From 79e3fe4704d34c5c815e7b573a782df0252f7125 Mon Sep 17 00:00:00 2001 From: The Magician Date: Tue, 17 Mar 2020 15:01:30 -0700 Subject: [PATCH] Ansible - External VPN Gateways (#3260) (#173) * adding the things * rebase * tf example * removing google provider * pr comments Signed-off-by: Modular Magician --- README.md | 1 + .../gcp_compute_external_vpn_gateway.py | 426 ++++++++++++++++++ .../gcp_compute_external_vpn_gateway_info.py | 228 ++++++++++ .../gcp_compute_external_vpn_gateway/aliases | 2 + .../defaults/main.yml | 2 + .../meta/main.yml | 0 .../tasks/autogen.yml | 127 ++++++ .../tasks/main.yml | 2 + 8 files changed, 788 insertions(+) create mode 100644 plugins/modules/gcp_compute_external_vpn_gateway.py create mode 100644 plugins/modules/gcp_compute_external_vpn_gateway_info.py create mode 100644 tests/integration/targets/gcp_compute_external_vpn_gateway/aliases create mode 100644 tests/integration/targets/gcp_compute_external_vpn_gateway/defaults/main.yml create mode 100644 tests/integration/targets/gcp_compute_external_vpn_gateway/meta/main.yml create mode 100644 tests/integration/targets/gcp_compute_external_vpn_gateway/tasks/autogen.yml create mode 100644 tests/integration/targets/gcp_compute_external_vpn_gateway/tasks/main.yml diff --git a/README.md b/README.md index 8fad372..9610a29 100644 --- a/README.md +++ b/README.md @@ -55,6 +55,7 @@ ansible-galaxy collection install google.cloud * Compute Engine TargetSslProxy (gcp_compute_target_ssl_proxy, gcp_compute_target_ssl_proxy_facts) * Compute Engine TargetTcpProxy (gcp_compute_target_tcp_proxy, gcp_compute_target_tcp_proxy_facts) * Compute Engine TargetVpnGateway (gcp_compute_target_vpn_gateway, gcp_compute_target_vpn_gateway_facts) + * Compute Engine ExternalVpnGateway (gcp_compute_external_vpn_gateway, gcp_compute_external_vpn_gateway_facts) * Compute Engine UrlMap (gcp_compute_url_map, gcp_compute_url_map_facts) * Compute Engine VpnTunnel (gcp_compute_vpn_tunnel, gcp_compute_vpn_tunnel_facts) * Google Kubernetes Engine Cluster (gcp_container_cluster, gcp_container_cluster_facts) diff --git a/plugins/modules/gcp_compute_external_vpn_gateway.py b/plugins/modules/gcp_compute_external_vpn_gateway.py new file mode 100644 index 0000000..27a1d35 --- /dev/null +++ b/plugins/modules/gcp_compute_external_vpn_gateway.py @@ -0,0 +1,426 @@ +#!/usr/bin/python +# -*- coding: utf-8 -*- +# +# Copyright (C) 2017 Google +# GNU General Public License v3.0+ (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt) +# ---------------------------------------------------------------------------- +# +# *** AUTO GENERATED CODE *** AUTO GENERATED CODE *** +# +# ---------------------------------------------------------------------------- +# +# This file is automatically generated by Magic Modules and manual +# changes will be clobbered when the file is regenerated. +# +# Please read more about how to change this file at +# https://www.github.com/GoogleCloudPlatform/magic-modules +# +# ---------------------------------------------------------------------------- + +from __future__ import absolute_import, division, print_function + +__metaclass__ = type + +################################################################################ +# Documentation +################################################################################ + +ANSIBLE_METADATA = {'metadata_version': '1.1', 'status': ["preview"], 'supported_by': 'community'} + +DOCUMENTATION = ''' +--- +module: gcp_compute_external_vpn_gateway +description: +- Represents a VPN gateway managed outside of GCP. +short_description: Creates a GCP ExternalVpnGateway +version_added: '2.10' +author: Google Inc. (@googlecloudplatform) +requirements: +- python >= 2.6 +- requests >= 2.18.4 +- google-auth >= 1.3.0 +options: + state: + description: + - Whether the given object should exist in GCP + choices: + - present + - absent + default: present + type: str + description: + description: + - An optional description of this resource. + required: false + type: str + name: + description: + - Name of the resource. Provided by the client when the resource is created. The + name must be 1-63 characters long, and comply with RFC1035. Specifically, the + name must be 1-63 characters long and match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` + which means the first character must be a lowercase letter, and all following + characters must be a dash, lowercase letter, or digit, except the last character, + which cannot be a dash. + required: true + type: str + redundancy_type: + description: + - Indicates the redundancy type of this external VPN gateway . + - 'Some valid choices include: "FOUR_IPS_REDUNDANCY", "SINGLE_IP_INTERNALLY_REDUNDANT", + "TWO_IPS_REDUNDANCY"' + required: false + type: str + interfaces: + description: + - A list of interfaces on this external VPN gateway. + elements: dict + required: false + type: list + suboptions: + id: + description: + - The numberic ID for this interface. Allowed values are based on the redundancy + type of this external VPN gateway * `0 - SINGLE_IP_INTERNALLY_REDUNDANT` + * `0, 1 - TWO_IPS_REDUNDANCY` * `0, 1, 2, 3 - FOUR_IPS_REDUNDANCY` . + required: false + type: int + ip_address: + description: + - IP address of the interface in the external VPN gateway. + - Only IPv4 is supported. This IP address can be either from your on-premise + gateway or another Cloud provider’s VPN gateway, it cannot be an IP address + from Google Compute Engine. + required: false + type: str + project: + description: + - The Google Cloud Platform project to use. + type: str + auth_kind: + description: + - The type of credential used. + type: str + required: true + choices: + - application + - machineaccount + - serviceaccount + service_account_contents: + description: + - The contents of a Service Account JSON file, either in a dictionary or as a + JSON string that represents it. + type: jsonarg + service_account_file: + description: + - The path of a Service Account JSON file if serviceaccount is selected as type. + type: path + service_account_email: + description: + - An optional service account email address if machineaccount is selected and + the user does not wish to use the default email. + type: str + scopes: + description: + - Array of scopes to be used + type: list + env_type: + description: + - Specifies which Ansible environment you're running this module within. + - This should not be set unless you know what you're doing. + - This only alters the User Agent string for any API requests. + type: str +notes: +- 'API Reference: U(https://cloud.google.com/compute/docs/reference/rest/beta/externalVpnGateways)' +- for authentication, you can set service_account_file using the C(gcp_service_account_file) + env variable. +- for authentication, you can set service_account_contents using the C(GCP_SERVICE_ACCOUNT_CONTENTS) + env variable. +- For authentication, you can set service_account_email using the C(GCP_SERVICE_ACCOUNT_EMAIL) + env variable. +- For authentication, you can set auth_kind using the C(GCP_AUTH_KIND) env variable. +- For authentication, you can set scopes using the C(GCP_SCOPES) env variable. +- Environment variables values will only be used if the playbook values are not set. +- The I(service_account_email) and I(service_account_file) options are mutually exclusive. +''' + +EXAMPLES = ''' +- name: create a external vpn gateway + google.cloud.gcp_compute_external_vpn_gateway: + name: test_object + redundancy_type: SINGLE_IP_INTERNALLY_REDUNDANT + descrpition: An externalyl managed VPN gateway + interfaces: + - id: 0 + ip_address: 8.8.8.8 + project: test_project + auth_kind: serviceaccount + service_account_file: "/tmp/auth.pem" + state: present +''' + +RETURN = ''' +description: + description: + - An optional description of this resource. + returned: success + type: str +name: + description: + - Name of the resource. Provided by the client when the resource is created. The + name must be 1-63 characters long, and comply with RFC1035. Specifically, the + name must be 1-63 characters long and match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` + which means the first character must be a lowercase letter, and all following + characters must be a dash, lowercase letter, or digit, except the last character, + which cannot be a dash. + returned: success + type: str +redundancyType: + description: + - Indicates the redundancy type of this external VPN gateway . + returned: success + type: str +interfaces: + description: + - A list of interfaces on this external VPN gateway. + returned: success + type: complex + contains: + id: + description: + - The numberic ID for this interface. Allowed values are based on the redundancy + type of this external VPN gateway * `0 - SINGLE_IP_INTERNALLY_REDUNDANT` * + `0, 1 - TWO_IPS_REDUNDANCY` * `0, 1, 2, 3 - FOUR_IPS_REDUNDANCY` . + returned: success + type: int + ipAddress: + description: + - IP address of the interface in the external VPN gateway. + - Only IPv4 is supported. This IP address can be either from your on-premise + gateway or another Cloud provider’s VPN gateway, it cannot be an IP address + from Google Compute Engine. + returned: success + type: str +''' + +################################################################################ +# Imports +################################################################################ + +from ansible_collections.google.cloud.plugins.module_utils.gcp_utils import ( + navigate_hash, + GcpSession, + GcpModule, + GcpRequest, + remove_nones_from_dict, + replace_resource_dict, +) +import json +import time + +################################################################################ +# Main +################################################################################ + + +def main(): + """Main function""" + + module = GcpModule( + argument_spec=dict( + state=dict(default='present', choices=['present', 'absent'], type='str'), + description=dict(type='str'), + name=dict(required=True, type='str'), + redundancy_type=dict(type='str'), + interfaces=dict(type='list', elements='dict', options=dict(id=dict(type='int'), ip_address=dict(type='str'))), + ) + ) + + if not module.params['scopes']: + module.params['scopes'] = ['https://www.googleapis.com/auth/compute'] + + state = module.params['state'] + kind = 'compute#externalVpnGateway' + + fetch = fetch_resource(module, self_link(module), kind) + changed = False + + if fetch: + if state == 'present': + if is_different(module, fetch): + update(module, self_link(module), kind) + fetch = fetch_resource(module, self_link(module), kind) + changed = True + else: + delete(module, self_link(module), kind) + fetch = {} + changed = True + else: + if state == 'present': + fetch = create(module, collection(module), kind) + changed = True + else: + fetch = {} + + fetch.update({'changed': changed}) + + module.exit_json(**fetch) + + +def create(module, link, kind): + auth = GcpSession(module, 'compute') + return wait_for_operation(module, auth.post(link, resource_to_request(module))) + + +def update(module, link, kind): + delete(module, self_link(module), kind) + create(module, collection(module), kind) + + +def delete(module, link, kind): + auth = GcpSession(module, 'compute') + return wait_for_operation(module, auth.delete(link)) + + +def resource_to_request(module): + request = { + u'kind': 'compute#externalVpnGateway', + u'description': module.params.get('description'), + u'name': module.params.get('name'), + u'redundancyType': module.params.get('redundancy_type'), + u'interfaces': ExternalVpnGatewayInterfacesArray(module.params.get('interfaces', []), module).to_request(), + } + return_vals = {} + for k, v in request.items(): + if v or v is False: + return_vals[k] = v + + return return_vals + + +def fetch_resource(module, link, kind, allow_not_found=True): + auth = GcpSession(module, 'compute') + return return_if_object(module, auth.get(link), kind, allow_not_found) + + +def self_link(module): + return "https://www.googleapis.com/compute/v1/projects/{project}/global/externalVpnGateways/{name}".format(**module.params) + + +def collection(module): + return "https://www.googleapis.com/compute/v1/projects/{project}/global/externalVpnGateways".format(**module.params) + + +def return_if_object(module, response, kind, allow_not_found=False): + # If not found, return nothing. + if allow_not_found and response.status_code == 404: + return None + + # If no content, return nothing. + if response.status_code == 204: + return None + + try: + module.raise_for_status(response) + result = response.json() + except getattr(json.decoder, 'JSONDecodeError', ValueError): + module.fail_json(msg="Invalid JSON response with error: %s" % response.text) + + if navigate_hash(result, ['error', 'errors']): + module.fail_json(msg=navigate_hash(result, ['error', 'errors'])) + + return result + + +def is_different(module, response): + request = resource_to_request(module) + response = response_to_hash(module, response) + + # Remove all output-only from response. + response_vals = {} + for k, v in response.items(): + if k in request: + response_vals[k] = v + + request_vals = {} + for k, v in request.items(): + if k in response: + request_vals[k] = v + + return GcpRequest(request_vals) != GcpRequest(response_vals) + + +# Remove unnecessary properties from the response. +# This is for doing comparisons with Ansible's current parameters. +def response_to_hash(module, response): + return { + u'description': response.get(u'description'), + u'name': response.get(u'name'), + u'redundancyType': response.get(u'redundancyType'), + u'interfaces': ExternalVpnGatewayInterfacesArray(response.get(u'interfaces', []), module).from_response(), + } + + +def async_op_url(module, extra_data=None): + if extra_data is None: + extra_data = {} + url = "https://www.googleapis.com/compute/v1/projects/{project}/global/operations/{op_id}" + combined = extra_data.copy() + combined.update(module.params) + return url.format(**combined) + + +def wait_for_operation(module, response): + op_result = return_if_object(module, response, 'compute#operation') + if op_result is None: + return {} + status = navigate_hash(op_result, ['status']) + wait_done = wait_for_completion(status, op_result, module) + return fetch_resource(module, navigate_hash(wait_done, ['targetLink']), 'compute#externalVpnGateway') + + +def wait_for_completion(status, op_result, module): + op_id = navigate_hash(op_result, ['name']) + op_uri = async_op_url(module, {'op_id': op_id}) + while status != 'DONE': + raise_if_errors(op_result, ['error', 'errors'], module) + time.sleep(1.0) + op_result = fetch_resource(module, op_uri, 'compute#operation', False) + status = navigate_hash(op_result, ['status']) + return op_result + + +def raise_if_errors(response, err_path, module): + errors = navigate_hash(response, err_path) + if errors is not None: + module.fail_json(msg=errors) + + +class ExternalVpnGatewayInterfacesArray(object): + def __init__(self, request, module): + self.module = module + if request: + self.request = request + else: + self.request = [] + + def to_request(self): + items = [] + for item in self.request: + items.append(self._request_for_item(item)) + return items + + def from_response(self): + items = [] + for item in self.request: + items.append(self._response_from_item(item)) + return items + + def _request_for_item(self, item): + return remove_nones_from_dict({u'id': item.get('id'), u'ipAddress': item.get('ip_address')}) + + def _response_from_item(self, item): + return remove_nones_from_dict({u'id': item.get(u'id'), u'ipAddress': item.get(u'ipAddress')}) + + +if __name__ == '__main__': + main() diff --git a/plugins/modules/gcp_compute_external_vpn_gateway_info.py b/plugins/modules/gcp_compute_external_vpn_gateway_info.py new file mode 100644 index 0000000..0efe9e7 --- /dev/null +++ b/plugins/modules/gcp_compute_external_vpn_gateway_info.py @@ -0,0 +1,228 @@ +#!/usr/bin/python +# -*- coding: utf-8 -*- +# +# Copyright (C) 2017 Google +# GNU General Public License v3.0+ (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt) +# ---------------------------------------------------------------------------- +# +# *** AUTO GENERATED CODE *** AUTO GENERATED CODE *** +# +# ---------------------------------------------------------------------------- +# +# This file is automatically generated by Magic Modules and manual +# changes will be clobbered when the file is regenerated. +# +# Please read more about how to change this file at +# https://www.github.com/GoogleCloudPlatform/magic-modules +# +# ---------------------------------------------------------------------------- + +from __future__ import absolute_import, division, print_function + +__metaclass__ = type + +################################################################################ +# Documentation +################################################################################ + +ANSIBLE_METADATA = {'metadata_version': '1.1', 'status': ["preview"], 'supported_by': 'community'} + +DOCUMENTATION = ''' +--- +module: gcp_compute_external_vpn_gateway_info +description: +- Gather info for GCP ExternalVpnGateway +short_description: Gather info for GCP ExternalVpnGateway +version_added: '2.10' +author: Google Inc. (@googlecloudplatform) +requirements: +- python >= 2.6 +- requests >= 2.18.4 +- google-auth >= 1.3.0 +options: + filters: + description: + - A list of filter value pairs. Available filters are listed here U(https://cloud.google.com/sdk/gcloud/reference/topic/filters). + - Each additional filter in the list will act be added as an AND condition (filter1 + and filter2) . + type: list + project: + description: + - The Google Cloud Platform project to use. + type: str + auth_kind: + description: + - The type of credential used. + type: str + required: true + choices: + - application + - machineaccount + - serviceaccount + service_account_contents: + description: + - The contents of a Service Account JSON file, either in a dictionary or as a + JSON string that represents it. + type: jsonarg + service_account_file: + description: + - The path of a Service Account JSON file if serviceaccount is selected as type. + type: path + service_account_email: + description: + - An optional service account email address if machineaccount is selected and + the user does not wish to use the default email. + type: str + scopes: + description: + - Array of scopes to be used + type: list + env_type: + description: + - Specifies which Ansible environment you're running this module within. + - This should not be set unless you know what you're doing. + - This only alters the User Agent string for any API requests. + type: str +notes: +- for authentication, you can set service_account_file using the C(gcp_service_account_file) + env variable. +- for authentication, you can set service_account_contents using the C(GCP_SERVICE_ACCOUNT_CONTENTS) + env variable. +- For authentication, you can set service_account_email using the C(GCP_SERVICE_ACCOUNT_EMAIL) + env variable. +- For authentication, you can set auth_kind using the C(GCP_AUTH_KIND) env variable. +- For authentication, you can set scopes using the C(GCP_SCOPES) env variable. +- Environment variables values will only be used if the playbook values are not set. +- The I(service_account_email) and I(service_account_file) options are mutually exclusive. +''' + +EXAMPLES = ''' +- name: get info on an external vpn gateway + gcp_compute_external_vpn_gateway_info: + filters: + - name = test_object + project: test_project + auth_kind: serviceaccount + service_account_file: "/tmp/auth.pem" +''' + +RETURN = ''' +resources: + description: List of resources + returned: always + type: complex + contains: + description: + description: + - An optional description of this resource. + returned: success + type: str + name: + description: + - Name of the resource. Provided by the client when the resource is created. + The name must be 1-63 characters long, and comply with RFC1035. Specifically, + the name must be 1-63 characters long and match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?` + which means the first character must be a lowercase letter, and all following + characters must be a dash, lowercase letter, or digit, except the last character, + which cannot be a dash. + returned: success + type: str + redundancyType: + description: + - Indicates the redundancy type of this external VPN gateway . + returned: success + type: str + interfaces: + description: + - A list of interfaces on this external VPN gateway. + returned: success + type: complex + contains: + id: + description: + - The numberic ID for this interface. Allowed values are based on the redundancy + type of this external VPN gateway * `0 - SINGLE_IP_INTERNALLY_REDUNDANT` + * `0, 1 - TWO_IPS_REDUNDANCY` * `0, 1, 2, 3 - FOUR_IPS_REDUNDANCY` . + returned: success + type: int + ipAddress: + description: + - IP address of the interface in the external VPN gateway. + - Only IPv4 is supported. This IP address can be either from your on-premise + gateway or another Cloud provider’s VPN gateway, it cannot be an IP address + from Google Compute Engine. + returned: success + type: str +''' + +################################################################################ +# Imports +################################################################################ +from ansible.module_utils.gcp_utils import navigate_hash, GcpSession, GcpModule, GcpRequest +import json + +################################################################################ +# Main +################################################################################ + + +def main(): + module = GcpModule(argument_spec=dict(filters=dict(type='list', elements='str'))) + + if not module.params['scopes']: + module.params['scopes'] = ['https://www.googleapis.com/auth/compute'] + + return_value = {'resources': fetch_list(module, collection(module), query_options(module.params['filters']))} + module.exit_json(**return_value) + + +def collection(module): + return "https://www.googleapis.com/compute/v1/projects/{project}/global/externalVpnGateways".format(**module.params) + + +def fetch_list(module, link, query): + auth = GcpSession(module, 'compute') + return auth.list(link, return_if_object, array_name='items', params={'filter': query}) + + +def query_options(filters): + if not filters: + return '' + + if len(filters) == 1: + return filters[0] + else: + queries = [] + for f in filters: + # For multiple queries, all queries should have () + if f[0] != '(' and f[-1] != ')': + queries.append("(%s)" % ''.join(f)) + else: + queries.append(f) + + return ' '.join(queries) + + +def return_if_object(module, response): + # If not found, return nothing. + if response.status_code == 404: + return None + + # If no content, return nothing. + if response.status_code == 204: + return None + + try: + module.raise_for_status(response) + result = response.json() + except getattr(json.decoder, 'JSONDecodeError', ValueError) as inst: + module.fail_json(msg="Invalid JSON response with error: %s" % inst) + + if navigate_hash(result, ['error', 'errors']): + module.fail_json(msg=navigate_hash(result, ['error', 'errors'])) + + return result + + +if __name__ == "__main__": + main() diff --git a/tests/integration/targets/gcp_compute_external_vpn_gateway/aliases b/tests/integration/targets/gcp_compute_external_vpn_gateway/aliases new file mode 100644 index 0000000..9812f01 --- /dev/null +++ b/tests/integration/targets/gcp_compute_external_vpn_gateway/aliases @@ -0,0 +1,2 @@ +cloud/gcp +unsupported diff --git a/tests/integration/targets/gcp_compute_external_vpn_gateway/defaults/main.yml b/tests/integration/targets/gcp_compute_external_vpn_gateway/defaults/main.yml new file mode 100644 index 0000000..ba66644 --- /dev/null +++ b/tests/integration/targets/gcp_compute_external_vpn_gateway/defaults/main.yml @@ -0,0 +1,2 @@ +--- +resource_name: "{{ resource_prefix }}" diff --git a/tests/integration/targets/gcp_compute_external_vpn_gateway/meta/main.yml b/tests/integration/targets/gcp_compute_external_vpn_gateway/meta/main.yml new file mode 100644 index 0000000..e69de29 diff --git a/tests/integration/targets/gcp_compute_external_vpn_gateway/tasks/autogen.yml b/tests/integration/targets/gcp_compute_external_vpn_gateway/tasks/autogen.yml new file mode 100644 index 0000000..094b45b --- /dev/null +++ b/tests/integration/targets/gcp_compute_external_vpn_gateway/tasks/autogen.yml @@ -0,0 +1,127 @@ +--- +# ---------------------------------------------------------------------------- +# +# *** AUTO GENERATED CODE *** AUTO GENERATED CODE *** +# +# ---------------------------------------------------------------------------- +# +# This file is automatically generated by Magic Modules and manual +# changes will be clobbered when the file is regenerated. +# +# Please read more about how to change this file at +# https://www.github.com/GoogleCloudPlatform/magic-modules +# +# ---------------------------------------------------------------------------- +# Pre-test setup +- name: delete a external vpn gateway + google.cloud.gcp_compute_external_vpn_gateway: + name: "{{ resource_name }}" + redundancy_type: SINGLE_IP_INTERNALLY_REDUNDANT + descrpition: An externalyl managed VPN gateway + interfaces: + - id: 0 + ip_address: 8.8.8.8 + project: "{{ gcp_project }}" + auth_kind: "{{ gcp_cred_kind }}" + service_account_file: "{{ gcp_cred_file }}" + state: absent +#---------------------------------------------------------- +- name: create a external vpn gateway + google.cloud.gcp_compute_external_vpn_gateway: + name: "{{ resource_name }}" + redundancy_type: SINGLE_IP_INTERNALLY_REDUNDANT + descrpition: An externalyl managed VPN gateway + interfaces: + - id: 0 + ip_address: 8.8.8.8 + project: "{{ gcp_project }}" + auth_kind: "{{ gcp_cred_kind }}" + service_account_file: "{{ gcp_cred_file }}" + state: present + register: result +- name: assert changed is true + assert: + that: + - result.changed == true +- name: verify that external_vpn_gateway was created + google.cloud.gcp_compute_external_vpn_gateway_info: + filters: + - name = {{ resource_name }} + project: "{{ gcp_project }}" + auth_kind: "{{ gcp_cred_kind }}" + service_account_file: "{{ gcp_cred_file }}" + scopes: + - https://www.googleapis.com/auth/compute + register: results +- name: verify that command succeeded + assert: + that: + - results['resources'] | length == 1 +# ---------------------------------------------------------------------------- +- name: create a external vpn gateway that already exists + google.cloud.gcp_compute_external_vpn_gateway: + name: "{{ resource_name }}" + redundancy_type: SINGLE_IP_INTERNALLY_REDUNDANT + descrpition: An externalyl managed VPN gateway + interfaces: + - id: 0 + ip_address: 8.8.8.8 + project: "{{ gcp_project }}" + auth_kind: "{{ gcp_cred_kind }}" + service_account_file: "{{ gcp_cred_file }}" + state: present + register: result +- name: assert changed is false + assert: + that: + - result.changed == false +#---------------------------------------------------------- +- name: delete a external vpn gateway + google.cloud.gcp_compute_external_vpn_gateway: + name: "{{ resource_name }}" + redundancy_type: SINGLE_IP_INTERNALLY_REDUNDANT + descrpition: An externalyl managed VPN gateway + interfaces: + - id: 0 + ip_address: 8.8.8.8 + project: "{{ gcp_project }}" + auth_kind: "{{ gcp_cred_kind }}" + service_account_file: "{{ gcp_cred_file }}" + state: absent + register: result +- name: assert changed is true + assert: + that: + - result.changed == true +- name: verify that external_vpn_gateway was deleted + google.cloud.gcp_compute_external_vpn_gateway_info: + filters: + - name = {{ resource_name }} + project: "{{ gcp_project }}" + auth_kind: "{{ gcp_cred_kind }}" + service_account_file: "{{ gcp_cred_file }}" + scopes: + - https://www.googleapis.com/auth/compute + register: results +- name: verify that command succeeded + assert: + that: + - results['resources'] | length == 0 +# ---------------------------------------------------------------------------- +- name: delete a external vpn gateway that does not exist + google.cloud.gcp_compute_external_vpn_gateway: + name: "{{ resource_name }}" + redundancy_type: SINGLE_IP_INTERNALLY_REDUNDANT + descrpition: An externalyl managed VPN gateway + interfaces: + - id: 0 + ip_address: 8.8.8.8 + project: "{{ gcp_project }}" + auth_kind: "{{ gcp_cred_kind }}" + service_account_file: "{{ gcp_cred_file }}" + state: absent + register: result +- name: assert changed is false + assert: + that: + - result.changed == false diff --git a/tests/integration/targets/gcp_compute_external_vpn_gateway/tasks/main.yml b/tests/integration/targets/gcp_compute_external_vpn_gateway/tasks/main.yml new file mode 100644 index 0000000..45d6e49 --- /dev/null +++ b/tests/integration/targets/gcp_compute_external_vpn_gateway/tasks/main.yml @@ -0,0 +1,2 @@ +--- +- include_tasks: autogen.yml