Release Summary
This release fixes bug on roles, remove support for ansible-core < 2.14 and introduces new features.
Breaking Changes / Porting Guide
- Remove support for ansible-core < 2.14
- playbooks/webapp/deploy_flask_app - convert playbook to role (#85).
- playbooks/webapp/migrate_webapp - replace variable name
do_not_delete_sourcewithdelete_sourceto make intent clearer and fix reversed default value logic (#86). - playbooks/webapp/webapp - Rename the playbook vars with role name prefix. 'sshkey_pair_name' changed to 'deploy_flask_app_sshkey_pair_name' 'bastion_host_name' changed to 'deploy_flask_app_bastion_host_name' 'bastion_host_username' changed to 'deploy_flask_app_bastion_host_username' 'bastion_host_required_packages' changed to 'deploy_flask_app_bastion_host_required_packages' 'app_listening_port' changed to 'deploy_flask_app_listening_port' 'rds_master_user' changed to 'deploy_flask_app_rds_master_username' 'rds_master_password' changed to 'deploy_flask_app_rds_master_password' 'app_git_repository' changed to 'deploy_flask_app_git_repository' 'number_of_workers' changed to 'deploy_flask_app_number_of_workers' 'workers_instance_type' changed to 'deploy_flask_app_workers_instance_type' 'local_registry_user' changed to 'deploy_flask_app_local_registry_user' 'local_registry_pwd' changed to 'deploy_flask_app_local_registry_pwd' 'local_registry_port' changed to 'deploy_flask_app_local_registry_port' 'app_config' changed to 'deploy_flask_app_config' 'app_force_init' changed to 'deploy_flask_app_force_init' (#85).
- role/aws_setup_credentials - Due to ansible-lint issue, the AWS generated credentials are now stored into variable
aws_setup_credentials__outputinstead ofaws_role_credentials(#39). - roles/awsconfig_multiregion_cloudtrail -
bucket_nameoption has been renamed toawsconfig_multiregion_cloudtrail_bucket_name(#84). - roles/awsconfig_multiregion_cloudtrail -
key_prefixoption has been renamed toawsconfig_multiregion_cloudtrail_key_prefix(#84). - roles/awsconfig_multiregion_cloudtrail -
operationoption has been renamed toawsconfig_multiregion_cloudtrail_operation(#84). - roles/awsconfig_multiregion_cloudtrail -
trail_nameoption has been renamed toawsconfig_multiregion_cloudtrail_trail_name(#84). - roles/backup_create_plan -
plan_nameoption has been renamed tobackup_create_plan_plan_name(#84). - roles/backup_create_plan -
plan_rulesoption has been renamed tobackup_create_plan_plan_rules(#84). - roles/backup_create_plan -
plan_tagsoption has been renamed tobackup_create_plan_plan_tags(#84). - roles/backup_create_plan -
plan_windows_vss_settingsoption has been renamed tobackup_create_plan_plan_windows_vss_settings(#84). - roles/backup_create_plan -
vault_encryption_key_arnoption has been renamed tobackup_create_plan_vault_encryption_key_arn(#84). - roles/backup_create_plan -
vault_nameoption has been renamed tobackup_create_plan_vault_name(#84). - roles/backup_create_plan -
vault_tagsoption has been renamed tobackup_create_planvault_tags(#84). - roles/backup_select_resources -
backup_role_nameoption has been renamed tobackup_select_resources_backup_role_name(#84). - roles/backup_select_resources -
plan_nameoption has been renamed tobackup_select_resources_plan_name(#84). - roles/backup_select_resources -
selection_conditionsoption has been renamed tobackup_select_resources_selection_conditions(#84). - roles/backup_select_resources -
selection_nameoption has been renamed tobackup_select_resources_selection_name(#84). - roles/backup_select_resources -
selection_tagsoption has been renamed tobackup_select_resources_selection_tags(#84). - roles/customized_ami -
custom_ami_nameoption has been renamed tocustomized_ami_name(#84). - roles/customized_ami -
custom_ami_operationoption has been renamed tocustomized_ami_operation(#84). - roles/customized_ami -
custom_ami_packagesoption has been renamed tocustomized_ami_packages(#84). - roles/customized_ami -
custom_ami_recreate_if_existsoption has been renamed tocustomized_ami_recreate_if_exists(#84). - roles/customized_ami -
source_ami_filtersoption has been renamed tocustomized_ami_source_ami_filters(#84). - roles/customized_ami -
source_ami_image_idoption has been renamed tocustomized_ami_source_ami_image_id(#84). - roles/customized_ami -
source_ami_user_nameoption has been renamed tocustomized_ami_source_ami_user_name(#84). - roles/ec2_instance_terminate_by_tag -
tag_key_to_terminate_instancesoption has been renamed toec2_instance_terminate_by_tag_tag_key_to_terminate_instances(#84). - roles/ec2_instance_terminate_by_tag -
tag_value_to_terminate_instancesoption has been renamed toec2_instance_terminate_by_tag_tag_value_to_terminate_instances(#84). - roles/ec2_instance_terminate_by_tag -
terminate_protected_instancesoption has been renamed toec2_instance_terminate_by_tag_terminate_protected_instances(#84). - roles/manage_transit_gateway -
actionoption has been renamed tomanage_transit_gateway_action(#84). - roles/manage_transit_gateway -
transit_gatewayoption has been renamed tomanage_transit_gateway_transit_gateway(#84). - roles/manage_transit_gateway -
vpc_attachmentoption has been renamed tomanage_transit_gateway_vpc_attachment(#84). - roles/manage_transit_gateway -
vpn_attachmentoption has been renamed tomanage_transit_gateway_vpn_attachment(#84).
Minor Changes
- Add a playbook to deploy a simple flask web app into high availability architecture (#97).
- awsconfig_apigateway_with_lambda_integration - new role to create API gateway with Lambda integration
- create_rds_global_cluster - new role to create aurora global cluster with a primary and a replica cluster in different regions.
- playbooks/upload_file_to_s3 - A playbook to upload file from local filesystem into S3 bucket (#88).
Bugfixes
- fix and update integration tests target test_manage_vpc_peering (#61).
- playbooks/webapp/webapp - Update playbooks that include credentials to be able to be used with Automation Controller (not just the command line) (#64).
- playbooks/webapp/webapp - update RDS engine from deprecated version (#86).
- playbooks/webapp/webapp - update webapp create task to use provided variables instead of hard-coding values in some places (#86).
- roles/aws_manage_cloudtrail_encryption - fix condition logic to match expected Cloudtrail events and add extra_vars to pass rulebook variables to playbooks called in actions (#86).
- roles/aws_restore_cloudtrail - provide
key_prefixdefault so it doesn't error if not present (#86). - roles/aws_restore_kms_key - fix conditional value to properly retrieve KMS key ARN from ansible-rulebook event variable (#86).
- roles/aws_setup_credentials - add no_log to prevent credentials leak (#92).
- roles/backup_select_resources - Add all necessary IAM service role policies for backup when creating a new IAM role (#81).
- roles/enable_cloudtrail_encryption_with_kms - fix incorrect fact name for retrieved trail info and provide
s3_key_prefixdefault so it doesn't error if not present (#86).
New Roles
- awsconfig_apigateway_with_lambda_integration - A role to create/delete an API gateway with lambda function integration.
- backup_create_plan - A role to create a backup plan and optionally a vault.
- backup_select_resources - A role to configure backups for selected resources.
- clone_on_prem_vm - A role to clone an existing on prem VM using the KVM hypervisor.
- create_rds_global_cluster - A role to create an Amazon Aurora global cluster with two different region rds clusters.
- deploy_flask_app - Deploy flask app in AWS.
- import_image_and_run_aws_instance - A role that imports a local .raw image into an Amazon Machine Image (AMI) and run an AWS EC2 instance.
- manage_transit_gateway - Creation/Deletion of transit gateway with vpc/vpn attachment
- manage_vpc_peering - A role to create, delete and accept existing VPC peering connections.
- move_objects_between_buckets - A role to move objects from one S3 Bucket to another.