#jinja2: lstrip_blocks: True
|
---
|
AWSTemplateFormatVersion: "2010-09-09"
|
Mappings:
|
RegionMapping:
|
us-east-1:
|
{% if osrelease | version_compare('3.9.25', '>=') %}
|
RHELAMI: ami-6871a115
|
{% else %}
|
RHELAMI: ami-c998b6b2
|
{% endif %}
|
us-east-2:
|
{% if osrelease | version_compare('3.9.25', '>=') %}
|
RHELAMI: ami-03291866
|
{% else %}
|
RHELAMI: ami-cfdafaaa
|
{% endif %}
|
us-west-1:
|
{% if osrelease | version_compare('3.9.25', '>=') %}
|
RHELAMI: ami-18726478
|
{% else %}
|
RHELAMI: ami-66eec506
|
{% endif %}
|
us-west-2:
|
{% if osrelease | version_compare('3.9.25', '>=') %}
|
RHELAMI: ami-223f945a
|
{% else %}
|
RHELAMI: ami-9fa343e7
|
{% endif %}
|
eu-west-1:
|
{% if osrelease | version_compare('3.9.25', '>=') %}
|
RHELAMI: ami-7c491f05
|
{% else %}
|
RHELAMI: ami-bb9a6bc2
|
{% endif %}
|
eu-central-1:
|
{% if osrelease | version_compare('3.9.25', '>=') %}
|
RHELAMI: ami-c86c3f23
|
{% else %}
|
RHELAMI: ami-d74be5b8
|
{% endif %}
|
ap-northeast-1:
|
{% if osrelease | version_compare('3.9.25', '>=') %}
|
RHELAMI: ami-6b0d5f0d
|
{% else %}
|
RHELAMI: ami-30ef0556
|
{% endif %}
|
ap-northeast-2:
|
{% if osrelease | version_compare('3.9.25', '>=') %}
|
RHELAMI: ami-3eee4150
|
{% else %}
|
RHELAMI: ami-0f5a8361
|
{% endif %}
|
ap-southeast-1:
|
{% if osrelease | version_compare('3.9.25', '>=') %}
|
RHELAMI: ami-76144b0a
|
{% else %}
|
RHELAMI: ami-10bb2373
|
{% endif %}
|
ap-southeast-2:
|
{% if osrelease | version_compare('3.9.25', '>=') %}
|
RHELAMI: ami-67589505
|
{% else %}
|
RHELAMI: ami-ccecf5af
|
{% endif %}
|
ap-south-1:
|
{% if osrelease | version_compare('3.9.25', '>=') %}
|
RHELAMI: ami-5b673c34
|
{% else %}
|
RHELAMI: ami-cdbdd7a2
|
{% endif %}
|
sa-east-1:
|
{% if osrelease | version_compare('3.9.25', '>=') %}
|
RHELAMI: ami-b0b7e3dc
|
{% else %}
|
RHELAMI: ami-a789ffcb
|
{% endif %}
|
DNSMapping:
|
us-east-1:
|
domain: "us-east-1.compute.internal"
|
us-west-1:
|
domain: "us-west-1.compute.internal"
|
us-west-2:
|
domain: "us-west-2.compute.internal"
|
eu-west-1:
|
domain: "eu-west-1.compute.internal"
|
eu-central-1:
|
domain: "eu-central-1.compute.internal"
|
ap-northeast-1:
|
domain: "ap-northeast-1.compute.internal"
|
ap-northeast-2:
|
domain: "ap-northeast-2.compute.internal"
|
ap-southeast-1:
|
domain: "ap-southeast-1.compute.internal"
|
ap-southeast-2:
|
domain: "ap-southeast-2.compute.internal"
|
sa-east-1:
|
domain: "sa-east-1.compute.internal"
|
ap-south-1:
|
domain: "ap-south-1.compute.internal"
|
|
Resources:
|
Vpc:
|
Type: "AWS::EC2::VPC"
|
Properties:
|
CidrBlock: "192.199.0.0/16"
|
EnableDnsSupport: true
|
EnableDnsHostnames: true
|
Tags:
|
- Key: Name
|
Value: "{{vpcid_name_tag}}"
|
- Key: Hostlication
|
Value:
|
Ref: "AWS::StackId"
|
|
VpcInternetGateway:
|
Type: "AWS::EC2::InternetGateway"
|
|
VpcGA:
|
Type: "AWS::EC2::VPCGatewayAttachment"
|
Properties:
|
InternetGatewayId:
|
Ref: VpcInternetGateway
|
VpcId:
|
Ref: Vpc
|
|
VpcRouteTable:
|
Type: "AWS::EC2::RouteTable"
|
Properties:
|
VpcId:
|
Ref: Vpc
|
|
VPCRouteInternetGateway:
|
DependsOn: VpcGA
|
Type: "AWS::EC2::Route"
|
Properties:
|
GatewayId:
|
Ref: VpcInternetGateway
|
DestinationCidrBlock: "0.0.0.0/0"
|
RouteTableId:
|
Ref: VpcRouteTable
|
|
PublicSubnet:
|
Type: "AWS::EC2::Subnet"
|
DependsOn:
|
- Vpc
|
Properties:
|
CidrBlock: "192.199.0.0/24"
|
Tags:
|
- Key: Name
|
Value: "{{project_tag}}"
|
- Key: Hostlication
|
Value:
|
Ref: "AWS::StackId"
|
MapPublicIpOnLaunch: true
|
VpcId:
|
Ref: Vpc
|
|
PublicSubnetRTA:
|
Type: "AWS::EC2::SubnetRouteTableAssociation"
|
Properties:
|
RouteTableId:
|
Ref: VpcRouteTable
|
SubnetId:
|
Ref: PublicSubnet
|
|
HostSG:
|
Type: "AWS::EC2::SecurityGroup"
|
Properties:
|
GroupDescription: Host
|
VpcId:
|
Ref: Vpc
|
Tags:
|
- Key: Name
|
Value: host_sg
|
|
HostUDPPorts:
|
Type: "AWS::EC2::SecurityGroupIngress"
|
Properties:
|
GroupId:
|
Fn::GetAtt:
|
- HostSG
|
- GroupId
|
IpProtocol: udp
|
FromPort: 60000
|
ToPort: 60003
|
CidrIp: "0.0.0.0/0"
|
|
HostTCPPortsSSH:
|
Type: "AWS::EC2::SecurityGroupIngress"
|
Properties:
|
GroupId:
|
Fn::GetAtt:
|
- HostSG
|
- GroupId
|
IpProtocol: tcp
|
FromPort: 22
|
ToPort: 22
|
CidrIp: "0.0.0.0/0"
|
HostTCPPortsHTTP:
|
Type: "AWS::EC2::SecurityGroupIngress"
|
Properties:
|
GroupId:
|
Fn::GetAtt:
|
- HostSG
|
- GroupId
|
IpProtocol: tcp
|
FromPort: 80
|
ToPort: 80
|
CidrIp: "0.0.0.0/0"
|
HostTCPPortsHTTPS:
|
Type: "AWS::EC2::SecurityGroupIngress"
|
Properties:
|
GroupId:
|
Fn::GetAtt:
|
- HostSG
|
- GroupId
|
IpProtocol: tcp
|
FromPort: 443
|
ToPort: 443
|
CidrIp: "0.0.0.0/0"
|
|
zoneinternalidns:
|
Type: "AWS::Route53::HostedZone"
|
Properties:
|
Name: "{{ zone_internal_dns }}"
|
VPCs:
|
- VPCId:
|
Ref: Vpc
|
VPCRegion:
|
Ref: "AWS::Region"
|
HostedZoneConfig:
|
Comment: "Created By ansible agnostic deployer"
|
|
clientvm:
|
Type: "AWS::EC2::Instance"
|
Properties:
|
ImageId:
|
Fn::FindInMap:
|
- RegionMapping
|
- Ref: AWS::Region
|
- 'RHELAMI'
|
InstanceType: "{{instances[0]['flavor'][cloud_provider]}}"
|
KeyName: "{{instances[0]['key_name'] | default(key_name)}}"
|
SecurityGroupIds:
|
- "Fn::GetAtt":
|
- HostSG
|
- GroupId
|
SubnetId:
|
Ref: PublicSubnet
|
Tags:
|
- Key: Name
|
Value: clientvm
|
- Key: internaldns
|
Value: clientvm.{{chomped_zone_internal_dns}}
|
- Key: "owner"
|
Value: "{{ email | default('unknownuser') }}"
|
- Key: "Project"
|
Value: "{{project_tag}}"
|
- Key: "{{project_tag}}"
|
Value: "{{ instances[0]['name'] }}"
|
{% for tag in instances[0]['tags'] %}
|
- Key: {{tag['key']}}
|
Value: {{tag['value']}}
|
{% endfor %}
|
BlockDeviceMappings:
|
- DeviceName: "/dev/sda1"
|
Ebs:
|
VolumeSize: {{ instances[0]['rootfs_size'] | default('50') }}
|
{% for vol in instances[0]['volumes']|default([]) %}
|
- DeviceName: "{{ vol['device_name'] }}"
|
Ebs:
|
VolumeType: "{{ vol['volume_type'] | d('gp2') }}"
|
VolumeSize: "{{ vol['volume_size'] | d('20') }}"
|
{% endfor %}
|
|
clientvmInternalDNS:
|
Type: "AWS::Route53::RecordSetGroup"
|
Properties:
|
HostedZoneId:
|
Ref: zoneinternalidns
|
RecordSets:
|
- Name: "clientvm.{{zone_internal_dns}}"
|
Type: A
|
TTL: 10
|
ResourceRecords:
|
- "Fn::GetAtt":
|
- clientvm
|
- PrivateIp
|
- Name: "bastion.{{zone_internal_dns}}"
|
Type: A
|
TTL: 10
|
ResourceRecords:
|
- "Fn::GetAtt":
|
- clientvm
|
- PrivateIp
|
|
clientvmEIP:
|
Type: "AWS::EC2::EIP"
|
DependsOn:
|
- VpcGA
|
Properties:
|
InstanceId:
|
Ref: clientvm
|
|
clientvmPublicDNS:
|
Type: "AWS::Route53::RecordSetGroup"
|
DependsOn:
|
- clientvmEIP
|
Properties:
|
HostedZoneId: {{HostedZoneId}}
|
RecordSets:
|
- Name: "clientvm.{{subdomain_base}}."
|
Type: A
|
TTL: 10
|
ResourceRecords:
|
- "Fn::GetAtt":
|
- clientvm
|
- PublicIp
|
- Name: "bastion.{{subdomain_base}}."
|
Type: A
|
TTL: 10
|
ResourceRecords:
|
- "Fn::GetAtt":
|
- clientvm
|
- PublicIp
|
|
Outputs:
|
Route53internalzoneOutput:
|
Description: The ID of the internal route 53 zone
|
Value:
|
Ref: zoneinternalidns
|
