git.squeep.com Git - awsible/blob - roles/vpcaccess-infrastructure/tasks/main.yml

   1 ---
   2 - assert:
   3     that:
   4   tags: ['check_vars']
   5
   6 - include_role:
   7     name: module-aws-stack
   8   vars:
   9     sg_rules:
  10     - proto: all
  11       from_port: -1
  12       to_port: -1
  13       cidr_ip: "{{ vpc.vpc.cidr_block }}"
  14     - proto: tcp
  15       from_port: 1195
  16       to_port: 1195
  17       cidr_ip: 0.0.0.0/0
  18     - proto: udp
  19       from_port: 1194
  20       to_port: 1194
  21       cidr_ip: 0.0.0.0/0
  22     elb_type: internal
  23     elb_rules:
  24     - proto: tcp
  25       from_port: 22
  26       to_port: 22
  27       cidr_ip: 0.0.0.0/0
  28     elb_listeners:
  29     - protocol: tcp
  30       load_balancer_port: 22
  31       instance_port: 22
  32     elb_healthcheck:
  33       ping_protocol: tcp
  34       ping_port: 22
  35       response_timeout: 5
  36       interval: 30
  37       unhealthy_threshold: 2
  38       healthy_threshold: 2
  39     min_size: 1
  40     max_size: 1
  41
  42 - name: not implemented yet
  43   debug:
  44     msg: |
  45       attach policies to iam role