Ansible ec2_elb_lb HTTPS到HTTP错误

Question

我已成功使用此剧本创建了一个ELB:

 - name: Create VPC network
      ec2_elb_lb:
        aws_access_key: "{{ aws_access_key }}"
        aws_secret_key: "{{ aws_secret_key }}"
        name: "ElasticLoadBalancer"
        region: us-east-1
        state: present
        subnets: "{{ Subnet.SubnetId }}"
        listeners:
           - protocol: http
             load_balancer_port: 80
             instance_port: 80
      register: elb
    - debug: msg="{{ elb }}"

但我还需要添加HTTPS入站和HTTP出站,因此我根据ec2_elb_lb模块示例添加了一个额外的侦听器:

- name: Create VPC network
      ec2_elb_lb:
        aws_access_key: "{{ aws_access_key }}"
        aws_secret_key: "{{ aws_secret_key }}"
        name: "ElasticLoadBalancer"
        region: us-east-1
        state: present
        subnets: "{{ Subnet.SubnetId }}"
        listeners:
           - protocol: http
             load_balancer_port: 80
             instance_port: 80
           - protocol: https
             load_balancer_port: 443
             instance_protocol: http
             instance_port: 80
      register: elb
    - debug: msg="{{ elb }}"

运行上面的剧本后,我收到以下消息:

failed: [localhost] => {"failed": true, "parsed": false}  
Traceback (most recent call last):  
  File "/root/.ansible/tmp/ansible-tmp-1448959476.82-159664399600608/ec2_elb_lb", line 2519, in <module>  
    main()  
  File "/root/.ansible/tmp/ansible-tmp-1448959476.82-159664399600608/ec2_elb_lb", line 693, in main  
    elb_man.ensure_ok()  
  File "/root/.ansible/tmp/ansible-tmp-1448959476.82-159664399600608/ec2_elb_lb", line 292, in ensure_ok  
    self._create_elb()  
  File "/root/.ansible/tmp/ansible-tmp-1448959476.82-159664399600608/ec2_elb_lb", line 397, in _create_elb  
    scheme=self.scheme)  
  File "/usr/lib/python2.7/site-packages/boto/ec2/elb/__init__.py", line 230, in create_load_balancer  
    params['Listeners.member.%d.SSLCertificateId' % i] = listener[4]  
IndexError: tuple index out of range  


FATAL: all hosts have already failed -- aborting  

 ansible --version
 ansible 1.9.4

Answer 1

如果要在ELB上提供HTTPS,则还需要提供SSL证书.

所以你的ec2_elb_lb任务应该是这样的:

- name: Create VPC network
      ec2_elb_lb:
        aws_access_key: "{{ aws_access_key }}"
        aws_secret_key: "{{ aws_secret_key }}"
        name: "ElasticLoadBalancer"
        region: us-east-1
        state: present
        subnets: "{{ Subnet.SubnetId }}"
        listeners:
           - protocol: http
             load_balancer_port: 80
             instance_port: 80
           - protocol: https
             load_balancer_port: 443
             instance_protocol: http
             instance_port: 80
             ssl_certificate_id: "arn:aws:iam::123456789012:server-certificate/company/servercerts/ProdServerCert"
      register: elb
    - debug: msg="{{ elb }}"