Add new ec2_instance_create role

roles/ec2_instance_create/README.md

@@ -0,0 +1,118 @@
+# ec2_instance_create
+
+A role to create an EC2 instance in AWS.
+
+Users can specify various parameters for instance configuration, including instance type, AMI ID, key pair, tags, and VPC/subnet configuration.
+
+This role also supports the creation of optional networking resources, such as a security group and an Elastic IP (EIP). You can choose to wait for the EC2 instance to finish booting before continuing.
+
+## Role Variables
+
+The following variables can be set in the role to customize EC2 instance creation and networking configurations:
+
+### EC2 Instance Configuration
+
+* **ec2_instance_create_aws_region**: (Required)
+  The AWS region in which to create the EC2 instance.
+
+* **ec2_instance_create_instance_name**: (Required)
+  The name of the EC2 instance to be created.
+
+* **ec2_instance_create_instance_type**: (Required)
+  The instance type for the EC2 instance (e.g., `t2.micro`, `m5.large`).
+
+* **ec2_instance_create_ami_id**: (Required)
+  The AMI ID for the EC2 instance.
+
+* **ec2_instance_create_key_name**: (Required)
+  The name of the key pair to use for SSH access to the EC2 instance.
+
+* **ec2_instance_create_vpc_subnet_id**: (Required)
+  The ID of the VPC subnet in which the instance will be launched.
+
+* **ec2_instance_create_tags**: (Optional)
+  A dictionary of tags to assign to the EC2 instance.
+
+* **ec2_instance_create_wait_for_boot**: (Optional)
+  Whether to wait for the EC2 instance to be in the "running" state before continuing. Default is `true`.
+
+### Optional Networking Resources
+
+* **ec2_instance_create_associate_eip**: (Optional)
+  Whether to create an Elastic IP (EIP) and associate it with the EC2 instance. Default is `false`.
+
+* **ec2_instance_create_associate_igw**: (Optional)
+  Whether to create and associate a internet gateway with the EC2 instance. Default is `false`.
+  If set to `true`, a internet gateway will be created or associated with the instance.
+
+* **ec2_instance_create_associate_sg**: (Optional)
+  Whether to create and associate a security group with the EC2 instance for external access. Default is `false`.
+  If set to `true`, a security group will be created or associated with the instance.
+
+* **ec2_instance_create_sg_name**: (Optional)
+  The name of the security group to create. Default is `default-external-sg`.
+
+* **ec2_instance_create_sg_description**: (Optional)
+  A description for the security group. Default is `Security group for external access`.
+
+* **ec2_instance_create_sg_ssh_port**: (Optional)
+  The SSH port to open in the security group. Default is `22`.
+
+* **ec2_instance_create_sg_http_port**: (Optional)
+  The HTTP port to open in the security group. Default is `80`.
+
+* **ec2_instance_create_sg_https_port**: (Optional)
+  The HTTPS port to open in the security group. Default is `443`.
+
+* **ec2_instance_create_sg_tags**: (Optional)
+  Tags to assign to the security group.
+
+### Example:
+
+Here’s an example of how to use the role in a playbook.
+
+```yaml
+---
+- name: Playbook for creating EC2 instance using cloud.aws_ops.ec2_instance_create role
+  hosts: localhost
+  gather_facts: false
+  roles:
+    - role: cloud.aws_ops.ec2_instance_create
+      vars:
+          ec2_instance_create_aws_region: us-west-2
+          ec2_instance_create_instance_name: my-test-instance
+          ec2_instance_create_instance_type: t2.micro
+          ec2_instance_create_ami_id: ami-066a7fbaa12345678
+          ec2_instance_create_vpc_subnet_id: subnet-071443aa123456789
+          ec2_instance_create_tags:
+            Component: my-test-instance
+            Environment: Testing
+          ec2_instance_create_wait_for_boot: true
+          # Optionally, enable security group creation
+          ec2_instance_create_associate_sg: true
+          ec2_instance_create_sg_name: my-custom-sg
+          ec2_instance_create_sg_description: Security group for my custom access
+          ec2_instance_create_sg_ssh_port: 22
+          ec2_instance_create_sg_http_port: 80
+          ec2_instance_create_sg_https_port: 443
+          ec2_instance_create_sg_tags:
+            Component: my-custom-sg
+            Environment: Testing
+          # Optionally, enable Elastic IP association
+          ec2_instance_create_associate_eip: true
+          ec2_instance_create_eip_release_on_disassociation: true
+              ec2_instance_create_eip_tags:
+                Component: my-test-eip
+                Environment: Testing
+
+License
+-------
+
+GNU General Public License v3.0 or later
+
+See [LICENSE](../../LICENSE) to see the full text.
+
+Author Information
+------------------
+
+- Ansible Cloud Content Team

roles/ec2_instance_create/defaults/main.yml

@@ -0,0 +1,2 @@
+---
+ec2_instance_create_associate_eip: false

roles/ec2_instance_create/meta/argument_specs.yml

@@ -0,0 +1,103 @@
+---
+argument_specs:
+  main:
+    short_description: A role to create an EC2 instance with optional networking resources.
+    description:
+      - A role to create an EC2 instance.
+      - Optionally can create a security group and associate an Elastic IP with the instance.
+      - Supports custom configurations for instance settings, including instance type, AMI, key pair, tags, VPC/subnet, and networking configurations.
+    options:
+      ec2_instance_create_aws_region:
+        description:
+          - The AWS region in which to create the EC2 instance.
+        required: true
+        type: str
+      ec2_instance_create_instance_name:
+        description:
+          - The name of the EC2 instance to be created.
+        required: true
+        type: str
+      ec2_instance_create_instance_type:
+        description:
+          - The instance type for the EC2 instance.
+        required: true
+        type: str
+      ec2_instance_create_ami_id:
+        description:
+          - The AMI ID for the EC2 instance.
+        required: true
+        type: str
+      ec2_instance_create_key_name:
+        description:
+          - The name of the key pair to use for SSH access to the EC2 instance.
+        required: true
+        type: str
+      ec2_instance_create_vpc_subnet_id:
+        description:
+          - The ID of the VPC subnet in which the instance will be launched.
+        required: true
+        type: str
+      ec2_instance_create_tags:
+        description:
+          - A dictionary of tags to assign to the EC2 instance.
+        required: false
+        type: dict
+      ec2_instance_create_wait_for_boot:
+        description:
+          - Whether to wait for the EC2 instance to be in the running state before continuing.
+        required: false
+        default: true
+        type: bool
+      ec2_instance_create_associate_eip:
+        description:
+          - Whether to create and associate an Elastic IP (EIP) with the EC2 instance.
+        required: false
+        default: false
+        type: bool
+      ec2_instance_create_associate_sg:
+        description:
+          - Whether to create and associate a security group for external access.
+        required: false
+        default: false
+        type: bool
+      ec2_instance_create_sg_name:
+        description:
+          - The name of the security group to create.
+        required: false
+        default: "default-external-sg"
+        type: str
+      ec2_instance_create_sg_description:
+        description:
+          - A description of the security group.
+        required: false
+        default: "Security group for external access"
+        type: str
+      ec2_instance_create_sg_ssh_port:
+        description:
+          - The SSH port to open in the security group.
+        required: false
+        default: 22
+        type: int
+      ec2_instance_create_sg_http_port:
+        description:
+          - The HTTP port to open in the security group.
+        required: false
+        default: 80
+        type: int
+      ec2_instance_create_sg_https_port:
+        description:
+          - The HTTPS port to open in the security group.
+        required: false
+        default: 443
+        type: int
+      ec2_instance_create_sg_tags:
+        description:
+          - Tags to assign to the security group.
+        required: false
+        type: dict
+      ec2_instance_create_associate_igw:
+        description:
+          - Whether to create and associate a internal gateway.
+        required: false
+        default: false
+        type: bool

roles/ec2_instance_create/meta/main.yml

@@ -0,0 +1,3 @@
+---
+dependencies:
+  - role: cloud.aws_ops.aws_setup_credentials

roles/ec2_instance_create/tasks/main.yml

@@ -0,0 +1,97 @@
+---
+- name: Run 'ec2_instance_create' role
+  module_defaults:
+    group/aws: "{{ aws_setup_credentials__output }}"
+
+  block:
+    - name: Create EC2 instance with provided configuration
+      amazon.aws.ec2_instance:
+        region: "{{ ec2_instance_create_aws_region }}"
+        name: "{{ ec2_instance_create_instance_name }}"
+        instance_type: "{{ ec2_instance_create_instance_type }}"
+        image_id: "{{ ec2_instance_create_ami_id }}"
+        key_name: "{{ ec2_instance_create_key_name }}"
+        vpc_subnet_id: "{{ ec2_instance_create_vpc_subnet_id }}"
+        tags: "{{ ec2_instance_create_tags | default(omit) }}"
+        wait: "{{ ec2_instance_create_wait_for_boot }}"
+      register: ec2_instance
+
+    - name: Create security group if enabled
+      when: ec2_instance_create_associate_sg is true
+      block:
+        - name: Define security group with access rules
+          amazon.aws.ec2_group:
+            name: "{{ ec2_instance_create_sg_name | default('default-external-sg') }}"
+            description: "{{ ec2_instance_create_sg_description | default('Security group for external access') }}"
+            vpc_id: "{{ ec2_instance_create_vpc_id }}"
+            rules:
+              - proto: tcp
+                ports:
+                  - "{{ ec2_instance_create_sg_ssh_port | default(22) }}"
+                cidr_ip: "0.0.0.0/0"
+              - proto: tcp
+                ports:
+                  - "{{ ec2_instance_create_sg_http_port | default(80) }}"
+                cidr_ip: "0.0.0.0/0"
+              - proto: tcp
+                ports:
+                  - "{{ ec2_instance_create_sg_https_port | default(443) }}"
+                cidr_ip: "0.0.0.0/0"
+            tags: "{{ ec2_instance_create_sg_tags | default(omit) }}"
+
+        - name: Associate security group with EC2 instance
+          amazon.aws.ec2_instance:
+            instance_ids:
+              - "{{ ec2_instance.instance_ids[0] }}"
+            security_groups:
+              - "{{ ec2_instance_create_sg_name | default('default-external-sg') }}"
+          register: ec2_instance_associate_sg
+
+    - name: Create and associate Elastic IP if enabled
+      when: ec2_instance_create_associate_eip is true
+      block:
+        - name: Allocate and associate Elastic IP
+          amazon.aws.ec2_eip:
+            device_id: "{{ ec2_instance.instance_ids[0] }}"
+            state: present
+            release_on_disassociation: true
+            tags: "{{ ec2_instance_create_tags | default(omit) }}"
+          register: instance_eip
+
+        - name: Output details of associated Elastic IP
+          ansible.builtin.debug:
+            msg:
+              - "Elastic IP {{ instance_eip.public_ip }} created and associated with EC2 instance {{ ec2_instance.instance_ids[0] }}"
+              - "Details: {{ instance_eip }}"
+
+    - name: Create and Attach Internet Gateway if required
+      when: ec2_instance_create_associate_igw is true
+      block:
+        - name: Create an Internet Gateway
+          amazon.aws.ec2_internet_gateway:
+            region: "{{ ec2_instance_create_aws_region }}"
+            vpc_id: "{{ ec2_instance_create_vpc_id }}"
+            state: present
+          register: internet_gateway
+
+        - name: Attach Internet Gateway to VPC
+          amazon.aws.ec2_internet_gateway:
+            region: "{{ ec2_instance_create_aws_region }}"
+            vpc_id: "{{ ec2_instance_create_vpc_id }}"
+            internet_gateway_id: "{{ internet_gateway.id }}"
+            state: attached
+
+        - name: Modify the route table to route internet traffic to Internet Gateway
+          amazon.aws.ec2_vpc_route_table:
+            region: "{{ ec2_instance_create_aws_region }}"
+            vpc_id: "{{ ec2_instance_create_vpc_id }}"
+            routes:
+              - dest: "0.0.0.0/0"
+                gateway_id: "{{ internet_gateway.id }}"
+            state: present
+
+    - name: Output details of the created EC2 instance
+      ansible.builtin.debug:
+        msg:
+          - "EC2 instance {{ ec2_instance.instance_ids[0] }} created successfully"
+          - "Instance details: {{ ec2_instance.instances[0] }}"