Vh fdZdZdZddlZddlmZddlmZddlmZddlm Z dd lm Z dd lm Z dd lm Z dd lm Z dd lmZddlmZddlmZddlmZddlmZddlmZddlmZddlmZddlmZddlmZdZdZdZdZdZdZ dZ!dZ"dZ#d Z$d'd!Z%d"Z&d#Z'd$Z(d%Z)e*d&k(re)yy)(a --- module: ec2_eni version_added: 1.0.0 short_description: Create and optionally attach an Elastic Network Interface (ENI) to an instance description: - Create and optionally attach an Elastic Network Interface (ENI) to an instance. - If O(eni_id) or O(private_ip_address) is provided, the existing ENI (if any) will be modified. - The O(attached) parameter controls the attachment status of the network interface. author: - "Rob White (@wimnat)" - "Mike Healey (@healem)" options: eni_id: description: - The ID of the ENI (to modify). - If O(eni_id=None) and O(state=present), a new ENI will be created. type: str instance_id: description: - Instance ID that you wish to attach ENI to. type: str private_ip_address: description: - Private IP address. type: str subnet_id: description: - ID of subnet in which to create the ENI. type: str description: description: - Optional description of the ENI. type: str security_groups: description: - List of security groups associated with the interface. - Ignored when O(state=absent). type: list elements: str default: [] state: description: - Create or delete ENI. default: present choices: [ 'present', 'absent' ] type: str device_index: description: - The index of the device for the network interface attachment on the instance. default: 0 type: int attached: description: - Specifies if network interface should be attached or detached from instance. If omitted, attachment status won't change type: bool force_detach: description: - Force detachment of the interface. This applies either when explicitly detaching the interface by setting O(instance_id=None) or when deleting an interface with O(state=absent). default: false type: bool delete_on_termination: description: - Delete the interface when the instance it is attached to is terminated. You can only specify this flag when the interface is being modified, not on creation. required: false type: bool source_dest_check: description: - By default, interfaces perform source/destination checks. NAT instances however need this check to be disabled. You can only specify this flag when the interface is being modified, not on creation. required: false type: bool secondary_private_ip_addresses: description: - A list of IP addresses to assign as secondary IP addresses to the network interface. - This option is mutually exclusive of O(secondary_private_ip_address_count). required: false type: list elements: str purge_secondary_private_ip_addresses: description: - To be used with O(secondary_private_ip_addresses) to determine whether or not to remove any secondary IP addresses other than those specified. - Set O(secondary_private_ip_addresses=[]) to purge all secondary addresses. default: false type: bool secondary_private_ip_address_count: description: - The number of secondary IP addresses to assign to the network interface. - This option is mutually exclusive of O(secondary_private_ip_addresses). required: false type: int allow_reassignment: description: - Indicates whether to allow an IP address that is already assigned to another network interface or instance to be reassigned to the specified network interface. required: false default: false type: bool name: description: - Name for the ENI. This will create a tag with the key V(Name) and the value assigned here. - This can be used in conjunction with O(subnet_id) as another means of identifiying a network interface. - AWS does not enforce unique V(Name) tags, so duplicate names are possible if you configure it that way. If that is the case, you will need to provide other identifying information such as O(private_ip_address) or O(eni_id). required: false type: str extends_documentation_fragment: - amazon.aws.common.modules - amazon.aws.region.modules - amazon.aws.tags - amazon.aws.boto3 notes: - This module identifies and ENI based on either the O(eni_id), a combination of O(private_ip_address) and O(subnet_id), or a combination of O(instance_id) and O(device_index). Any of these options will let you specify a particular ENI. - Support for O(tags) and O(purge_tags) was added in release 1.3.0. a # Note: These examples do not set authentication details, see the AWS Guide for details. # Create an ENI. As no security group is defined, ENI will be created in default security group - amazon.aws.ec2_eni: private_ip_address: 172.31.0.20 subnet_id: subnet-xxxxxxxx state: present # Create an ENI and attach it to an instance - amazon.aws.ec2_eni: instance_id: i-xxxxxxx device_index: 1 private_ip_address: 172.31.0.20 subnet_id: subnet-xxxxxxxx state: present # Create an ENI with two secondary addresses - amazon.aws.ec2_eni: subnet_id: subnet-xxxxxxxx state: present secondary_private_ip_address_count: 2 # Assign a secondary IP address to an existing ENI # This will purge any existing IPs - amazon.aws.ec2_eni: subnet_id: subnet-xxxxxxxx eni_id: eni-yyyyyyyy state: present secondary_private_ip_addresses: - 172.16.1.1 # Remove any secondary IP addresses from an existing ENI - amazon.aws.ec2_eni: subnet_id: subnet-xxxxxxxx eni_id: eni-yyyyyyyy state: present secondary_private_ip_address_count: 0 # Destroy an ENI, detaching it from any instance if necessary - amazon.aws.ec2_eni: eni_id: eni-xxxxxxx force_detach: true state: absent # Update an ENI - amazon.aws.ec2_eni: eni_id: eni-xxxxxxx description: "My new description" state: present # Update an ENI using name and subnet_id - amazon.aws.ec2_eni: name: eni-20 subnet_id: subnet-xxxxxxx description: "My new description" state: present # Update an ENI identifying it by private_ip_address and subnet_id - amazon.aws.ec2_eni: subnet_id: subnet-xxxxxxx private_ip_address: 172.16.1.1 description: "My new description" # Detach an ENI from an instance - amazon.aws.ec2_eni: eni_id: eni-xxxxxxx instance_id: None state: present ### Delete an interface on termination # First create the interface - amazon.aws.ec2_eni: instance_id: i-xxxxxxx device_index: 1 private_ip_address: 172.31.0.20 subnet_id: subnet-xxxxxxxx state: present register: eni # Modify the interface to enable the delete_on_terminaton flag - amazon.aws.ec2_eni: eni_id: "{{ eni.interface.id }}" delete_on_termination: true a interface: description: Network interface attributes. returned: when state != absent type: complex contains: attachment: description: The network interface attachment. type: dict sample: { "attach_time": "2024-04-25T20:57:20+00:00", "attachment_id": "eni-attach-0ddce58b341a1846f", "delete_on_termination": true, "device_index": 0, "instance_id": "i-032cb1cceb29250d2", "status": "attached" } description: description: Interface description. type: str sample: Firewall network interface groups: description: Dict of security groups. type: dict sample: { "sg-f8a8a9da": "default" } id: description: Network interface id. type: str sample: "eni-1d889198" mac_address: description: Interface's physical address. type: str sample: "00:00:5E:00:53:23" name: description: The name of the ENI. type: str sample: "my-eni-20" owner_id: description: AWS account id. type: str sample: 812381371 private_ip_address: description: Primary ip address of this interface. type: str sample: 10.20.30.40 private_ip_addresses: description: List of all private ip addresses associated to this interface. type: list elements: dict sample: [ { "primary_address": true, "private_ip_address": "10.20.30.40" } ] source_dest_check: description: Value of source/dest check flag. type: bool sample: True status: description: Network interface status. type: str sample: "pending" subnet_id: description: Which vpc subnet the interface is bound. type: str sample: subnet-b0a0393c tags: description: The dictionary of tags associated with the ENI. type: dict sample: { "Name": "my-eni", "group": "Finance" } vpc_id: description: Which vpc this network interface is bound. type: str sample: vpc-9a9a9da N) ip_address) ip_network)AnsibleEC2Error)assign_private_ip_addresses)attach_network_interface)create_network_interface)delete_network_interface)describe_network_interfaces)describe_subnets)detach_network_interfaceensure_ec2_tags)%get_ec2_security_group_ids_from_names)"modify_network_interface_attribute)unassign_private_ip_addresses)AnsibleAWSModule)boto3_tag_list_to_ansible_dict)boto3_tag_specifications)wait_for_resource_statec g}d|vr$|dD]}|j|d|ddi}d|vr|dD] }|d||d<|jd|jd |jd |jd |jd |jd |jd|jd|jd||d }d|vrt|d}d|vr|d|d<||d<d|vrx|djd|djd|djd|djd |djd|djdd|d<|S)NPrivateIpAddressesPrivateIpAddressPrimary)private_ip_addressprimary_addressGroups GroupNameGroupIdNetworkInterfaceIdSubnetIdVpcId DescriptionOwnerIdStatus MacAddressSourceDestCheck) id subnet_idvpc_id descriptionowner_idstatus mac_addressrsource_dest_checkgroupsprivate_ip_addressesTagSetNamenametags Attachment AttachmentId InstanceId DeviceIndex AttachTimeDeleteOnTermination) attachment_id instance_id device_indexr, attach_timedelete_on_termination attachment)appendgetr) interfaceprivate_addressesipr/groupinterface_infor4s f/home/dcms/DCMS/lib/python3.12/site-packages/ansible_collections/amazon/aws/plugins/modules/ec2_eni.py get_eni_inforI4sy(01 wB  $ $B?Q?&]]+<= 1 N9-i.AB T>%)&\N6 "!%vy &|488H$\266|D%l377 F -11(;$\266|D%.|%<%@%@AV%W ( |$ ct|||}t}d|vr|dD]}|j|dt|}|j|SNrr) describe_enisetaddissubset connectionip_listmoduleeni_idenirDrEip_sets rH correct_ipsrXasd z66 2Cs"*+ :B  ! !"%7"8 9 :\F ??, --rJct|||}t}d|vr|dD]}|j|dt|}|j| SrL)rMrNrOunionrQs rH absent_ipsr[msg z66 2Cs"*+ :B  ! !"%7"8 9 :\F||-. ..rJct|||}t}d|vr|dD]}|j|dtt ||k(SrL)rMrNrOboollen)rRip_countrTrUrVrDrEs rHcorrect_ip_countr`ysa z66 2Cs"*+ :B  ! !"%7"8 9 : %&(2 33rJchd}d}d}||kr'tj|||z }||ry||kr&yy)Nr)timesleep)function_pointerargsmax_wait interval_time current_waits rHwait_forrksDHML  ! =! % T "   !rJcB|jjd}|jjd}|dk(rd}|jjd}|jjd}|jjd}|jjd}t|jjd|| } |jjd } |jjd } d } |jjd xs t} |jjd}|r|| d<d|i}|r||d<|r||d<t | dkDr| |d<| rt | d|d<|rI t |t|gdd}t|tv}|s|jd d|jr|jdd t|fi|}d}t!||d|g |r%|# t#||||d!t!||d"|g | % t'||d| #t)t*|| ||| % t'||d| $t)t,|| ||t/|||}d} |j| t1|%y#t$r}|j|Yd}~-d}~wwxYw#t$r}|j|Yd}~d}~wwxYw#t$r(}t%|||j|Yd}~d}~wwxYw#t$r(}t%|||j|Yd}~d}~wwxYw#t$r(}t%|||j|Yd}~d}~wwxYw)&Nr<attachedNoner=r(rr*security_groupsr)secondary_private_ip_addresses"secondary_private_ip_address_countFr4r3r2r rr"rrznetwork-interface)typesTagSpecifications SubnetIds CidrBlockzSError: cannot create ENI - Address does not fall within the subnet's address range.changedmsgTz,Would have created ENI if not in check mode.rnetwork_interface_availableNetworkInterfaceIdsr7r8rnetwork_interface_attached)rSecondaryPrivateIpAddressCountrrryrC)paramsrBrdictr^rr strrfail_json_aws_errorrr fail_json check_mode exit_jsonrrrr rrkr`rXrMrI)rRr)rTr<rmr=r(rr*rorqrrryr4r3rg cidr_blockevalid_private_iprVrUs rH create_enirs--##M2K}}  ,Hf ==$$^4L !!+.I**+?@--##M2K; +,jO&,]]%6%67W%X")/):):;_)`&G ==  V $ .D ==  V $D V  "D#5  )] ?a(X $"MM--.EF%+]]%6%67W%X"+1==+<+<=c+d()/):):;_)`&**+?@G ==  V $D ==  V $D""<0J J 4C % &F@&  "C'3}+=+L((6"vGU`Ka  ! #:?J_bcj_klF(X78F6NJ((6zV\ekl  ( +s3D/EIZ/Z((6"vPWYjOk ,1D< !67?TT((6"+1,/ ,=n,M3H$-!H!K+J]c\de&(# 3 &JMNbJc*xQklmvkw1-?+@*x '*x ) 5,05P1QTWXvTw1w,x ),1U((1"+1+/4O0PSVWuSv0v+w Z5RTZ\bc)-c2P.QTWXsTt.t)u &)((/"+1+E*<  [*6PRXZ`a - 9.12M.N +14SS((/"+1>A``*< -z;]_egmn36UU((7:\\82"+1+FGkHk+l -z;]_egmn t s"s<'8'F+'U((z37,"#.$0+1  ,"F,H_e^f3&((,"#.$0+1  ,"F,H_e^f   z*c6: :G #J8Ulrks t;z63dJOO z66 2C W# {CD &*:wG t9>!WF &""1%%&s#F22 G;GGc@g}|D]}|j|d|S)Nr)rA)r/remote_security_groupsrFs rHrrs28%%eI&678 "!rJcz t||gddS#t$r}|j|Yd}~yd}~wwxYw)Nrurr!)r rr)rRrTr(rs rH _get_vpc_idrsA& ykB1EgNN &""1%%&s :5:cJ|d}i}|r||d<|d}t|||||}|S)NFr2r)r4rr )rRrTrVr3r4rrUrys rHrrs@ |  V % &Fj&&tPZ[G NrJc td)idtdddtdddtddtddtdd tgd d d td ddtdddgdtdddtdddtdddtdd d dtdddtdddtdddtdddtdddtd d!g"d#td$d}t|ddggdd$dgfdd$dgfgd$%}|jd&}|jj d}|dk(rft ||}|J|jj d}||j d'(t|||}t|||yt|||y|dk(r t||yy)*NrUr)defaulttyper<r)rr(r*ror)rrelementsr=rintstatepresentabsent)rchoicesrnor]r.r?rqrFrrrrmr3r4r resource_tags)raliasesrT) argument_specmutually_exclusive required_ifsupports_check_modeec2z-subnet_id is required when creating a new ENI)rz) rrclientrrBrrrrrr)rrTrRrrVr(r)s rHmainr%s9Du-E2 U+E"  e$  RfuE !%09y(.CD$V4t&9#4f=(,DvPU'V.2%f-M,05+I F; d0!"$U +#$v'8 9%&62'M,#=?cdeTM?37@`?ab  ! Fu%J MM  g &E  F3 ; ))+6I   %T U VY?F z66 2 z63 / ( :v& rJ__main__)N)+ DOCUMENTATIONEXAMPLESRETURNrd ipaddressrr7ansible_collections.amazon.aws.plugins.module_utils.ec2rrrrr r r r rrrr;ansible_collections.amazon.aws.plugins.module_utils.modulesr;ansible_collections.amazon.aws.plugins.module_utils.taggingrr;ansible_collections.amazon.aws.plugins.module_utils.waitersrrIrXr[r`rkrrrrrMrrrrr__name__rrJrHrsv pT nF P S_\\\_T\SifaXf`_*Z . /4`CF[C|!&H*&0&f"& 3'l zFrJ