- debug: var="{{ lookup('amazon.aws.aws_secret', 'redis/access') }}"

- debug: var="{{ lookup('amazon.aws.aws_secret', 'redis/access', profile='xxx', region='eu-central-1') }}"

- name: GLOBALDB|CREATE - Create primary
  amazon.aws.rds_cluster:
    cluster_id: "test-cluster-primary"
    engine: "aurora-mysql"
    engine_mode: "global"
    engine_version: "8.0.mysql_aurora.3.04.0"
    vpc_security_group_ids: "sg-12345678976"
    db_subnet_group_name: "db-subnet"
    global_cluster_identifier: "global-test-ansible"
    db_cluster_parameter_group_name: "param-cluster"
    apply_immediately: true
    master_username: test_user
    master_user_password: "PASSWORD.1234!"

- name: GLOBALDB|CREATE - Add new member to db
  amazon.aws.rds_cluster:
    cluster_id: "test-cluster"
    engine: "aurora-mysql"
    engine_mode: "global"
    engine_version: "8.0.mysql_aurora.3.04.0"
    vpc_security_group_ids: "sg-12345678998"
    db_subnet_group_name: "test"
    replication_source_identifier: "arn:aws:rds:REGION:account:cluster:trst-cluster-primary"
    apply_immediately: true
    global_cluster_identifier: "global-test-ansible"

all:
  vars:
    ansible_connection: aws_ssm
    ansible_aws_ssm_region: us-east-1
    ansible_aws_ssm_bucket_name: <bucket-name>
    ansible_remote_tmp: /tmp/.ansible
    ansible_python_interpreter: python3

plugin: amazon.aws.aws_ec2
regions:
  - us-east-1

keyed_groups:
  - key: tags.Application
    separator: ''
  - key: tags.Tenant
    separator: ''

hostnames:
  - name: 'tag:Name'
compose:
  ansible_host: instance_id

- name: Comment out agent address.
    replace:    
      path: /etc/snmp/snmpd.conf
      regexp: '^(.*agentaddress  127.0.0.1,[::1].*)'
      replace: '#agentaddress  127.0.0.1,[::1]'

"route53_zone_info | json_query('results[1].ResourceRecordSets[0].ResourceRecords[].Value') | join(',')": "ns-1111.11111.,ns-111111.co.uk.,1111111.awsdns-48.net.,ns11111.awsdns-51.com."
}

- name: Create Route53 record
  route53:
    state: present
    zone: "{{ item.domain }}{{ tld }}"
    record: "{{ aws_account_name }}.{{ item.domain }}{{ tld }}"
    overwrite: True
    type: NS
    ttl: "172800"
    aws_access_key: "{{ assumed_role.sts_creds.access_key }}"
    aws_secret_key: "{{ assumed_role.sts_creds.secret_key }}"
    security_token: "{{ assumed_role.sts_creds.session_token }}"
    value: "{{ item.resource_records }}"
  with_items:
    - { resource_records: "route53_zone_info | json_query('results[0].ResourceRecordSets[0].ResourceRecords[].Value') | join(',')", domain: "{{ domains[0] }}" }
    - { resource_records: "route53_zone_info | json_query('results[1].ResourceRecordSets[0].ResourceRecords[].Value') | join(',')", domain: "{{ domains[1] }}" }

failed: [localhost] (item={'resource_records': "route53_zone_info | json_query('results[0].ResourceRecordSets[0].ResourceRecords[].Value') | join(',')", 'domain': 'lllapps'}) => {"ansible_loop_var": "item", "changed": false, "item": {"domain": "lllapps", "resource_records": "route53_zone_info | json_query('results[0].ResourceRecordSets[0].ResourceRecords[].Value') | join(',')"}, "msg": "[Invalid Resource Record: FATAL problem: RRDATANotSingleField (Value contains spaces) encountered with 'route53_zone_info | json_query('results[0].ResourceRecordSets[0].ResourceRecords[].Value') | join('']"}

  tasks:
    - name: obtain iam role info
      iam_role_info:
        name: dns-management
      register: role_info

    - name: obtain current trust relationship policy 
      set_fact:
        trust_relationship: "{{ role_info | json_query('iam_roles[0].assume_role_policy_document.statement[0]') }}"

    - name: add account id to trust relationship
      json_modify:
        data: "{{ trust_relationship }}"
        pointer: "/principal/aws/0"
        action: extend
        extend:
          - "arn:aws:iam::001122334455:root"
          - "arn:aws:iam::001122334455:root"
      register: result

    - debug:
        var: result

    "trust_relationship": {
        "action": "sts:AssumeRole",
        "effect": "Allow",
        "principal": {
            "aws": [
                "arn:aws:iam::123456789012:root",
                "arn:aws:iam::098765432123:root"
            ]
        }
    }
}

An exception occurred during task execution. To see the full traceback, use -vvv. The error was: AttributeError: 'str' object has no attribute 'extend'
fatal: [localhost]: FAILED!

- name: installing bench 
  hosts: localhost
  become: true
  gather_facts: False
  vars:
    - bench_command: bench init frappe-bench --skip-redis-config-generation --apps_path apps.json
  
  vars_prompt:
    - name: user_password
      prompt: "Set frappe user password?"
      confirm: yes
    - name: efs_id
      prompt: "Please enter efs-id-"


  tasks:
  
  - name: Create a 2048-bit SSH key for user jsmith in ~jsmith/.ssh/id_rsa
    user:
      name: frappe
      password: "{{ user_password }}"
      generate_ssh_key: yes
      ssh_key_bits: 2048
      ssh_key_file: .ssh/id_rsa
      state: present
    become: true

  - name: Ansible check efs-utils exists example.
    stat:
      path: /home/ubuntu/efs-utils
    register: efs_detail
  - debug:
      msg: "efs-utils is installed"
    when: efs_detail.stat.exists

  - name: install nfs-utils
    become: true
    git:
      repo: <https://github.com/aws/efs-utils>
      dest: /home/ubuntu/efs-utils
      clone: yes
      update: no
    when: not efs_detail.stat.exists


  - name: installing efs
    shell: "{{ item }}"
    args:
      chdir: /home/ubuntu/efs-utils
    with_items:
      - "./build-deb.sh"
      - "sudo apt-get -y install ./build/amazon-efs-utils-1.25-3.deb"
    when: not efs_detail.stat.exists

  - name: Install a list of packages
    apt:
      pkg:
      - 'nginx'
      - 'supervisor'
      - 'python3-pip'
      state: present
    become: true
    
  - name: Ansible check mount exists example.
    stat:
      path: /home/frappe/mount/
    register: mount_detail
    
  - name: mount efs to mount directory
    command: "{{ item }}"
    args:
      chdir: "/home/frappe"
    with_items:
      - "mkdir mount"
      - "mount -t efs {{ efs_id }}:/ /home/frappe/mount/"
      - "chown frappe:frappe  -R /home/frappe/mount"
    become: true
    when: not mount_detail.stat.exists

- name: install incomplete
  hosts: localhost
  become_user: frappe
  gather_facts: False

  tasks:
  - name: install nvm and v10
    shell: >
      curl -o- <https://raw.githubusercontent.com/creationix/nvm/v0.33.11/install.sh> | bash
    args:
      executable: /bin/bash
      chdir: "/home/ubuntu"
      creates: "/home/ubuntu/.nvm/nvm.sh"

  - name: npm and another dependenciews as frappe
    shell: >
        . /home/ubuntu/.nvm/nvm.sh && nvm install {{ item }}
    args:
      executable: /bin/bash
      chdir: /home/ubuntu
      creates: "/home/ubuntu/.nvm/versions/{{ item }}"
    with_items:
      - v10
      

    "stderr_lines": [
        "Error: failed to parse /tmp/my_values_prom.yaml: error converting YAML to JSON: yaml: line 652: did not find expected alphabetic or numeric character"

651.    annotations:
652.       <http://kubernetes.io/ingress.class|kubernetes.io/ingress.class>: 'alb'

---
- name: "S3 bucket encryption"
  hosts: localhost
  connection: local 
  vars:
    buckets:
      - test
  
  tasks:
  - name: encrypt S3 bucket
    s3_bucket:
      name: "{{ item }}"
      encryption: AES256
      state: present
    with_items: "{{ buckets }}"
    ignore_errors: true

  - name: obtain list of all objects in bucket
    aws_s3:
      bucket: "{{ item }}"
      object: /
      mode: list
    with_items: "{{ buckets }}"
    register: bucket_item_list
    ignore_errors: true

  - name: encrypt all objects in bucket
    aws_s3:
      bucket: "{{ item.item }}"
      object: "{{ item.s3_keys }}"
      src: "{{ item.s3_keys }}"
      encrypt: yes
      encryption_mode: AES256
      mode: put
    with_items: "{{ bucket_item_list.results }}"
    ignore_errors: true

An exception occurred during task execution. To see the full traceback, use -vvv. The error was: TypeError: expected str, bytes or os.PathLike object, not list
fatal: [localhost]: FAILED! => {"msg": "Unexpected failure during module execution.", "stdout": ""}

   - name: launch new ec2 instances                                            
     local_action: ec2                                                         
                   ...
                   volumes=[ { device_name: "/dev/sda1", volume_size: 16, volume_type: gp2, delete_on_termination: True } ]