git.squeep.com Git - awsible/blob - roles/vpcaccess-infrastructure/tasks/main.yml

   1 ---
   2 - assert:
   3     that:
   4   tags: ['check_vars']
   5
   6 - include_role:
   7     name: module-aws-stack
   8   vars:
   9     sg_rules:
  10     - proto: all
  11       from_port: -1
  12       to_port: -1
  13       cidr_ip: "{{ vpc.vpc.cidr_block }}"
  14     elb_type: internal
  15     elb_rules:
  16     - proto: tcp
  17       from_port: 22
  18       to_port: 22
  19       cidr_ip: 0.0.0.0/0
  20     elb_listeners:
  21     - protocol: tcp
  22       load_balancer_port: 22
  23       instance_port: 22
  24     elb_healthcheck:
  25       ping_protocol: tcp
  26       ping_port: 22
  27       response_timeout: 5
  28       interval: 30
  29       unhealthy_threshold: 2
  30       healthy_threshold: 2
  31     max_size: 1
  32
  33 - name: not implemented yet
  34   debug:
  35     msg: |
  36       attach policies to iam role