VhMw4dZdZdZddlmZ ddlZddlmZddl m Z ddl m Z dd l mZdd lmZdd lmZdd lmZd ZdZej.edZej.edZdZdZdZdZdZedk(reyy#e$rYwxYw)a --- module: route53 version_added: 5.0.0 short_description: add or delete entries in Amazons Route 53 DNS service description: - Creates and deletes DNS records in Amazons Route 53 service. - This module was originally added to C(community.aws) in release 1.0.0. options: state: description: - Specifies the state of the resource record. required: true aliases: [ 'command' ] choices: [ 'present', 'absent', 'get', 'create', 'delete' ] type: str zone: description: - The DNS zone to modify. - This is a required parameter, if parameter O(hosted_zone_id) is not supplied. type: str hosted_zone_id: description: - The Hosted Zone ID of the DNS zone to modify. - This is a required parameter, if parameter O(zone) is not supplied. type: str record: description: - The full DNS record to create or delete. required: true type: str ttl: description: - The TTL, in second, to give the new record. - Mutually exclusive with O(alias). default: 3600 type: int type: description: - The type of DNS record to create. - Support for V(SSHFP) was added in release 9.2.0. See AWS Doc for more information U(https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/ResourceRecordTypes.html). required: true choices: [ 'A', 'CNAME', 'MX', 'AAAA', 'TXT', 'PTR', 'SRV', 'SPF', 'CAA', 'NS', 'SOA', 'SSHFP' ] type: str alias: description: - Indicates if this is an alias record. - Mutually exclusive with O(ttl). - Defaults to V(false). type: bool alias_hosted_zone_id: description: - The hosted zone identifier. type: str alias_evaluate_target_health: description: - Whether or not to evaluate an alias target health. Useful for aliases to Elastic Load Balancers. type: bool default: false value: description: - The new value when creating a DNS record. YAML lists or multiple comma-spaced values are allowed for non-alias records. type: list elements: str overwrite: description: - Whether an existing record should be overwritten on create if values do not match. type: bool retry_interval: description: - In the case that Route 53 is still servicing a prior request, this module will wait and try again after this many seconds. If you have many domain names, the default of V(500) seconds may be too long. default: 500 type: int private_zone: description: - If set to V(true), the private zone matching the requested name within the domain will be used if there are both public and private zones. - The default is to use the public zone. type: bool default: false identifier: description: - Have to be specified for Weighted, latency-based and failover resource record sets only. An identifier that differentiates among multiple resource record sets that have the same combination of DNS name and type. type: str weight: description: - Weighted resource record sets only. Among resource record sets that have the same combination of DNS name and type, a value that determines what portion of traffic for the current resource record set is routed to the associated location. - Mutually exclusive with O(region) and O(failover). type: int region: description: - Latency-based resource record sets only Among resource record sets that have the same combination of DNS name and type, a value that determines which region this should be associated with for the latency-based routing - Mutually exclusive with O(weight) and O(failover). type: str geo_location: description: - Allows to control how Amazon Route 53 responds to DNS queries based on the geographic origin of the query. - Two geolocation resource record sets that specify same geographic location cannot be created. - Non-geolocation resource record sets that have the same values for the Name and Type elements as geolocation resource record sets cannot be created. suboptions: continent_code: description: - The two-letter code for the continent. - Specifying O(geo_location.continent_code) with either O(geo_location.country_code) or O(geo_location.subdivision_code) returns an InvalidInput error. type: str country_code: description: - The two-letter code for a country. - Amazon Route 53 uses the two-letter country codes that are specified in ISO standard 3166-1 alpha-2 . type: str subdivision_code: description: - The two-letter code for a state of the United States. - To specify O(geo_location.subdivision_code), O(geo_location.country_code) must be set to V(US). type: str type: dict version_added: 3.3.0 version_added_collection: community.aws health_check: description: - Health check to associate with this record type: str failover: description: - Failover resource record sets only. Whether this is the primary or secondary resource record set. Allowed values are V(PRIMARY) and V(SECONDARY). - Mutually exclusive with O(weight) and O(region). type: str choices: ['SECONDARY', 'PRIMARY'] vpc_id: description: - When used in conjunction with O(private_zone=true), this will only modify records in the private hosted zone attached to this VPC. - This allows you to have multiple private hosted zones, all with the same name, attached to different VPCs. type: str wait: description: - Wait until the changes have been replicated to all Amazon Route 53 DNS servers. type: bool default: false wait_timeout: description: - How long to wait for the changes to be replicated, in seconds. default: 300 type: int author: - Bruce Pennypacker (@bpennypacker) - Mike Buzzetti (@jimbydamonk) extends_documentation_fragment: - amazon.aws.common.modules - amazon.aws.boto3 a nameservers: description: Nameservers associated with the zone. returned: when state is 'get' type: list sample: - ns-1036.awsdns-00.org. - ns-516.awsdns-00.net. - ns-1504.awsdns-00.co.uk. - ns-1.awsdns-00.com. resource_record_sets: description: Info specific to the resource record. returned: when state is 'get' type: complex contains: alias: description: Whether this is an alias. returned: always type: bool sample: false failover: description: Whether this is the primary or secondary resource record set. returned: always type: str sample: "PRIMARY" geo_location: description: Geograpic location based on which Route53 resonds to DNS queries. returned: when configured type: dict sample: { continent_code: "NA", country_code: "US", subdivision_code: "CA" } version_added: 3.3.0 version_added_collection: community.aws health_check: description: Health check associated with this record. returned: always type: str identifier: description: An identifier that differentiates among multiple resource record sets that have the same combination of DNS name and type. returned: always type: str name: description: Domain name for the record set. returned: always type: str sample: "new.foo.com" record: description: Domain name for the record set. returned: always type: str sample: "new.foo.com" region: description: Which region this should be associated with for latency-based routing. returned: always type: str sample: "us-west-2" resource_records: description: Information about the resource records to act upon. type: list returned: always sample: [{"value": "1.1.1.1"}] ttl: description: Resource record cache TTL. returned: always type: str sample: "3600" type: description: Resource record set type. returned: always type: str sample: "A" value: description: Record value. returned: always type: str sample: "52.43.18.27" values: description: Record Values. returned: always type: list sample: - 52.43.18.27 weight: description: Weight of the record. returned: always type: str sample: '3' zone: description: Zone this record set belongs to. returned: always type: str sample: "foo.bar.com" wait_id: description: - The wait ID for the applied change. Can be used to wait for the change to propagate later on when O(wait=false). type: str returned: when changed version_added: 6.3.0 a4 - name: Add new.foo.com as an A record with 3 IPs and wait until the changes have been replicated amazon.aws.route53: state: present zone: foo.com record: new.foo.com type: A ttl: 7200 value: 1.1.1.1,2.2.2.2,3.3.3.3 wait: true - name: Update new.foo.com as an A record with a list of 3 IPs and wait until the changes have been replicated amazon.aws.route53: state: present zone: foo.com record: new.foo.com type: A ttl: 7200 value: - 1.1.1.1 - 2.2.2.2 - 3.3.3.3 wait: true - name: Retrieve the details for new.foo.com amazon.aws.route53: state: get zone: foo.com record: new.foo.com type: A register: rec - name: Delete new.foo.com A record using the results from the get command amazon.aws.route53: state: absent zone: foo.com record: "{{ rec.set.record }}" ttl: "{{ rec.set.ttl }}" type: "{{ rec.set.type }}" value: "{{ rec.set.value }}" # Add an AAAA record. Note that because there are colons in the value # that the IPv6 address must be quoted. Also shows using the old form command=create. - name: Add an AAAA record amazon.aws.route53: command: create zone: foo.com record: localhost.foo.com type: AAAA ttl: 7200 value: "::1" # For more information on SRV records see: # https://en.wikipedia.org/wiki/SRV_record - name: Add a SRV record with multiple fields for a service on port 22222 amazon.aws.route53: state: present zone: foo.com record: "_example-service._tcp.foo.com" type: SRV value: "0 0 22222 host1.foo.com,0 0 22222 host2.foo.com" # Note that TXT and SPF records must be surrounded # by quotes when sent to Route 53: - name: Add a TXT record. amazon.aws.route53: state: present zone: foo.com record: localhost.foo.com type: TXT ttl: 7200 value: '"bar"' - name: Add an alias record that points to an Amazon ELB amazon.aws.route53: state: present zone: foo.com record: elb.foo.com type: A value: "{{ elb_dns_name }}" alias: true alias_hosted_zone_id: "{{ elb_zone_id }}" - name: Retrieve the details for elb.foo.com amazon.aws.route53: state: get zone: foo.com record: elb.foo.com type: A register: rec - name: Delete an alias record using the results from the get command amazon.aws.route53: state: absent zone: foo.com record: "{{ rec.set.record }}" ttl: "{{ rec.set.ttl }}" type: "{{ rec.set.type }}" value: "{{ rec.set.value }}" alias: true alias_hosted_zone_id: "{{ rec.set.alias_hosted_zone_id }}" - name: Add an alias record that points to an Amazon ELB and evaluates it health amazon.aws.route53: state: present zone: foo.com record: elb.foo.com type: A value: "{{ elb_dns_name }}" alias: true alias_hosted_zone_id: "{{ elb_zone_id }}" alias_evaluate_target_health: true - name: Add an AAAA record with Hosted Zone ID amazon.aws.route53: state: present zone: foo.com hosted_zone_id: Z2AABBCCDDEEFF record: localhost.foo.com type: AAAA ttl: 7200 value: "::1" - name: Use a routing policy to distribute traffic amazon.aws.route53: state: present zone: foo.com record: www.foo.com type: CNAME value: host1.foo.com ttl: 30 # Routing policy identifier: "host1@www" weight: 100 health_check: "d994b780-3150-49fd-9205-356abdd42e75" - name: Add a CAA record (RFC 6844) amazon.aws.route53: state: present zone: example.com record: example.com type: CAA value: - 0 issue "ca.example.net" - 0 issuewild ";" - 0 iodef "mailto:security@example.com" - name: Create a record with geo_location - country_code amazon.aws.route53: state: present zone: '{{ zone_one }}' record: 'geo-test.{{ zone_one }}' identifier: "geohost@www" type: A value: 1.1.1.1 ttl: 30 geo_location: country_code: US - name: Create a record with geo_location - subdivision code amazon.aws.route53: state: present zone: '{{ zone_one }}' record: 'geo-test.{{ zone_one }}' identifier: "geohost@www" type: A value: 1.1.1.1 ttl: 30 geo_location: country_code: US subdivision_code: TX - name: Add new.foo.com as an SSHFP record amazon.aws.route53: state: present zone: test-zone.com record: new.foo.com type: SSHFP ttl: 7200 value: 1 1 11F1A11D1111112B111C1B11B1C11C11C1234567 - name: Delete new.foo.com as an SSHFP record amazon.aws.route53: state: absent zone: test-zone.com record: new.foo.com type: SSHFP ) itemgetterN) to_native)camel_dict_to_snake_dict)is_boto3_error_message)AnsibleAWSModule)AWSRetry)scrub_none_parameters) get_waiter )retriesc j|jd}|jdi|jdS)Nlist_resource_record_setsResourceRecordSets get_paginatorpaginatebuild_full_resultroute53kwargs paginators f/home/dcms/DCMS/lib/python3.12/site-packages/ansible_collections/amazon/aws/plugins/modules/route53.py_list_record_setsrs8%%&ABI 9   ' ' 9 9 ; e}F5M*u  hvh/0x hvh/0x}}]#w#M266yAw%m488CDx)2=)A)E)En)U%&1:=1I1M1MNd1e-. M  w+4==9J+KLa155>LL((6'?3w!'?x M Ms,G3c|jd|ddt||}ttfd|dd}|Dcgc]}|d  c}Scc}w) NTr8 HostedZoner$r"c(|dk(xr|ddk(S)Nr$r&NSr)rLhosted_zone_names rz-get_hosted_zone_nameservers..@s fVn0@@[VF^W[E[rrr`ra)r>rlistfilter)rr,resource_records_setsnameservers_records ns_recordrps @rget_hosted_zone_nameserversrw;st..'.J<XY_`-gGL[]rs 1D D9Ig  DD Ds Acrtdvidtddgddgdtdd tdd tdd d td ddtddgddtddtddtdddtdddtddtd ddtdddtdd td d!tdd"td#ttdtdtd$d%d&tdd'tdd(d)g*d+tdd,tddd-td d.}t|ddd ggddggdd/dgfdd0dgffd1d2gtd3d3d3d345}|jdd6vrd0}n(|jdd7vrd8}n|jdd9k(rd9}|jjdxsd:j }|jjd }|jjd }|jjd j }|jjd}|jjdxsg}|jjd} |jjd} |jjd} |jjd} |jd+d} n|jjd} |jjd}|jjd }|jjd!}|jjd&}|jjd'}|jjd+}|jjd,}|jjd-}|jjd"}|d;dd| r t |d=k7r|j d>?||||||j d@?tjt| dAgtdB| C} |jdD|E}|xst!||| |}|dG|xs|dH}|j |?t#||||}t%|||||||Dcgc]}t|Ic}||dJ }|r|jdK}|jdL} |jdM}!|r| s|!r|j ddNOt'|| |!gs|j ddPO|jdMr5|jdLj dQk7r|j ddROi|dS<|r||dSdT<| r| |dSdU<|!r|!|dSdV<|d8k(r/|-|jdW|dW<|dXs|jdX|dX<| r"t| |dY| Z|d[<dX|vr|dX=dW|vr|dW=|d\k(r:t)|dXt+d]^|dX<|rt)|dXt+d]^|dX<|d0k(r$||k(rt-|g}"|j/d|"_|d9k(ri|d`k(r|jdag}#n t1||}#t3|||}$|$|j/dg|#gbt-|g}"|j/d|$|#|"b|d8k(r|s|j/dc|d0k(s|d8k(r;|d0k(r&|r$|jds|j dd?de}%n|j5}%d}&|j6sp |j9d|tt%|fggh}'|'didj}&|r;t;|dk}(|(j=|'didjtt>|t>zlmt3|||}$t3|||})td|&|d8k7r t-|)gnis}*|jLr&|*jOdt|$|d8k7r t-|)nidui|j.dvi|*y#tjj$r}|j|dF?Yd}~d}~wwxYwcc}w#tAdn$r|j/dcYtjjB$r}|j|do?Yd}~d}~wtjjDtjjFf$r}|j|dp?Yd}~kd}~wtH$r*}|j dqtK|dr?Yd}~d}~wwxYw)wNstaterdT)absentcreatedeleter+presentcommand)rKrequiredchoicesaliasesrD)rKrJrL)rKrrNinti)rKdefaultrK) AAAAACAACNAMEMXroPTRSOASPFSSHFPSRVTXT)rKrrrYboolr]r_Fr[rr)rKelements overwriteretry_intervalirErOrQrS geo_locationrc)continent_code country_codesubdivision_code)rKoptionsrrWrUPRIMARY SECONDARY)rKrvpc_idwait wait_timeouti,r}r{)rUrSrQ)rYrN)rO)rUrSrQr) argument_specsupports_check_moderequired_one_ofrequired_together required_ifmutually_exclusive required_by)r}r{)rzr|r|r+r7.zBparameter 'value' must contain a single dns name for alias records)msgzuYou have specified identifier which makes sense only if you specify one of: weight, region, geo_location or failover.PriorRequestNotComplete<)r delaycatch_extra_error_codes max_delayr)retry_decoratorzFailed to connect to AWSzZone z does not exist in Route53)ra) r$r&rPrRrTrMr`rVr'rrrzfWhile using geo_location, continent_code is mutually exclusive with country_code and subdivision_code.)changedrz\To use geo_location please specify either continent_code, country_code, or subdivision_code.usz=To use subdivision_code, you must specify country_code as US. GeoLocation ContinentCode CountryCodeSubdivisionCoderMr`r)r#rZr^rXrra)key)rrtror\)rset nameserversresource_record_sets)rzIRecord already exists with different value. Set 'overwrite' to replace itUPSERT)ActionResourceRecordSet)Changes)r9r# ChangeBatch ChangeInfor6resource_record_sets_changed)Delay MaxAttempts)r6 WaiterConfigzbut it already existsz:Timeout waiting for resource records changes to be appliedzFailed to update recordszUnhandled exception. ())rwait_idrdiff)beforeafterr)(rcrparamsr+r*len fail_jsonrjittered_backoffMAX_AWS_RETRIESmaxclientbotocore exceptionsHTTPClientError fail_json_awsrHr2r anyrfrr exit_jsonrwrkupper check_modechange_resource_record_setsr r WAIT_RETRYr WaiterError BotoCoreError ClientError Exceptionr_diffupdate)+rr? command_inrhhosted_zone_id_inttl_inrgtype_invalue_inalias_inalias_hosted_zone_id_inalias_evaluate_target_health_inretry_interval_inprivate_zone_in identifier_in weight_in region_inhealth_check_in failover_in vpc_id_inwait_inwait_timeout_inrrrer,errmsg aws_recordr[resource_record_setrrrrr_setsns formatted_awsr~rrwaiterformatted_record return_results+ rmainrFs #/_jsit #u  # ' # . # eT *#i ##"u-#&*vu%E# /!#"F###$4%#&vu5'#(U#)#*+#,-#.#/d>Naekpaq  /#<u%=#>59k*BC?#@A#Bvu -C#Duc2E#MJ#  "234#%;<=i' + h * -  $""(  #F2}}W!66 w #7 7 w 5 ( }}  (.B557G ))*:; ]]  u %F !!(+113Imm'G}}  )/RH}}  )H$mm//0FG&,mm&7&78V&W# ))*:; }}X* --++N;MM%%l3M !!(+I !!(+Imm''7O--##J/K !!(+Imm'Gmm''7O==$$^4Lrs|s3~S Xx!7 H *   !e  f  )"3 8KP\Pd'   1  //!: ;b+, O@-- ?-K  l#6wQ`bk#lG5$566PQV$GWi-PJ/#?GHe5 1H,*  %))*:;#''7 '++,>? |/?   )  NL2BCD   r     . /L4D4D^4T4Z4Z4\`d4d   U0o  p.0M* BP  . ? @L  .} = DT  ./@ AX*"8%/^^E%:E""#455?^^DU5V  1 2-10QK!@. M*  3 3#$56 ' '#E*%178KL]8^dnovdw1x-. ,2:>O3PV`ahVi,jJ( )X*0C"C+,?@AgFU d?"-B-Wg>B%j'7C    UY[  \+J78Mr`ghXj'Xx!7  !j==-  %p qG &&(GG    K*1*M*M$ $gQd*e)fg+N+ ' 2,?EG#G-KL 2<@F!%($3z$A"&"*gw?M$%8'7KMW[cMc67GHIikM ||+KUYaKa56FGgi  F%}%E    . .@Q$>??@* I\&&=> ,   U  +"".. f  (d e e    - -    + +  D  (B C C K   #9)A,q!I  J J KsU3bc&A/cc0c  c f68f6d--:f6'f f6 f11f6__main__) DOCUMENTATIONRETURNEXAMPLESoperatorrr ImportErroransible.module_utils._textr0ansible.module_utils.common.dict_transformationsrr s` Da F{ z  1U_XPdR  ?3R4R ?3K4K ",(VE_&D  zFw   sBBB