assorted small fixes, add some management infrastructure

[awsible] / roles / aws-infrastructure / tasks / main.yml

diff --git a/roles/aws-infrastructure/tasks/main.yml b/roles/aws-infrastructure/tasks/main.yml
index 49bc640798a940ca767bda7e18a31c09098fd90b..0f1a39073aa713ed1db8ee5a59f8d79be2bd2416 100644 (file)
--- a/roles/aws-infrastructure/tasks/main.yml
+++ b/roles/aws-infrastructure/tasks/main.yml
@@ -98,3 +98,46 @@
         interval: 30
         unhealthy_threshold: 2
         healthy_threshold: 2
+
+  - name: management iam
+    iam:
+      name: management
+      iam_type: role
+      state: present
+
+  - name: management lc
+    ec2_lc:
+      name: management-0000
+      image_id: "{{ DEFAULT_AMI }}"
+      key_name: management-key
+      security_groups:
+      - management
+      - sshOnly
+      instance_type: m4.large
+      volumes:
+      - device_name: /dev/sda1
+        volume_size: 8
+        volume_type: gp2
+        delete_on_termination: true
+      - device_name: /dev/sdb
+        ephemeral: ephemeral0
+      - device_name: /dev/sdc
+        ephemeral: ephemeral1
+      - device_name: /dev/sdd
+        ephemeral: ephemeral2
+      - device_name: /dev/sde
+        ephemeral: ephemeral3
+    register: mgmt_lc
+
+  - name: management asg
+    ec2_asg:
+      name: management
+      min_size: 1
+      max_size: 1
+      desired_capacity: 1
+      vpc_zone_identifier: "{{ MANAGEMENT_SUBNET }}"
+      launch_config_name: "{{ mgmt_lc.something.name }}"
+      tags:
+      - module: management
+        propogate_at_launch: yes
+