blob: b28747a40eb43e693de654dd2d17d4e8632f1c1e (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
|
---
- name: "Check installed aws-cli versions"
ansible.builtin.command:
cmd: "mise ls aws-cli"
register: awscli_installed_versions
changed_when: false
- name: "Install aws-cli"
ansible.builtin.command:
cmd: "mise use --global aws-cli@{{ awscli_version }}"
changed_when: true
when: awscli_version not in awscli_installed_versions.stdout
- name: "Ensure .aws directory exists"
ansible.builtin.file:
path: "{{ ansible_facts['env']['HOME'] }}/.aws"
state: "directory"
mode: "0700"
# AWS CLI's config file uses "[default]" for the default profile but
# "[profile <name>]" for every other named profile - credentials file has
# no such special case, it's always "[<name>]".
- name: "Determine aws-cli config section name"
ansible.builtin.set_fact:
awscli_config_section: "{{ 'default' if awscli_profile_name == 'default' else 'profile ' + awscli_profile_name }}"
- name: "Configure aws-cli credentials"
community.general.ini_file:
path: "{{ ansible_facts['env']['HOME'] }}/.aws/credentials"
section: "{{ awscli_profile_name }}"
option: "{{ item.key }}"
value: "{{ item.value }}"
mode: "0600"
loop:
- { key: "aws_access_key_id", value: "{{ awscli_access_key_id }}" }
- { key: "aws_secret_access_key", value: "{{ awscli_secret_access_key }}" }
no_log: true
- name: "Configure aws-cli profile region"
community.general.ini_file:
path: "{{ ansible_facts['env']['HOME'] }}/.aws/config"
section: "{{ awscli_config_section }}"
option: "region"
value: "{{ awscli_region }}"
mode: "0600"
- name: "Configure aws-cli profile endpoint URL"
community.general.ini_file:
path: "{{ ansible_facts['env']['HOME'] }}/.aws/config"
section: "{{ awscli_config_section }}"
option: "endpoint_url"
value: "{{ awscli_endpoint_url }}"
mode: "0600"
when: awscli_endpoint_url is defined
|
