password' changed to 'deploy_flask_app_rds_master_password' 'app_git_repository' changed to 'deploy_flask_app_git_repository' 'number_of_workers' changed to 'deploy_flask_app_number_of_workers' 'workers_instance_type' changed to 'deploy_flask_app_workers_instance_type' 'local_registry_user' changed to 'deploy_flask_app_local_registry_user' 'local_registry_pwd' changed to 'deploy_flask_app_local_registry_pwd' 'local_registry_port' changed to 'deploy_flask_app_local_registry_port' 'app_config' changed to 'deploy_flask_app_config' 'app_force_init' changed to 'deploy_flask_app_force_init' (#85).
- role/aws_setup_credentials - Due to ansible-lint issue, the AWS generated credentials are now stored into variable
aws_setup_credentials__output
instead ofaws_role_credentials
(#39). - roles/awsconfig_multiregion_cloudtrail -
bucket_name
option has been renamed toawsconfig_multiregion_cloudtrail_bucket_name
(#84). - roles/awsconfig_multiregion_cloudtrail -
key_prefix
option has been renamed toawsconfig_multiregion_cloudtrail_key_prefix
(#84). - roles/awsconfig_multiregion_cloudtrail -
operation
option has been renamed toawsconfig_multiregion_cloudtrail_operation
(#84). - roles/awsconfig_multiregion_cloudtrail -
trail_name
option has been renamed toawsconfig_multiregion_cloudtrail_trail_name
(#84). - roles/backup_create_plan -
plan_name
option has been renamed tobackup_create_plan_plan_name
(#84). - roles/backup_create_plan -
plan_rules
option has been renamed tobackup_create_plan_plan_rules
(#84). - roles/backup_create_plan -
plan_tags
option has been renamed tobackup_create_plan_plan_tags
(#84). - roles/backup_create_plan -
plan_windows_vss_settings
option has been renamed tobackup_create_plan_plan_windows_vss_settings
(#84). - roles/backup_create_plan -
vault_encryption_key_arn
option has been renamed tobackup_create_plan_vault_encryption_key_arn
(#84). - roles/backup_create_plan -
vault_name
option has been renamed tobackup_create_plan_vault_name
(#84). - roles/backup_create_plan -
vault_tags
option has been renamed tobackup_create_planvault_tags
(#84). - roles/backup_select_resources -
backup_role_name
option has been renamed tobackup_select_resources_backup_role_name
(#84). - roles/backup_select_resources -
plan_name
option has been renamed tobackup_select_resources_plan_name
(#84). - roles/backup_select_resources -
selection_conditions
option has been renamed tobackup_select_resources_selection_conditions
(#84). - roles/backup_select_resources -
selection_name
option has been renamed tobackup_select_resources_selection_name
(#84). - roles/backup_select_resources -
selection_tags
option has been renamed tobackup_select_resources_selection_tags
(#84). - roles/customized_ami -
custom_ami_name
option has been renamed tocustomized_ami_name
(#84). - roles/customized_ami -
custom_ami_operation
option has been renamed tocustomized_ami_operation
(#84). - roles/customized_ami -
custom_ami_packages
option has been renamed tocustomized_ami_packages
(#84). - roles/customized_ami -
custom_ami_recreate_if_exists
option has been renamed tocustomized_ami_recreate_if_exists
(#84). - roles/customized_ami -
source_ami_filters
option has been renamed tocustomized_ami_source_ami_filters
(#84). - roles/customized_ami -
source_ami_image_id
option has been renamed tocustomized_ami_source_ami_image_id
(#84). - roles/customized_ami -
source_ami_user_name
option has been renamed tocustomized_ami_source_ami_user_name
(#84). - roles/ec2_instance_terminate_by_tag -
tag_key_to_terminate_instances
option has been renamed toec2_instance_terminate_by_tag_tag_key_to_terminate_instances
(#84). - roles/ec2_instance_terminate_by_tag -
tag_value_to_terminate_instances
option has been renamed toec2_instance_terminate_by_tag_tag_value_to_terminate_instances
(#84). - roles/ec2_instance_terminate_by_tag -
terminate_protected_instances
option has been renamed toec2_instance_terminate_by_tag_terminate_protected_instances
(#84). - roles/manage_transit_gateway -
action
option has been renamed tomanage_transit_gateway_action
(#84). - roles/manage_transit_gateway -
transit_gateway
option has been renamed tomanage_transit_gateway_transit_gateway
(#84). - roles/manage_transit_gateway -
vpc_attachment
option has been renamed tomanage_transit_gateway_vpc_attachment
(#84). - roles/manage_transit_gateway -
vpn_attachment
option has been renamed tomanage_transit_gateway_vpn_attachment
(#84).
Minor Changes
- Add a playbook to deploy a simple flask web app into high availability architecture (#97).
- awsconfig_apigateway_with_lambda_integration - new role to create API gateway with Lambda integration
- create_rds_global_cluster - new role to create aurora global cluster with a primary and a replica cluster in different regions.
- playbooks/upload_file_to_s3 - A playbook to upload file from local filesystem into S3 bucket (#88).
Bugfixes
- fix and update integration tests target test_manage_vpc_peering (#61).
- playbooks/webapp/webapp - Update playbooks that include credentials to be able to be used with Automation Controller (not just the command line) (#64).
- playbooks/webapp/webapp - update RDS engine from deprecated version (#86).
- playbooks/webapp/webapp - update webapp create task to use provided variables instead of hard-coding values in some places (#86).
- roles/aws_manage_cloudtrail_encryption - fix condition logic to match expected Cloudtrail events and add extra_vars to pass rulebook variables to playbooks called in actions (#86).
- roles/aws_restore_cloudtrail - provide
key_prefix
default so it doesn't error if not present (#86). - roles/aws_restore_kms_key - fix conditional value to properly retrieve KMS key ARN from ansible-rulebook event variable (#86).
- roles/aws_setup_credentials - add no_log to prevent credentials leak (#92).
- roles/backup_select_resources - Add all necessary IAM service role policies for backup when creating a new IAM role (#81).
- roles/enable_cloudtrail_encryption_with_kms - fix incorrect fact name for retrieved trail info and provide
s3_key_prefix
default so it doesn't error if not present (#86).
New Roles
- awsconfig_apigateway_with_lambda_integration - A role to create/delete an API gateway with lambda function integration.
- backup_create_plan - A role to create a backup plan and optionally a vault.
- backup_select_resources - A role to configure backups for selected resources.
- clone_on_prem_vm - A role to clone an existing on prem VM using the KVM hypervisor.
- create_rds_global_cluster - A role to create an Amazon Aurora global cluster with two different region rds clusters.
- deploy_flask_app - Deploy flask app in AWS.
- import_image_and_run_aws_instance - A role that imports a local .raw image into an Amazon Machine Image (AMI) and run an AWS EC2 instance.
- manage_transit_gateway - Creation/Deletion of transit gateway with vpc/vpn attachment
- manage_vpc_peering - A role to create, delete and accept existing VPC peering connections.
- move_objects_between_buckets - A role to move objects from one S3 Bucket to another.