VhpddlmZmZmZeZdZdZdZddl Z ddl Z ddl Z ddl m Z ddlmZddlmZdd lmZdad Zdd Zd Zd ZdZdZdZdZdZddZdZdZ e!dk(re yy))absolute_importdivisionprint_functiona  module: terraform short_description: Manages a Terraform deployment (and plans) description: - Provides support for deploying resources with Terraform and pulling resource information back into Ansible. extends_documentation_fragment: - community.general.attributes attributes: check_mode: support: full diff_mode: support: full version_added: 8.3.0 options: state: choices: ['planned', 'present', 'absent'] description: - Goal state of given stage/project. type: str default: present binary_path: description: - The path of a C(terraform) binary to use, relative to the 'service_path' unless you supply an absolute path. type: path project_path: description: - The path to the root of the Terraform directory with the C(vars.tf)/C(main.tf)/etc to use. type: path required: true plugin_paths: description: - List of paths containing Terraform plugin executable files. - Plugin executables can be downloaded from U(https://releases.hashicorp.com/). - When set, the plugin discovery and auto-download behavior of Terraform is disabled. - The directory structure in the plugin path can be tricky. The Terraform docs U(https://learn.hashicorp.com/tutorials/terraform/automate-terraform#pre-installed-plugins) show a simple directory of files, but actually, the directory structure has to follow the same structure you would see if Terraform auto-downloaded the plugins. See the examples below for a tree output of an example plugin directory. type: list elements: path version_added: 3.0.0 workspace: description: - The terraform workspace to work with. This sets the E(TF_WORKSPACE) environmental variable that is used to override workspace selection. For more information about workspaces have a look at U(https://developer.hashicorp.com/terraform/language/state/workspaces). type: str default: default purge_workspace: description: - Only works with state = absent. - If true, the workspace will be deleted after the "terraform destroy" action. - The 'default' workspace will not be deleted. default: false type: bool plan_file: description: - The path to an existing Terraform plan file to apply. If this is not specified, Ansible will build a new TF plan and execute it. Note that this option is required if 'state' has the 'planned' value. type: path state_file: description: - The path to an existing Terraform state file to use when building plan. If this is not specified, the default C(terraform.tfstate) will be used. - This option is ignored when plan is specified. type: path variables_files: description: - The path to a variables file for Terraform to fill into the TF configurations. This can accept a list of paths to multiple variables files. type: list elements: path aliases: ['variables_file'] variables: description: - A group of key-values pairs to override template variables or those in variables files. By default, only string and number values are allowed, which are passed on unquoted. - Support complex variable structures (lists, dictionaries, numbers, and booleans) to reflect terraform variable syntax when O(complex_vars=true). - Ansible integers or floats are mapped to terraform numbers. - Ansible strings are mapped to terraform strings. - Ansible dictionaries are mapped to terraform objects. - Ansible lists are mapped to terraform lists. - Ansible booleans are mapped to terraform booleans. - B(Note) passwords passed as variables will be visible in the log output. Make sure to use C(no_log=true) in production!. type: dict complex_vars: description: - Enable/disable capability to handle complex variable structures for C(terraform). - If V(true) the O(variables) also accepts dictionaries, lists, and booleans to be passed to C(terraform). Strings that are passed are correctly quoted. - When disabled, supports only simple variables (strings, integers, and floats), and passes them on unquoted. type: bool default: false version_added: 5.7.0 targets: description: - A list of specific resources to target in this plan/application. The resources selected here will also auto-include any dependencies. type: list elements: str default: [] lock: description: - Enable statefile locking, if you use a service that accepts locks (such as S3+DynamoDB) to store your statefile. type: bool default: true lock_timeout: description: - How long to maintain the lock on the statefile, if you use a service that accepts locks (such as S3+DynamoDB). type: int force_init: description: - To avoid duplicating infra, if a state file cannot be found this will force a C(terraform init). Generally, this should be turned off unless you intend to provision an entirely new Terraform deployment. default: false type: bool overwrite_init: description: - Run init even if C(.terraform/terraform.tfstate) already exists in O(project_path). default: true type: bool version_added: '3.2.0' backend_config: description: - A group of key-values to provide at init stage to the -backend-config parameter. type: dict backend_config_files: description: - The path to a configuration file to provide at init state to the -backend-config parameter. This can accept a list of paths to multiple configuration files. type: list elements: path version_added: '0.2.0' provider_upgrade: description: - Allows Terraform init to upgrade providers to versions specified in the project's version constraints. default: false type: bool version_added: 4.8.0 init_reconfigure: description: - Forces backend reconfiguration during init. default: false type: bool version_added: '1.3.0' check_destroy: description: - Apply only when no resources are destroyed. Note that this only prevents "destroy" actions, but not "destroy and re-create" actions. This option is ignored when O(state=absent). type: bool default: false version_added: '3.3.0' parallelism: description: - Restrict concurrent operations when Terraform applies the plan. type: int version_added: '3.8.0' notes: - To just run a C(terraform plan), use check mode. requirements: ["terraform"] author: "Ryan Scott Brown (@ryansb)" u - name: Basic deploy of a service community.general.terraform: project_path: '{{ project_dir }}' state: present - name: Define the backend configuration at init community.general.terraform: project_path: 'project/' state: "{{ state }}" force_init: true backend_config: region: "eu-west-1" bucket: "some-bucket" key: "random.tfstate" - name: Define the backend configuration with one or more files at init community.general.terraform: project_path: 'project/' state: "{{ state }}" force_init: true backend_config_files: - /path/to/backend_config_file_1 - /path/to/backend_config_file_2 - name: Disable plugin discovery and auto-download by setting plugin_paths community.general.terraform: project_path: 'project/' state: "{{ state }}" force_init: true plugin_paths: - /path/to/plugins_dir_1 - /path/to/plugins_dir_2 - name: Complex variables example community.general.terraform: project_path: '{{ project_dir }}' state: present complex_vars: true variables: vm_name: "{{ inventory_hostname }}" vm_vcpus: 2 vm_mem: 2048 vm_additional_disks: - label: "Third Disk" size: 40 thin_provisioned: true unit_number: 2 - label: "Fourth Disk" size: 22 thin_provisioned: true unit_number: 3 force_init: true ### Example directory structure for plugin_paths example # $ tree /path/to/plugins_dir_1 # /path/to/plugins_dir_1/ # └── registry.terraform.io # └── hashicorp # └── vsphere # ├── 1.24.0 # │ └── linux_amd64 # │ └── terraform-provider-vsphere_v1.24.0_x4 # └── 1.26.0 # └── linux_amd64 # └── terraform-provider-vsphere_v1.26.0_x4 a outputs: type: complex description: A dictionary of all the TF outputs by their assigned name. Use RV(ignore:outputs.MyOutputName.value) to access the value. returned: on success sample: '{"bukkit_arn": {"sensitive": false, "type": "string", "value": "arn:aws:s3:::tf-test-bukkit"}' contains: sensitive: type: bool returned: always description: Whether Terraform has marked this value as sensitive. type: type: str returned: always description: The type of the value (string, int, and so on). value: type: str returned: always description: The value of the output as interpolated by Terraform. stdout: type: str description: Full C(terraform) command stdout, in case you want to display it or examine the event log. returned: always sample: '' command: type: str description: Full C(terraform) command built by this module, in case you want to re-run the command outside the module or debug a problem. returned: always sample: terraform apply ... N) shlex_quote) integer_types) AnsibleModule) LooseVersioncltj|ddg}tj|dd}|S)Nversion-jsonterraform_version)module run_commandjsonloads)bin_pathextract_versionrs o/home/dcms/DCMS/lib/python3.12/site-packages/ansible_collections/community/general/plugins/modules/terraform.py get_versionr s9(((Iw)GHOOA$679LM c|d|vrtjdtjj |s%tjdj |tjj |s%tjdj |t|tdkrtj|ddg|zd | ytj|ddgd | y) N/z1Path for Terraform project can not be None or ''.msgzaPath for Terraform binary '{0}' doesn't exist on this host - check the path and try again please.zbPath for Terraform project '{0}' doesn't exist on this host - check the path and try again please.0.15.0validate -no-colorTcheck_rccwd) r fail_jsonospathexistsformatisdirr r)r project_pathr variables_args plan_files rpreflight_validationr+&ss,6PQ 77>>( #AHHIQR S 77== &BIIJVW XG|H55Hj+>OZ^dpqHj+>S_`rc|sgStjj|s$tj dj |d|gS)NzoCould not find state_file "{0}", the process will not destroy any resources, please check your state file path.z-state)r#r$r%rwarnr&) state_files r _state_argsr/3sQ  77>>* % FMMNXY Z j !!rc|dddg}|r;|jD](\} } |jddj| | g*|r|D]} |jd| g|r|jdg|r|jdg|r|D]} |jd| gtj |d |d |i \} }}y) Ninit -input=falserz-backend-config{0}={1}z -reconfigurez-upgradez -plugin-dirT TF_WORKSPACE)r r!environ_update)itemsextendr&rr)rr(backend_configbackend_config_filesinit_reconfigureprovider_upgrade plugin_paths workspacecommandkeyvalf plugin_pathrcouterrs r init_pluginsrF;s=G&,,. HC NN!  c*   % 3A NN-q1 2 3'( |$' 9K NNM;7 8 9%%g,`npy_z%{LBSrcdgd}|dddg}tj||\}}}|dk7r$tjdj||j d D]t}|j }|s|j d r:|jd d |d <|d j|jd d a|d j|v|S)Ndefault)currentallr=listrr!rz(Failed to list Terraform workspaces: {0} z* rIrJ) rrr-r&splitstrip startswithreplaceappend) rr( workspace_ctxr>rCrDrEitem stripped_items rget_workspace_contextrWPs )"5Mfk:G%%g<%@LBS Qw ?FFsKL $7    % %d +'4'<'rCrDrEs r_workspace_cmdrZbs;fiEG%%g,%OLBS sC<rc t||d|y)NnewrZrr(r=s rcreate_workspacer_hs8\5)r(r)r.targetsstaterp plan_pathrA local_command plan_commandcatrCrDrEargs r build_planrts]''y9 9AJMAJ'L qr" #A    " #  $A   # $qr" #A    " #  #A    " #6JFT]^_ ,YN+, J/0%%l^&C%VLBS Qw%c5I;M<ZZSZZZ qjqqHH\*XX>JC{3/JK r   q$S%9:L,YYRYYY FMM   HH\ " XX>BC{3'B C MKCs G1 G6c"d}tj|}d|vr|d}ntjddifSg}g}d}|D]}|d}|d|ddd} |d|dd d} |d d gk(s |d d d gk(r$|j | |j | d}|d d gk(r|j | d}|d d gk(s|j | d}|j ||j ||t d|id|ifS)Nc |dS)Nresource)es rget_tf_resource_addressz)get_diff..get_tf_resource_addresss }rresource_changeszBCannot find resource_changes in terraform plan, diff/check ignoredFchangeaddressbefore)rrafteractionsupdaterecreateT)r?data)rr)rrrr-rSsortdict) diff_outputrdiff_json_outputtf_reosource_changes diff_after diff_beforechangedrU item_changetf_before_statetf_after_states rget_diffrsjzz+.--/0BC XYbyJKG$8n '+I$x.QYBZ[&*9ohPWAXY y !hZ /;y3IhX`Ma3a    /   n -G y !hZ /    /G y !hZ /   n -G!$01OO/O0 D% # rc D*+ttd[idtdddtddtdd d td d dtdd dtdgddtddtdd dtdgdddtddtddtdd gdtdd d td!d"tdd d#tdd$tdd d%tdd d&tdd d'tdd d(td!d)tdd dd*dgfgd+atjj d}tjj d}tjj d}tjj d }tjj d}tjj d}tjj dxsi}tjj d}tjj d}tjj d} tjj d} tjj d"} tjj d#} tjj d$} tjj d%}tjj d&}tjj d'}tjj d)}||g}ntj d,d-g}t |d.}t|td/krd0}d1}nd2}d3}| rU|s>tjjtjj|d4d5st|d.|| | ||||t|d.|}|d6|k7r(||d7vrt|d.||nt|d.|||dk(r|j!|n|d8k(r|j!||dk(rPtjj d(1|j#d9tjj d(zd:**+fd;+g}|r|j%D]\}}t'|tr*|j!dj)|+|gzt'|t,r$|j!dj)||g|j!dj)|*|gn;|j%D](\}}|j!dj)||g*|r|D]}|j!d?|gt/|d.|||tjj dBtjj dr|j#d@n|j#dAtjj d 1|j#dBtjj d ztjj dxsgD]}|j!dC|gdD\}}dE\}}|d8k(r|j!|n|dk(r| rt1tjj|dFz| ztjj| gr|j#| ntj3dGj)| Hngt5|||| tjj d||| \} }}}}|dk(r|rdI|vrtj3dJH|j#| t} tj6stj8r|d8k(r8dKg}!t5|||| tjj d||!| \} }}}}|d.dLdM| g}"tj;|"d|N\}#}$}t=|$\}} |#d.k7rp|d6|k7rt|d.||d6tj3|j?|#||jA||jAdOj|P|rtj8s|d*k7rtj;|d|N\}#}}|#d.k7rp|d6|k7rt|d.||d6tj3|j?|#||jA||jAdOj|PdQ|vr|d8k(rdR|vrd}|d.dSdTdMgtC| z}%tj;|%|U\}#}&}'i}(|#dVk(r&tjEdWj)|&|'nR|#d.k7r8tj3dXj)|#|&|'dOj|%YntGjH|&}(|d6|k7rt|d.||d6|d8k(r|d k7r|durtK|d.|||||(||dOj||| dZ})tjLd[i|)y)\Nr(Tr$)requiredtype binary_path)rr<rK)relementsr=strrH)rrHpurge_workspaceboolFrwrk)rkrlrj)rHchoices variablesr complex_varsvariables_filesvariables_file)aliasesrrr*r.rv)rrrHlock lock_timeoutint force_initr8r9r:overwrite_init check_destroy parallelismr;rj) argument_spec required_ifsupports_check_mode terraform)rrr)destroyrz-force)applyrr2z-auto-approve=true)rr -auto-approve)rrr2rz .terraformzterraform.tfstaterIrJrlz-parallelism=%dct|trBdj|jddjddjddSt|tr|ry y t|S) Nz "{string}"\z\\"z\")stringrMz\ntruefalse) isinstancerr&rRr)varss r format_argszmain..format_args+sf dC &&dll4.H.P.PQTV[.\&]eefjlqr r d #4yrc g}t|tr|jD]\}}t|tr(|jdj ||>t|t r(|jdj ||vt|t tttfr(|jdj ||tjdt|t rg}|D]}t|tr'|jdj |:t|t r'|jdj |qt|tt ttfr|j|tjd|jdj dj|dj|S) N {0}={{{1}}}r3zTSupported types are, dictionaries, lists, strings, integer_types, boolean and float.rz{{{0}}}z{0}z[{0}],) rrr6rSr&rKrfloatrrrr"ru)rret_outkvl_outrUrprocess_complex_argss rrz"main..process_complex_args5s dD ! A1a&NN=#7#7;OPQ;R#ST4(NN9#3#3A7KA7N#OPM5#t#DENN9#3#3A{1~#FG$$)$A A dD !E AdD)LL!1!12Ft2L!MNd+LL.B4.H!IJsM5$&GHLLT!23$$)$A A NN7>>#((5/: ;xx  rz-varrr3z -var-filez -lock=truez -lock=falsez-lock-timeout=%dsrm)TF)rNrNrz=Could not find plan_file "{0}", check the path and try again.rz - destroyzAborting command because it would destroy some resources. Consider switching the 'check_destroy' to false to suppress this errorz-destroyshowr rrn)rrCstdout stdout_linesstderr stderr_linesroz 0 added, 0 changedz 0 destroyedoutputrrLr zcCould not get Terraform outputs. This usually means none have been defined. stdout: {0} stderr: {1}zKFailure when getting Terraform outputs. Exited {0}. stdout: {1} stderr: {2})rr>)rwr=outputsrrr>rdiffr)'rrrparamsget get_bin_pathrr r#r$isfilerurFrWr_rbr7rSr6rr&rKrr+anyr"r_diff check_moderrrstrip splitlinesr/r-rrrf exit_json),r(rr<r=rrwrrrr*r.rr8r9r:rrr;r>checked_version DESTROY_ARGS APPLY_ARGSrTr)rrrAr}needs_applicationrrDrE result_diffplan_absent_args diff_commandrCroutputs_command outputs_text outputs_errrresultrrs, @@rmainrs  t&9 &) 6F; y9  !fe<  y2RS  ' 659 !*:);&SYZ ' ( fubA 640 5* 7  V,! ""&6F!C# $"vu=% & VT:' (FE:) *%(+ ,"vu=- 0y;-89 5F:==$$^4L}}  /H==$$^4L !!+.Imm''(9:O MM  g &E !!+.4"I==$$^4Lmm''(9:O !!+.I""<0J""<0J]]&&'78N!==,,-CD}}(();<]]&&'78NMM%%o6M}}(();<*&&{T&BC!'!*-OO$|H'==9 Q @ L   \CWYik{~JLU V)'!*lCMY9, M%0 0 WQZy A WQZy A z" ( |$ fmm// >J(6==+<+<]+KKL!:NOO% DAq!T"%%!((,@,CD'At$%%$$Q(->~-NNOmm *0b' 1~&'"-wHC ~& )  |c1I=>y@YZ [ NN9 %   !`!g!ghq!r  s:DWl\jlvEK]]EVEVW`Eachjtv;A7 $c3 I -K34F   "j  ky!&K ||v(( H  *| >HR^`npzIOIZIZ[dIegln~AJ?K ;I(#sG FGY? %11,T`1aK' 4 7Y'94 \=;ST   "S*-..*:3*-..*:!$'!2  4 !2!2u 7I))'E|)T C 7Y'94 \=;ST   "S*-..*:3*-..*:!$'!2  4 ! +EX4E_bIbGqz8['B[Q[E\\O$*$6$6L$6$Y!B kG Qw {CCDPR]^ _ q88>rrsA@ a FB H B 624[  a"|*$ =@@6r(V{| zFr