diff options
author | Kenny Woodson <kwoodson@redhat.com> | 2017-10-28 20:46:44 -0400 |
---|---|---|
committer | Kenny Woodson <kwoodson@redhat.com> | 2017-11-08 10:01:08 -0500 |
commit | 8757073d8509a6301b70ff66383d84416bdd78cb (patch) | |
tree | c4eef61dc19e5dc80a3b1b159b2b9f5e72ba826b /roles/openshift_aws/tasks/security_group.yml | |
parent | adb5c51666dfe7c6b93c7bd7c87b339ef2a27f5b (diff) | |
download | openshift-8757073d8509a6301b70ff66383d84416bdd78cb.tar.gz openshift-8757073d8509a6301b70ff66383d84416bdd78cb.tar.bz2 openshift-8757073d8509a6301b70ff66383d84416bdd78cb.tar.xz openshift-8757073d8509a6301b70ff66383d84416bdd78cb.zip |
Bootstrap enhancements.
Diffstat (limited to 'roles/openshift_aws/tasks/security_group.yml')
-rw-r--r-- | roles/openshift_aws/tasks/security_group.yml | 42 |
1 files changed, 7 insertions, 35 deletions
diff --git a/roles/openshift_aws/tasks/security_group.yml b/roles/openshift_aws/tasks/security_group.yml index e1fb99b02..5cc7ae537 100644 --- a/roles/openshift_aws/tasks/security_group.yml +++ b/roles/openshift_aws/tasks/security_group.yml @@ -6,39 +6,11 @@ "tag:Name": "{{ openshift_aws_clusterid }}" register: vpcout -- name: Create default security group for cluster - ec2_group: - name: "{{ openshift_aws_node_security_groups.default.name }}" - description: "{{ openshift_aws_node_security_groups.default.desc }}" - region: "{{ openshift_aws_region }}" - vpc_id: "{{ vpcout.vpcs[0].id }}" - rules: "{{ openshift_aws_node_security_groups.default.rules | default(omit, True)}}" - register: sg_default_created - -- name: create the node group sgs - ec2_group: - name: "{{ item.name}}" - description: "{{ item.desc }}" - rules: "{{ item.rules if 'rules' in item else [] }}" - region: "{{ openshift_aws_region }}" - vpc_id: "{{ vpcout.vpcs[0].id }}" - register: sg_create - with_items: - - "{{ openshift_aws_node_security_groups[openshift_aws_node_group_type]}}" +- include: security_group_create.yml + vars: + l_security_groups: "{{ openshift_aws_node_security_groups }}" -- name: create the k8s sgs for the node group - ec2_group: - name: "{{ item.name }}_k8s" - description: "{{ item.desc }} for k8s" - region: "{{ openshift_aws_region }}" - vpc_id: "{{ vpcout.vpcs[0].id }}" - register: k8s_sg_create - with_items: - - "{{ openshift_aws_node_security_groups[openshift_aws_node_group_type]}}" - -- name: tag sg groups with proper tags - ec2_tag: - tags: "{{ openshift_aws_security_groups_tags }}" - resource: "{{ item.group_id }}" - region: "{{ openshift_aws_region }}" - with_items: "{{ k8s_sg_create.results }}" +- include: security_group_create.yml + when: openshift_aws_node_security_groups_extra is defined + vars: + l_security_groups: "{{ openshift_aws_node_security_groups_extra | default({}) }}" |