Add new ec2_instance_create role

roles/ec2_instance_create/README.md

@@ -0,0 +1,157 @@
+# ec2_instance_create
+
+A role to create an EC2 instance in AWS.
+
+Users can specify various parameters for instance configuration, including instance type, AMI ID, key pair, tags, and VPC/subnet configuration.
+
+This role also supports the creation of optional networking resources, such as an external security group and an Elastic IP (EIP). You can choose to wait for the EC2 instance to finish booting before continuing.
+
+## Role Variables
+
+The following variables can be set in the role to customize EC2 instance creation and networking configurations:
+
+### Role Operation
+
+* **ec2_instance_create_operation**: (Optional)
+  Whether to create or delete resources using the role. Default is `create`.
+  Choices are `create` and `delete`.
+
+### EC2 Instance Configuration
+
+* **ec2_instance_create_aws_region**: (Required)
+  The AWS region in which to create the EC2 instance.
+
+* **ec2_instance_create_instance_name**: (Required)
+  The name of the EC2 instance to be created.
+
+* **ec2_instance_create_instance_type**: (Required)
+  The instance type for the EC2 instance (e.g., `t2.micro`, `m5.large`).
+
+* **ec2_instance_create_ami_id**: (Required)
+  The AMI ID for the EC2 instance.
+
+* **ec2_instance_create_key_name**: (Required)
+  The name of the key pair to use for SSH access to the EC2 instance.
+  If the key does not exist, a key pair will be created with the name.
+
+* **ec2_instance_create_vpc_subnet_id**: (Required)
+  The ID of the VPC subnet in which the instance will be launched.
+
+* **ec2_instance_create_tags**: (Optional)
+  A dictionary of tags to assign to the EC2 instance.
+
+* **ec2_instance_create_wait_for_boot**: (Optional)
+  Whether to wait for the EC2 instance to be in the "running" or "terminated" state before continuing. Default is `true`.
+
+### Optional Networking Resources
+
+#### Elastic IP
+
+* **ec2_instance_create_vpc_id**: (Optional)
+  The ID of the VPC used for security group and internet gateway.
+  Required if `ec2_instance_create_associate_igw` or `ec2_instance_create_associate_eip` is `true`.
+
+* **ec2_instance_create_associate_eip**: (Optional)
+  Whether to create an Elastic IP (EIP) and associate it with the EC2 instance. Default is `false`.
+  If set to `true` and the provided VPC doesn't have an Internet Gateway (IGW) attached, set `ec2_instance_create_associate_igw` to `true` to avoid failure.
+
+* **ec2_instance_create_eip_tags**: (Optional)
+  Tags to assign to the elastic IP.
+
+#### Internet Gateway
+
+* **ec2_instance_create_associate_igw**: (Optional)
+  Whether to create and associate an internet gateway with the EC2 instance. Default is `false`.
+  If set to `true`, an internet gateway will be created or associated with the instance.
+
+* **ec2_instance_create_igw_tags**: (Optional)
+  Tags to assign to the internet gateway.
+
+#### External Security Group
+
+* **ec2_instance_create_external_sg_name**: (Required)
+  The name of the security group to use for the EC2 instance.
+  The role will check if an SG with this name exists. If not, it will create a new one.
+  Default is `ec2_instance_create-default-external-sg`.
+
+* **ec2_instance_create_external_sg_description**: (Optional)
+  A description for the security group. Default is `Security group for external access`.
+
+* **ec2_instance_create_external_sg_rules**: (Optional)
+  A list of custom rules to add to the security group. Each rule is a dictionary with `proto`, `ports`, and `cidr_ip` keys. Default is to allow SSH (port 22) from `0.0.0.0/0`.
+
+* **ec2_instance_create_external_sg_tags**: (Optional)
+  Tags to assign to the security group.
+
+### Example:
+
+Here's an example of how to use the role in a playbook.
+
+```yaml
+---
+- name: Playbook for creating EC2 instance using cloud.aws_ops.ec2_instance_create role
+  hosts: localhost
+  gather_facts: false
+  roles:
+    - role: cloud.aws_ops.ec2_instance_create
+      vars:
+          ec2_instance_create_operation: create
+          ec2_instance_create_aws_region: us-west-2
+          ec2_instance_create_instance_name: my-test-instance
+          ec2_instance_create_instance_type: t2.micro
+          ec2_instance_create_ami_id: ami-066a7fbaa12345678
+          ec2_instance_create_vpc_subnet_id: subnet-071443aa123456789
+          ec2_instance_create_tags:
+            Component: my-test-instance
+            Environment: Testing
+          ec2_instance_create_wait_for_boot: true
+          ec2_instance_create_vpc_id: vpc-xxxx
+          # Optionally, enable security group creation
+          ec2_instance_create_associate_external_sg: true
+          ec2_instance_create_external_sg_name: my-custom-sg
+          ec2_instance_create_external_sg_description: Security group for my custom access
+          ec2_instance_create_external_sg_rules:
+            - proto: tcp
+              ports: "80"
+              cidr_ip: "0.0.0.0/0"
+          ec2_instance_create_external_sg_tags:
+            Component: my-custom-sg
+            Environment: Testing
+          # Optionally, enable Elastic IP association
+          ec2_instance_create_associate_eip: true
+          ec2_instance_create_eip_tags:
+            Component: my-custom-eip
+            Environment: Testing
+          # Optionally, enable Internet Gateway association
+          ec2_instance_create_associate_igw: true
+          ec2_instance_create_igw_tags:
+            Environment: Testing
+            Name: "{{ resource_prefix }}-igw"
+
+---
+- name: Playbook for deleting EC2 instance and other role resources using cloud.aws_ops.ec2_instance_create role
+  hosts: localhost
+  gather_facts: false
+  roles:
+    - role: cloud.aws_ops.ec2_instance_create
+      vars:
+          ec2_instance_create_operation: delete
+          ec2_instance_create_aws_region: us-west-2
+          ec2_instance_create_instance_name: my-test-instance
+          ec2_instance_create_wait_for_boot: true
+          ec2_instance_create_associate_external_sg: true
+          ec2_instance_create_external_sg_name: my-custom-sg
+          ec2_instance_create_associate_igw: true
+          ec2_instance_create_vpc_id: vpc-xxxx
+
+License
+-------
+
+GNU General Public License v3.0 or later
+
+See [LICENSE](../../LICENSE) to see the full text.
+
+Author Information
+------------------
+
+- Ansible Cloud Content Team

roles/ec2_instance_create/defaults/main.yml

@@ -0,0 +1,12 @@
+---
+ec2_instance_create_operation: create
+ec2_instance_create_associate_eip: false
+ec2_instance_create_associate_external_sg: false
+ec2_instance_create_associate_igw: false
+ec2_instance_create_external_sg_description: "Security group for external access"
+ec2_instance_create_external_sg_name: "ec2_instance_create-default-external-sg"
+ec2_instance_create_wait_for_boot: true
+ec2_instance_create_external_sg_rules:
+  - proto: tcp
+    ports: "22"
+    cidr_ip: "0.0.0.0/0"

roles/ec2_instance_create/meta/argument_specs.yml

@@ -0,0 +1,114 @@
+---
+argument_specs:
+  main:
+    short_description: A role to create an EC2 instance with optional networking resources.
+    description:
+      - A role to create an EC2 instance.
+      - Optionally can create a security group and associate an Elastic IP with the instance.
+      - Supports custom configurations for instance settings, including instance type, AMI, key pair, tags, VPC/subnet, and networking configurations.
+    options:
+      ec2_instance_create_operation:
+        description:
+          - Whether to create or delete resources using the role.
+        required: false
+        type: str
+        default: create
+        choices: [create, delete]
+      ec2_instance_create_aws_region:
+        description:
+          - The AWS region in which to create the EC2 instance.
+        required: true
+        type: str
+      ec2_instance_create_instance_name:
+        description:
+          - The name of the EC2 instance to be created.
+        required: true
+        type: str
+      ec2_instance_create_instance_type:
+        description:
+          - The instance type for the EC2 instance.
+        required: true
+        type: str
+      ec2_instance_create_ami_id:
+        description:
+          - The AMI ID for the EC2 instance.
+        required: true
+        type: str
+      ec2_instance_create_key_name:
+        description:
+          - The name of the key pair to use for SSH access to the EC2 instance.
+        required: true
+        type: str
+      ec2_instance_create_vpc_subnet_id:
+        description:
+          - The ID of the VPC subnet in which the instance will be launched.
+        required: true
+        type: str
+      ec2_instance_create_tags:
+        description:
+          - A dictionary of tags to assign to the EC2 instance.
+        required: false
+        type: dict
+      ec2_instance_create_wait_for_boot:
+        description:
+          - Whether to wait for the EC2 instance to be in the running state before continuing.
+        required: false
+        default: true
+        type: bool
+      ec2_instance_create_associate_eip:
+        description:
+          - Whether to create and associate an Elastic IP (EIP) with the EC2 instance.
+        required: false
+        default: false
+        type: bool
+      ec2_instance_create_associate_external_sg:
+        description:
+          - Whether to associate an existing or a new security group for external access.
+        required: false
+        default: false
+        type: bool
+      ec2_instance_create_external_sg_name:
+        description:
+          - The name of the security group to create.
+        required: false
+        default: "ec2_instance_create-default-external-sg"
+        type: str
+      ec2_instance_create_external_sg_description:
+        description:
+          - A description of the security group.
+        required: false
+        default: "Security group for external access"
+        type: str
+      ec2_instance_create_external_sg_tags:
+        description:
+          - Tags to assign to the security group.
+        required: false
+        type: dict
+      ec2_instance_create_associate_igw:
+        description:
+          - Whether to create and associate an internal gateway.
+        required: false
+        default: false
+        type: bool
+      ec2_instance_create_vpc_id:
+        description:
+          - The ID of the VPC used for security group and internet gateway.
+          - This is required when `ec2_instance_create_associate_external_sg` or `ec2_instance_create_associate_igw` is `true`.
+        required: false
+        type: str
+      ec2_instance_create_eip_tags:
+        description:
+          - Tags to assign to the Elastic IP.
+        required: false
+        type: dict
+      ec2_instance_create_external_sg_rules:
+        description:
+          - A list of dict containing custom rules to add to the security group. Each rule is a dictionary with `proto`, `ports`, and `cidr_ip` keys. Default is to allow SSH (port 22) from `0.0.0.0/0`.
+        required: false
+        type: list
+        elements: dict
+      ec2_instance_create_igw_tags:
+        description:
+          - Tags to assign to the internet gateway.
+        required: false
+        type: dict

roles/ec2_instance_create/meta/main.yml

@@ -0,0 +1,3 @@
+---
+dependencies:
+  - role: cloud.aws_ops.aws_setup_credentials