1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
|
#!/usr/bin/python
#
# Copyright (c) 2018 Yunge Zhu, <yungez@microsoft.com>
#
# GNU General Public License v3.0+ (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt)
from __future__ import absolute_import, division, print_function
__metaclass__ = type
ANSIBLE_METADATA = {'metadata_version': '1.1',
'status': ['preview'],
'supported_by': 'community'}
DOCUMENTATION = '''
---
module: azure_rm_applicationsecuritygroup
version_added: "2.8"
short_description: Manage Azure Application Security Group
description:
- Create, update and delete instance of Azure Application Security Group.
options:
resource_group:
description:
- The name of the resource group.
required: True
name:
description:
- The name of the application security group.
required: True
location:
description:
- Resource location. If not set, location from the resource group will be used as default.
state:
description:
- Assert the state of the Application Security Group.
- Use C(present) to create or update an Application Security Group and C(absent) to delete it.
default: present
choices:
- absent
- present
extends_documentation_fragment:
- azure
- azure_tags
author:
- Yunge Zhu (@yungezz)
'''
EXAMPLES = '''
- name: Create application security group
azure_rm_applicationsecuritygroup:
resource_group: myResourceGroup
name: mySecurityGroup
location: eastus
tags:
foo: bar
'''
RETURN = '''
id:
description:
- Resource id of the application security group.
returned: always
type: str
sample: "/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourceGroups/myResourceGroup/providers/Microsoft.Network/applicationSecurityGroups/
mySecurityGroup"
'''
from ansible.module_utils.azure_rm_common import AzureRMModuleBase
try:
from msrestazure.azure_exceptions import CloudError
from msrest.polling import LROPoller
from msrestazure.azure_operation import AzureOperationPoller
except ImportError:
# This is handled in azure_rm_common
pass
class Actions:
NoAction, CreateOrUpdate, Delete = range(3)
class AzureRMApplicationSecurityGroup(AzureRMModuleBase):
"""Configuration class for an Azure RM Application Security Group resource"""
def __init__(self):
self.module_arg_spec = dict(
resource_group=dict(
type='str',
required=True
),
name=dict(
type='str',
required=True
),
location=dict(
type='str'
),
state=dict(
type='str',
default='present',
choices=['present', 'absent']
)
)
self.resource_group = None
self.location = None
self.name = None
self.tags = None
self.state = None
self.results = dict(changed=False)
self.to_do = Actions.NoAction
super(AzureRMApplicationSecurityGroup, self).__init__(derived_arg_spec=self.module_arg_spec,
supports_check_mode=True,
supports_tags=True)
def exec_module(self, **kwargs):
"""Main module execution method"""
for key in list(self.module_arg_spec.keys()) + ['tags']:
if hasattr(self, key):
setattr(self, key, kwargs[key])
resource_group = self.get_resource_group(self.resource_group)
if not self.location:
self.location = resource_group.location
old_response = self.get_applicationsecuritygroup()
if not old_response:
self.log("Application Security Group instance doesn't exist")
if self.state == 'present':
self.to_do = Actions.CreateOrUpdate
else:
self.log("Old instance didn't exist")
else:
self.log("Application Security Group instance already exists")
if self.state == 'present':
if self.check_update(old_response):
self.to_do = Actions.CreateOrUpdate
update_tags, self.tags = self.update_tags(old_response.get('tags', None))
if update_tags:
self.to_do = Actions.CreateOrUpdate
elif self.state == 'absent':
self.to_do = Actions.Delete
if self.to_do == Actions.CreateOrUpdate:
self.log("Need to Create / Update the Application Security Group instance")
self.results['changed'] = True
if self.check_mode:
return self.results
response = self.create_update_applicationsecuritygroup()
self.results['id'] = response['id']
elif self.to_do == Actions.Delete:
self.log("Delete Application Security Group instance")
self.results['changed'] = True
if self.check_mode:
return self.results
self.delete_applicationsecuritygroup()
return self.results
def check_update(self, existing_asg):
if self.location and self.location.lower() != existing_asg['location'].lower():
self.module.warn("location cannot be updated. Existing {0}, input {1}".format(existing_asg['location'], self.location))
return False
def create_update_applicationsecuritygroup(self):
'''
Create or update Application Security Group.
:return: deserialized Application Security Group instance state dictionary
'''
self.log("Creating / Updating the Application Security Group instance {0}".format(self.name))
param = dict(name=self.name,
tags=self.tags,
location=self.location)
try:
response = self.network_client.application_security_groups.create_or_update(resource_group_name=self.resource_group,
application_security_group_name=self.name,
parameters=param)
if isinstance(response, LROPoller) or isinstance(response, AzureOperationPoller):
response = self.get_poller_result(response)
except CloudError as exc:
self.log('Error creating/updating Application Security Group instance.')
self.fail("Error creating/updating Application Security Group instance: {0}".format(str(exc)))
return response.as_dict()
def delete_applicationsecuritygroup(self):
'''
Deletes specified Application Security Group instance.
:return: True
'''
self.log("Deleting the Application Security Group instance {0}".format(self.name))
try:
response = self.network_client.application_security_groups.delete(resource_group_name=self.resource_group,
application_security_group_name=self.name)
except CloudError as e:
self.log('Error deleting the Application Security Group instance.')
self.fail("Error deleting the Application Security Group instance: {0}".format(str(e)))
return True
def get_applicationsecuritygroup(self):
'''
Gets the properties of the specified Application Security Group.
:return: deserialized Application Security Group instance state dictionary
'''
self.log("Checking if the Application Security Group instance {0} is present".format(self.name))
found = False
try:
response = self.network_client.application_security_groups.get(resource_group_name=self.resource_group,
application_security_group_name=self.name)
self.log("Response : {0}".format(response))
self.log("Application Security Group instance : {0} found".format(response.name))
return response.as_dict()
except CloudError as e:
self.log('Did not find the Application Security Group instance.')
return False
def main():
"""Main execution"""
AzureRMApplicationSecurityGroup()
if __name__ == '__main__':
main()
|
