Create aws vpc using ansible

1
2
3
4
5
6
7

├── playbook.yml
├── inventory
├── vars.yml
├── roles/
│   ├── vpc/
│   │   ├── tasks/
│   │   │   ├── main.yml

1
2
3
4

- hosts: local
    roles:
    - vpc

1
2

[local]
localhost ansible_connection=local

1
2
3
4

[local]
localhost

[webserver]

1
2
3
4

[local]
localhost ansible_connection=local ansible_python_interpreter=python3.6

[webserver]

  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120

---


## AWS Credentials
aws_access_key: "THISISMYAWSACCESSKEY"
aws_secret_key: "ThisIsMyAwSSecretKey"
aws_region:     "eu-west-1"

## VPC Information
vpc_name:       "My VPC"
vpc_cidr_block: "10.0.0.0/16"

## For Security Group Rule
#my_ip:          "X.X.X.X"

## Subnets
public_subnet_1_cidr:  "10.0.0.0/24"
```yaml

이제 VPC를 만들 파일을 만들어보자.

```yaml
---

# roles/vpc/tasks/main.yml


# First task : creating the VPC.
# We are using the variables set in the vars.yml file.
# The module gives us back its result,
# which contains information about our new VPC. 
# We register it in the variable my_vpc.

- name:               Create VPC
    ec2_vpc_net:
    name:             "{{ vpc_name }}"
    cidr_block:       "{{ vpc_cidr_block }}"
    region:           "{{ aws_region }}"
    aws_access_key:   "{{ aws_access_key }}"
    aws_secret_key:   "{{ aws_secret_key }}"
    state:            "present"
    register: my_vpc


# We now use the set_fact module 
# to save the id of the VPC in a new variable.

- name:               Set VPC ID in variable
    set_fact:
    vpc_id:           "{{ my_vpc.vpc.id }}"


# Creating our only Subnet in the VPC.
# A subnet needs to be located in an Availability Zone (or AZ).
# Again, we register the results in a variable for later.

- name:               Create Public Subnet
    ec2_vpc_subnet:
    state:            "present"
    vpc_id:           "{{ vpc_id }}"
    cidr:             "{{ public_subnet_1_cidr }}"
    az:               "{{ aws_region }}a"
    region:           "{{ aws_region }}"
    aws_access_key:   "{{ aws_access_key }}"
    aws_secret_key:   "{{ aws_secret_key }}"
    #map_public:       "yes" # vpc가 instance를 생성할때 자동으로 public ip를 할당하게 하는 옵션 ( default: false )
        resource_tags:
        Name:           "Public Subnet"
    register: my_public_subnet


# We save the id of the Public Subnet in a new variable.

- name:               Set Public Subnet ID in variable
    set_fact:
    public_subnet_id: "{{ my_public_subnet.subnet.id }}"


# Every VPC needs at least one Internet Gateway.
# This component allows traffic between the VPC and the outside world.

- name:               Create Internet Gateway for VPC
    ec2_vpc_igw:
    vpc_id:           "{{ vpc_id }}"
    region:           "{{ aws_region }}"
    aws_access_key:   "{{ aws_access_key }}"
    aws_secret_key:   "{{ aws_secret_key }}"
    state:            "present"
    register: my_vpc_igw


# We save the id of the Internet Gateway in a new variable.

- name:               Set Internet Gateway ID in variable
    set_fact:
    igw_id:           "{{ my_vpc_igw.gateway_id }}"


# Now we set up a Route Table. 
# We attach that Route Table to the Public Subnet.
# The route we create here defines the default routing 
# of the table, redirecting requests to the Internet Gateway. 
# We don't see it here, but the route table will also contain 
# a route for resources inside the VPC, so that if we need 
# to reach an internal resource, we don't go to the Internet
# Gateway.

- name:               Set up public subnet route table
    ec2_vpc_route_table:
    vpc_id:           "{{ vpc_id }}"
    region:           "{{ aws_region }}"
    aws_access_key:   "{{ aws_access_key }}"
    aws_secret_key:   "{{ aws_secret_key }}"
    tags:
        Name:           "Public"
    subnets:
        - "{{ public_subnet_id }}"
    routes:
        - dest:         "0.0.0.0/0"
        gateway_id:   "{{ igw_id }}"

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30

$ ansible-playbook playbook.yml -i inventory -e @vars.yml

PLAY [local] ****************************************************************************************

TASK [Gathering Facts] ******************************************************************************
ok: [localhost]

TASK [vpc : Create VPC] *****************************************************************************
changed: [localhost]

TASK [vpc : Set VPC ID in variable] *****************************************************************
ok: [localhost]

TASK [vpc : Create Public Subnet] *******************************************************************
changed: [localhost]

TASK [vpc : Set Public Subnet ID in variable] *******************************************************
ok: [localhost]

TASK [vpc : Create Internet Gateway for VPC] ********************************************************
changed: [localhost]

TASK [vpc : Set Internet Gateway ID in variable] ****************************************************
ok: [localhost]

TASK [vpc : Set up public subnet route table] *******************************************************
changed: [localhost]

PLAY RECAP ******************************************************************************************
localhost                  : ok=8    changed=4    unreachable=0    failed=0