VhFmdZdZdZ ddlZddlmZddlmZddlm Z ddl m Z dd l m Z dd lmZd Zd Zd ZdZdZdZdZdZdZdZdZdZedk(reyy#e$rY]wxYw)a --- module: eks_nodegroup version_added: 5.3.0 short_description: Manage EKS Nodegroup module description: - Manage EKS Nodegroup. author: - Tiago Jarra (@tjarra) options: name: description: Name of EKS Nodegroup. required: True type: str cluster_name: description: Name of EKS Cluster. required: True type: str node_role: description: ARN of IAM role used by the EKS cluster Nodegroup. type: str subnets: description: list of subnet IDs for the Kubernetes cluster. type: list elements: str scaling_config: description: The scaling configuration details for the Auto Scaling group that is created for your node group. type: dict default: min_size: 1 max_size: 2 desired_size: 1 suboptions: min_size: description: The minimum number of nodes that the managed node group can scale in to. type: int max_size: description: The maximum number of nodes that the managed node group can scale out to. type: int desired_size: description: The current number of nodes that the managed node group should maintain. type: int disk_size: description: - Size of disk in nodegroup nodes. If you specify I(launch_template), then don't specify I(disk_size), or the node group deployment will fail. type: int instance_types: description: - Specify the instance types for a node group. If you specify I(launch_template), then don't specify I(instance_types), or the node group deployment will fail. type: list elements: str ami_type: description: The AMI type for your node group. type: str choices: - AL2_x86_64 - AL2_x86_64_GPU - AL2_ARM_64 - CUSTOM - BOTTLEROCKET_ARM_64 - BOTTLEROCKET_x86_64 remote_access: description: - The remote access (SSH) configuration to use with your node group. If you specify I(launch_template), then don't specify I(remote_access), or the node group deployment will fail. type: dict suboptions: ec2_ssh_key: description: The Amazon EC2 SSH key that provides access for SSH communication with the nodes in the managed node group. type: str source_sg: description: The security groups that are allowed SSH access (port 22) to the nodes. type: list elements: str update_config: description: The node group update configuration. type: dict default: max_unavailable: 1 suboptions: max_unavailable: description: The maximum number of nodes unavailable at once during a version update. type: int max_unavailable_percentage: description: The maximum percentage of nodes unavailable during a version update. type: int labels: description: The Kubernetes labels to be applied to the nodes in the node group when they are created. type: dict default: {} taints: description: The Kubernetes taints to be applied to the nodes in the node group. type: list elements: dict default: [] suboptions: key: description: The key of the taint. type: str value: description: The value of the taint. type: str effect: description: The effect of the taint. type: str choices: - NO_SCHEDULE - NO_EXECUTE - PREFER_NO_SCHEDULE launch_template: description: - An object representing a node group's launch template specification. - If specified, then do not specify I(instanceTypes), I(diskSize), or I(remoteAccess). type: dict suboptions: name: description: The name of the launch template. type: str version: description: - The version of the launch template to use. - If no version is specified, then the template's default version is used. type: str id: description: The ID of the launch template. type: str capacity_type: description: The capacity type for your node group. default: ON_DEMAND type: str choices: - ON_DEMAND - SPOT release_version: description: The AMI version of the Amazon EKS optimized AMI to use with your node group. type: str state: description: Create or delete the Nodegroup. choices: - absent - present default: present type: str tags: description: A dictionary of resource tags. type: dict aliases: ['resource_tags'] purge_tags: description: - Purge existing tags that are not found in the nodegroup. type: bool default: true wait: description: Specifies whether the module waits until the profile is created or deleted before moving on. type: bool default: false wait_timeout: description: The duration in seconds to wait for the nodegroup to become active. Defaults to C(1200) seconds. default: 1200 type: int extends_documentation_fragment: - amazon.aws.common.modules - amazon.aws.region.modules a # Note: These examples do not set authentication details, see the AWS Guide for details. - name: create nodegroup community.aws.eks_nodegroup: name: test_nodegroup state: present cluster_name: test_cluster node_role: arn:aws:eks:us-east-1:1231231123:role/asdf subnets: - subnet-qwerty123 - subnet-asdfg456 scaling_config: min_size: 1 max_size: 2 desired_size: 1 disk_size: 20 instance_types: 't3.micro' ami_type: 'AL2_x86_64' labels: 'teste': 'test' taints: - key: 'test' value: 'test' effect: 'NO_SCHEDULE' capacity_type: 'ON_DEMAND' - name: Remove an EKS Nodegrop community.aws.eks_nodegroup: name: test_nodegroup cluster_name: test_cluster wait: true state: absent a nodegroup_name: description: The name associated with an Amazon EKS managed node group. returned: when state is present type: str sample: test_cluster nodegroup_arn: description: The Amazon Resource Name (ARN) associated with the managed node group. returned: when state is present type: str sample: arn:aws:eks:us-east-1:1231231123:safd cluster_name: description: Name of EKS Cluster returned: when state is present type: str sample: test_cluster version: description: The Kubernetes version of the managed node group. returned: when state is present type: str sample: need_validate release_version: description: This is the version of the Amazon EKS optimized AMI that the node group was deployed with. returned: when state is present type: str sample: need_validate created_at: description: Nodegroup creation date and time. returned: when state is present type: str sample: '2022-01-18T20:00:00.111000+00:00' modified_at: description: Nodegroup modified date and time. returned: when state is present type: str sample: '2022-01-18T20:00:00.111000+00:00' status: description: status of the EKS Nodegroup. returned: when state is present type: str sample: - CREATING - ACTIVE capacity_type: description: The capacity type of your managed node group. returned: when state is present type: str sample: need_validate scaling_config: description: The scaling configuration details for the Auto Scaling group that is associated with your node group. returned: when state is present type: dict sample: need_validate instance_types: description: This is the instance type that is associated with the node group. returned: when state is present type: list sample: need_validate subnets: description: List of subnets used in Fargate Profile. returned: when state is present type: list sample: - subnet-qwerty123 - subnet-asdfg456 remote_access: description: This is the remote access configuration that is associated with the node group. returned: when state is present type: dict sample: need_validate ami_type: description: This is the AMI type that was specified in the node group configuration. returned: when state is present type: str sample: need_validate node_role: description: ARN of the IAM Role used by Nodegroup. returned: when state is present type: str sample: arn:aws:eks:us-east-1:1231231123:role/asdf labels: description: The Kubernetes labels applied to the nodes in the node group. returned: when state is present type: dict sample: need_validate taints: description: The Kubernetes taints to be applied to the nodes in the node group when they are created. returned: when state is present type: list sample: need_validate resources: description: The resources associated with the node group. returned: when state is present type: complex contains: autoScalingGroups: description: The Auto Scaling groups associated with the node group. returned: when state is present type: list elements: dict remoteAccessSecurityGroup: description: The remote access security group associated with the node group. returned: when state is present type: str diskSize: description: This is the disk size in the node group configuration. returned: when state is present type: int sample: 20 health: description: The health status of the node group. returned: when state is present type: dict sample: need_validate update_config: description: The node group update configuration. returned: when state is present type: dict contains: maxUnavailable: description: The maximum number of nodes unavailable at once during a version update. type: int maxUnavailablePercentage: description: The maximum percentage of nodes unavailable during a version update. type: int launch_template: description: If a launch template was used to create the node group, then this is the launch template that was used. returned: when state is present type: dict sample: need_validate tags: description: Nodegroup tags. returned: when state is present type: dict sample: foo: bar N)camel_dict_to_snake_dict)snake_dict_to_camel_dict)is_boto3_error_code)compare_aws_tags) get_waiter)AnsibleCommunityAWSModulec*d}|jjd}|y |j|dd}t|||jjd\}}r&|jsd } |jd |d| r(|jsd } |jd |d| |S|S#tj j tj jf$r:}|j|d|jjdd Yd}~d}~wwxYw#tj j tj jf$r;}|j|d |jjdd Yd}~ d}~wwxYw#tj j tj jf$r;}|j|d |jjdd Yd}~|Sd}~wwxYw)NFtags nodegroupArn) resourceArn purge_tagsz-Unable to list or compare tags for Nodegroup name.msgT) aws_retry ResourceArntagKeysz!Unable to set tags for Nodegroup )rrr ) paramsgetlist_tags_for_resourcerbotocore exceptions ClientError BotoCoreError fail_json_aws check_modeuntag_resource tag_resource) clientmodule nodegroupchanged desired_tags existing_tags tags_to_addtags_to_removees o/home/dcms/DCMS/lib/python3.12/site-packages/ansible_collections/community/aws/plugins/modules/eks_nodegroup.py validate_tagsr*jsG==$$V,Lr55)NB[5\]cd &6}lTZTaTaTeTefrTs&t# ^  G n%%)NB[es%t  G n##d .@Y`k#l N7N#    + +X-@-@-N-N OrQ&STZTaTaTeTeflTmSnno$pqqr''33X5H5H5V5VW n$$Q.OPVP]P]PaPabhPiOjjk,l$mm n''33X5H5H5V5VW n$$Q.OPVP]P]PaPabhPiOjjk,l$mm N nsHAB74D+F 77D(.0D##D(+7F"0FF 7H0H  Hcg}g}|D]}||vs|j||D]}||vs|j|||fSN)append)nodegroup_taints param_taintstaints_to_unsettaints_to_add_or_updatetaints r)compare_taintsr3sgO !*  $  " "5 )*2 ( ( # * *5 12 #O 33cd}t}|d|d<|d|d<g|d<d|vrg|d<t|d|\}}|r||dd<|r||dd<|dr#|jsd} |jd i||S|S#tj j tj jf$r%}|j|d|dd  Yd}~|Sd}~wwxYw) NF clusterName nodegroupNametaintsaddOrUpdateTaints removeTaintsTz#Unable to set taints for Nodegroup rr) dictr3rupdate_nodegroup_configrrrrr) r r!r"r/r#rr1r0r(s r)validate_taintsr>sG VF%m4F='8F?F8y  (/=i>QS_/`,_0Gx,-+:x( h  G n...88 N7N''33X5H5H5V5VW n$$Q.QRXYhRiQjjk,l$mm N ns%A;;7C2CCcg}i}|jD]}||vs|j||jD]\}}||jvs|||<||fSr,)keysr-items)nodegroup_labels param_labelslabels_to_unsetlabels_to_add_or_updatelabelkeyvalues r)compare_labelsrIsO !&&(*  $  " "5 )*#((*1 U &++- -+0 #C (1 #O 33r4cd}t}|d|d<|d|d<i|d<t|d|\}}|r||dd<|r||dd<|dr#|jsd} |jd i||S|S#tj j tj jf$r%}|j|d|dd  Yd}~|Sd}~wwxYw) NFr6r7labelsaddOrUpdateLabels removeLabelsTz#Unable to set labels for Nodegroup rrr;) r<rIrr=rrrrr) r r!r"rCr#rrErDr(s r)validate_labelsrNs G VF%m4F='8F?F8/=i>QS_/`,_0Gx,-+:x( h  G n...88 N7N''33X5H5H5V5VW n$$Q.QRXYhRiQjjk,l$mm N nsA227C)C  CcdD].}||vs||vs ||||k7s|jd|d0d|vrd|vr|jd|d|dk7ry|d |d k7ryy ) N)nodeRolesubnetsdiskSize instanceTypesamiTypes remoteAccess capacityTypezCannot modify parameter rrlaunchTemplatez-Cannot add Launch Template in this Nodegroup. updateConfigT scalingConfigF fail_json)r!rr"params r)compare_paramsr]sqJ Y Uf_6%=0  '?wa%H IJ  )0@F0JLM F>$::!VO%<< r4cd|vr|jdy dD]2}||dvs |d||d|k7s|jd|d4d|dvr|dd|ddk7ryy ) NrWz1Cannot exclude Launch Template in this Nodegroup.r)ridzCannot modify Launch Template rversionTFrZ)r!rr"rGs r)compare_params_launch_templaterasv%PQ " NCv.//'(-;K1LS1QQ  'EcU!%L M  N  01 1 # $Y /9=M3Ny3Y Y r4c d}t}|jd|d<|jd|d<|jd|d<|jd|d<|jd xsi|d <|jd |jd |d <|jd |jd |d <|jd|jd|d<|jdt|d<|jdd|jdd|dd<|jdd|jdd|dd<|jdd|jdd|dd<|jd|jd|d<|jdat|d<|jdd|jdd|dd<|jdd|jdd|dd<|jd |jdj|d<|jd|jd|d<|jd|jd|d<|jd at|d!<|jd d"|jd d"|d!d#<|jd d$|jd d$|d!d%<|jd&t|jd&|d'<|jj d(}t |||d|d}|r1t}|d|d<|d|d<d|vr9t |||r,|d|d<|js |jd1i||d+z}t|||rI d|vr|jd|d'|d'<|d!|d!<|js|j d1i||d+z}|t#|||z}|t%||||dz}d|vr|t'||||dz}|rt)||d,|d|dt |||d|d}|j*d1d-|it-||jr|j+d+. |j.d1i|}|r)t)||d,|d|dt |||d|d}|j*d1d-d+it-|y#tjjtjjf$r}|j|d)*Yd}~d}~wwxYw#tjjtjjf$r}|j|d)*Yd}~d}~wwxYw#tjjtjjf$r%}|j|d/|dd0*Yd}~Pd}~wwxYw)2NFrr7 cluster_namer6 node_rolerPrQr ami_typeamiType disk_sizerRinstance_typesrSlaunch_templaterWr_r`release_versionreleaseVersion remote_accessrU ec2_ssh_key ec2SshKey source_sgsourceSecurityGroups capacity_typerVrKr8 update_configrXmax_unavailablemaxUnavailablemax_unavailable_percentagemaxUnavailablePercentagescaling_configrYwaitzCouldn't update nodegroup.rTnodegroup_activer#)r#zCouldn't create Nodegroup rr;)r<rupperrr get_nodegrouprarupdate_nodegroup_versionrrrrrr]popr=r*rNr> wait_until exit_jsonrcreate_nodegroup)r r!r#rrxr" update_paramsr(s r)create_or_update_nodegroupsrsG VF$mmF3F?"MM.9F={3F: i0F9]]6*0bF6N }}Z ,"MM*5y }}[!-#]];7z }}%&2"(--0@"A }}&'3#'6 ==* +D 1 =-3]];L-Md-SF# $T * ==* +I 6 B28--@Q2RS\2]F# $Y / ==* +F 3 ?/5}}=N/OPV/WF# $V , }}&'3#)==1B#C  }}_%1!%~ == )- 8 D28--2PQ^2_F> "; / == )+ 6 B=C]]?=[\g=hF> "#9 : }}_%1!'!?!E!E!G~ }}X*!==2x }}X*!==2x }}_%1!%~ == )*; < H7=}}_7UVg7hF> "#3 4 == )*F G SAGA_,BF> "#= >}}%&2":6==IY;Z"[ ==  V $Dfff_.EvmG\]I '-m'< m$)/)@ o& y (-ffiH289I2J ./((R777H-H4 &&) 4 J#}4!%%&67171H o.06~0F n-((2F22C]C4 =;;?669fX>NOO y vvy&BRS SG  vv'96/;RTZ[hTi j!&&&2I6R_K`a PP,DY,OP &]+F++5f5  66#5vo7NPVWdPef!&&&2I6R_K`a FITI%=i%HI[%//==x?R?R?^?^_R,,Q4P,QQR ''55x7J7J7V7VW J$$Q,H$II J,    - -x/B/B/N/N O]Q&@AX@YYZ$[\\]sI6S!AT9V!7T6T11T697V0V  V7W-W((W-c|jjd}|jd}t||||}|jjd}|s|jdd|ddk(r7|r"t ||d |||jdd |jdd |j r|jd d  |j |||r"t ||d |||jd d |jd dy#tjjtjjf$r!}|j|d|dYd}~d}~wwxYw)NrrcrxFz!Nodegroup '{name}' does not existr#rstatusDELETINGnodegroup_deletedz$Nodegroup '{name}' deletion completez,Nodegroup '{name}' already in DELETING stateTz9Nodegroup '{name}' deletion would be started (check mode)r6r7zCouldn't delete Nodegroup 'z'.rz#Nodegroup '{name}' deletion started) rrr{rr~rdelete_nodegrouprrrrr)r r!rr6existingrxr(s r)delete_nodegroupsr]sm ==  V $D--/KVVT;?H ==  V $D ,OPZ'  vv':D+ N   U0V  W,Z[ +fgLKtL 66#6kJ+QR T'LM    - -x/B/B/N/N OLQ&A$r$JKKLsD7E+ E&&E+c |j||dS#td$rYytjjtjj f$r!}|j |d|dYd}~yd}~wwxYw)Nrr"ResourceNotFoundExceptionzCouldn't get Nodegroup rr)describe_nodegrouprrrrrr)r r!nodegroup_namercr(s r)r{r{{sQ((\Q_(`almm : ;))'' Q Q&=n=MQ$OPP QsA?6A?A::A?cD|jjd}t||}dt||jj z z} |j ||d|iy#tjj$r}|j|dYd}~yd}~wwxYw)N wait_timeout MaxAttempts)r6r7 WaiterConfigzAn error occurred waitingr) rrrintconfigdelayrxrr WaiterErrorr) r r! waiter_namerrcrwaiterattemptsr(s r)r~r~s==$$^4L  ,F3|fmm&9&99::HA NZgiqYr s    * *AQ$?@@AsA%%BBBctdEidtdddtdddtdtdd d td d d d dttdtdtddtddtdd dtgddtd ttdtdd dtd dd ittdtddtd id tdd gttdd!"tdtdgd#$%&d'td ttdtdtd(d)td*d+gd*,d-td.td d/g0d1td2dd3td4d5gd5,d6td!d27d8td9d7}t|d3d5ddggggd:d;}|jd'\|jdd<|jd<|jdd=|jd<|jdHd>g|jd<n7|jd'd?%|jd'd|jd!d@A |j dB}|jjd3d5k(r t|yt|y#t j jt j jf$r}|j|dCDYd}~d}~wwxYw)FNrstrT)typerequiredrcrdrQlist)relementsrwr<r)min_sizemax_size desired_sizer)r)rdefaultoptionsrgrhre) AL2_x86_64AL2_x86_64_GPU AL2_ARM_64CUSTOMBOTTLEROCKET_ARM_64BOTTLEROCKET_x86_64)choicesrl)no_log)rmro)rrrrrs)rsrurK)rrr8F)rr) NO_SCHEDULE NO_EXECUTEPREFER_NO_SCHEDULE)rr)rGrHeffect)rrrrri)rr`r_rq ON_DEMANDSPOT)rrrjr resource_tags)raliasesr boolstateabsentpresentrx)rrri))rirh)rirg)rirl)rire) argument_spec required_ifmutually_exclusivesupports_check_moderz t3.mediumr_zATo use launch_template, it is necessary to inform the id or name.rekszCouldn't connect to AWS.rr;) r<AnsibleAWSModulerrr rrrrrrrr)rr!r r(s r)mainrsF ut ,Fut4F&F&51 F !"1E5)5)!u- FE"F%8F   !F4 -FU; 5FB&* $% 0+/U+; CFR,SFT &0cd   UFnu%%(U# oF~K#8+NF@AFBv'8 9CFDVT2EFFHi0)DGFH%f -IFJ$U3KFMP#y; *BCD ! F}}&'/ == % -)+FMM+ & == $ ,(4FMM* % ==) * 2/:mFMM* + MM+ ,T 2 :O`AabhAiAq   U0s  t@u%}}!Y.#FF3&&)    - -x/B/B/N/N O@Q$>??@s&K//7M&L>>M__main__) DOCUMENTATIONEXAMPLESRETURNr ImportError0ansible.module_utils.common.dict_transformationsrransible_collections.community.aws.plugins.module_utils.modulesrrr*r3r>rIrNr]rarrr{r~r__name__r;r4r)rse N! FH T VU\XRx< 42 4.   jJZN< QAg*T zF}   sA""A*)A*