tomwwright

# group_vars/project.ansibled.yml
# ---
# specify VPC details and AWS credentials

# general details about our VPC
vpc_name: ansibled-vpc
vpc_key: ansibled-key
vpc_dns_zone: ansibled

# credentials for AWS (no, they aren't real...)

tomwwright

- name: define some facts about the VPC!
  include_tasks: tasks/vpc/facts.yml
  
- name: now we can reference the subnet IDs of our subnets by friendly names
  command: echo "The subnet ID of 'private-a' is: {{ vpc_subnet_ids['private-a'] }}"
  
- name: define some facts about a different VPC by providing the VPC name as a var!
  include_tasks: tasks/vpc/facts.yml
  vars:
    vpc_name: "another_vpc"

tomwwright

# tasks/vpc/facts.yml
# ---
# sets facts for some important IDs and IPs of our VPC

# find the VPC by name
- name: VPC facts
  ec2_vpc_net_facts:
    filters:
      "tag:Name": "{{ vpc_name }}"
  register: vpc_facts

tomwwright

# vpc.yml
# ---
# playbook that runs our VPC tasks for any hosts in the `vpc` group, providing AWS credentials in the environment 

- hosts: vpc
  environment:
    AWS_ACCESS_KEY_ID: "{{ aws_access_key }}"
    AWS_SECRET_ACCESS_KEY: "{{ aws_secret_key }}"
    AWS_REGION: "{{ aws_region }}"
  tasks:

tomwwright

# tasks/vpc/setup.gateways.yml
# ---
# creates the gateways for the VPC, and sets up routing for the subnets

# create the internet gateway, saving the output to extract the ID later
- name: create internet gateway
  ec2_vpc_igw:
    vpc_id: "{{ vpc_id }}"
  register: create_gateway

tomwwright

# tasks/vpc/setup.vpc.yml
# ---
# creates a VPC, configures a list of defined subnets, configures a list of defined security groups

# use the Ansible module to create our VPC, saving the output into `create_vpc`
- name: create VPC
  ec2_vpc_net:
    name: "{{ vpc_name }}"
    cidr_block: "{{ vpc_cidr_block }}"
    region: "{{ aws_region }}"

tomwwright

# host_vars/vpc.ansibled.yml

# IP CIDR block for the VPC
vpc_cidr_block: 10.0.0.0/16

# a map defining the subnets we will build in the VPC
vpc_subnets:
  private-a:
    cidr: 10.0.1.0/24
    az: "{{ aws_region }}a"

tomwwright

# group_vars/all.yml
# ---
# global definitions, not too much to go here...

# specify to run Ansible for hosts locally by default, not over SSH
ansible_connection: local

tomwwright

# hosts.inventory

[vpc]
vpc.ansibled

[project.ansibled:children]
vpc

tomwwright

# imagining we have some hosts defined in an `elasticsearch` group

- hosts: elasticsearch
  tasks:

    # `when` allows us to define a condition that has to be true for this task to run
    # in this case, it is including another list of tasks to execute using `include_tasks`

    - name: do some sort of required setup
      include_tasks: tasks/setup.yml