aws-infrastructure builds out things according to seemingly arbitrary conventions. They probably make sense, in the appropriate context.
autodeploy_passthrough_enabled
(boolean) - should ports in security groups be opened to support autodeploy passthroughautoscale
(boolean) - should this playbook autoscaleelb_ssl_offload
(boolean) - terminate SSL in the ELBelb_ssl_certificate_name
(string) - name of the certificate to useload_balance_prototypes
(boolean) - are the prototypes load balancedload_balancers_enabled
(boolean) - are load balancers useddns_points_to_load_balancer
(boolean) - should the dns record point to the load balancerdns_load_balancing_enabled
(boolean) - load balance with Route53dns_load_balanced_roles
(list of strings) - list of what roles should be load balancedroot_volume_size
(integer) - the size of the root volume in GBsubnet_prefix
(string) - the first 2 octaves of the ip in the format '10.0'using_rds
(boolean) - use AWS RDSrds_engine
(enumeration | postgres, MySQL) - the type of RDS engine to userds_database_name
(string) - the database namerds_database_username
(string) - the database usernamerds_database_password
(string) - the database passwordrds_database_size
(integer) - the size of the database in GBrds_database_backup_retention
(integer) - how long to keep data in daysusing_elasticache
(boolean) - use AWS Elastic Cacheelasticache_engine
(enumeration | memcached, redis) - the engine to use in the elasti cachefallback_server_type
(boolean) - to use fallback server type or notforge_region
(string) - valid aws region to build inforge_bucket
(string) - s3 bucket name to find the playbooks for forge inforge_userdata
(64bit encoded string) - aws bootstrap codevirtualization_type
(enumeration | hvm, paravirtual) - the type of virtualizationhealth_check_response_timeout
(integer) - how long to wait till check times out in secondshealth_check_interval
(integer) - how long to wait between checks in secondshealth_check_unhealthy_threshold
(integer) - The number of consecutive failed health checks that must occur before declaring an EC2 instance unhealthy in secondshealth_check_healthy_threshold
(integer) - The number of consecutive successful health checks that must occur before declaring an EC2 instance healthy in secondsalways_use_spot_instance_for_roles
(list of strings) - list of what roles will be build on spot instancesautoscale_roles
(list of strings) - list of what roles will be autoscaleddefault_instance_type
(list of key/vaules) - list of what roles should use as an instance typefallback_instance_type
(list of key/vaules) - list of what instance type should be used if we are falling back (ie spot prices are spiked)use_spot_instances_in_environments
(list of strings) - list of environment tiers that should use spot instancesdefault_instance_bid
(list of key/vaules) - list of instance sizes and what the max bid should be for itinstance_type_requires_paravirtualization
(list of strings) - list of instance types that require paravirtualization (instead of HVM)override_instance_type
(list of key/vaules) - list of roles and instance types to useoverride_instance_bid
(list of key/vaules) - list of instance types to use and their max bidsoverride_root_volume_size
(list of key/vaules) - list of roles and the max root volume sizeoverride_region
(string) - allows you to build a box in a region other than that specified in the configsdefault_server_types
(list of enumeration | webserver, securewebserver, mysql, postgresql, mongodb, alternativewebserver, alternativesecurewebserver) - defines each type of role and what its default role is (for opening security groups)override_server_types
(list of key/vaules) - list of server role what instances that should beroles_needing_public_ip
(list of string) - list of roles needing public ipvpc_peering_enabled
(boolean) - if VPC peering is enabledvpc_peering_from
(string) - what to peer from (usually this project)vpc_peering_to
(list of string) - list of vpcs to connect too
- Ansible >2.0
- hosts: servers
roles:
- role: telusdigital.aws-infrastructure
required_systems:
- application
- database
autodeploy_passthrough_enabled: yes
using_load_balancers: yes
elb_ssl_offload: yes
elb_ssl_certificate_name: application.foo-production
- Chris Olstrom | e-mail | Twitter
- Steven Harradine
- Justin Scott
- Aaron Pederson
- Ben Visser
- Kinnan Kwok
- Royston Tong