82 lines
4.3 KiB
Diff
82 lines
4.3 KiB
Diff
|
--- ClusterLabs-resource-agents-e711383f/heartbeat/aws-vpc-move-ip 2020-09-23 11:57:38.855067216 +0200
|
||
|
|
+++ aws-vpc-move-ip.tmp 2020-09-23 11:57:17.993045991 +0200
|
||
|
|
@@ -37,13 +37,17 @@
|
||
|
|
# Defaults
|
||
|
|
OCF_RESKEY_awscli_default="/usr/bin/aws"
|
||
|
|
OCF_RESKEY_profile_default="default"
|
||
|
|
+OCF_RESKEY_region_default=""
|
||
|
|
OCF_RESKEY_routing_table_role_default=""
|
||
|
|
OCF_RESKEY_monapi_default="false"
|
||
|
|
|
||
|
|
: ${OCF_RESKEY_awscli=${OCF_RESKEY_awscli_default}}
|
||
|
|
: ${OCF_RESKEY_profile=${OCF_RESKEY_profile_default}}
|
||
|
|
+: ${OCF_RESKEY_region=${OCF_RESKEY_region_default}}
|
||
|
|
: ${OCF_RESKEY_routing_table_role=${OCF_RESKEY_routing_table_role_default}}
|
||
|
|
: ${OCF_RESKEY_monapi=${OCF_RESKEY_monapi_default}}
|
||
|
|
+
|
||
|
|
+[ -n "$OCF_RESKEY_region" ] && region_opt="--region $OCF_RESKEY_region"
|
||
|
|
#######################################################################
|
||
|
|
|
||
|
|
|
||
|
|
@@ -87,6 +91,14 @@
|
||
|
|
<content type="string" default="${OCF_RESKEY_profile_default}" />
|
||
|
|
</parameter>
|
||
|
|
|
||
|
|
+<parameter name="region">
|
||
|
|
+<longdesc lang="en">
|
||
|
|
+Valid AWS region name (e.g., 'us-west-2')
|
||
|
|
+</longdesc>
|
||
|
|
+<shortdesc lang="en">region name</shortdesc>
|
||
|
|
+<content type="string" default="${OCF_RESKEY_region_default}" />
|
||
|
|
+</parameter>
|
||
|
|
+
|
||
|
|
<parameter name="ip" required="1">
|
||
|
|
<longdesc lang="en">
|
||
|
|
VPC private IP address
|
||
|
|
@@ -151,7 +163,7 @@
|
||
|
|
execute_cmd_as_role(){
|
||
|
|
cmd=$1
|
||
|
|
role=$2
|
||
|
|
- output="$($OCF_RESKEY_awscli sts assume-role --role-arn $role --role-session-name AWSCLI-RouteTableUpdate --profile $OCF_RESKEY_profile --output=text)"
|
||
|
|
+ output="$($OCF_RESKEY_awscli sts assume-role --role-arn $role --role-session-name AWSCLI-RouteTableUpdate --profile $OCF_RESKEY_profile $region_opt --output=text)"
|
||
|
|
export AWS_ACCESS_KEY_ID="$(echo $output | awk -F" " '$4=="CREDENTIALS" {print $5}')"
|
||
|
|
export AWS_SECRET_ACCESS_KEY="$(echo $output | awk -F" " '$4=="CREDENTIALS" {print $7}')"
|
||
|
|
export AWS_SESSION_TOKEN="$(echo $output | awk -F" " '$4=="CREDENTIALS" {print $8}')"
|
||
|
|
@@ -198,11 +210,11 @@
|
||
|
|
for rtb in $(echo $OCF_RESKEY_routing_table | sed -e 's/,/ /g'); do
|
||
|
|
ocf_log info "monitor: check routing table (API call) - $rtb"
|
||
|
|
if [[ -z "${OCF_RESKEY_routing_table_role}" ]]; then
|
||
|
|
- cmd="$OCF_RESKEY_awscli --profile $OCF_RESKEY_profile --output text ec2 describe-route-tables --route-table-ids $rtb --query RouteTables[*].Routes[?DestinationCidrBlock=='$OCF_RESKEY_ip/32'].InstanceId"
|
||
|
|
+ cmd="$OCF_RESKEY_awscli --profile $OCF_RESKEY_profile $region_opt --output text ec2 describe-route-tables --route-table-ids $rtb --query RouteTables[*].Routes[?DestinationCidrBlock=='$OCF_RESKEY_ip/32'].InstanceId"
|
||
|
|
ocf_log debug "executing command: $cmd"
|
||
|
|
ROUTE_TO_INSTANCE="$($cmd)"
|
||
|
|
else
|
||
|
|
- cmd="$OCF_RESKEY_awscli --output text ec2 describe-route-tables --route-table-ids $rtb --query RouteTables[*].Routes[?DestinationCidrBlock=='$OCF_RESKEY_ip/32'].InstanceId"
|
||
|
|
+ cmd="$OCF_RESKEY_awscli $region_opt --output text ec2 describe-route-tables --route-table-ids $rtb --query RouteTables[*].Routes[?DestinationCidrBlock=='$OCF_RESKEY_ip/32'].InstanceId"
|
||
|
|
ROUTE_TO_INSTANCE="$(execute_cmd_as_role "$cmd" $OCF_RESKEY_routing_table_role)"
|
||
|
|
fi
|
||
|
|
ocf_log debug "Overlay IP is currently routed to ${ROUTE_TO_INSTANCE}"
|
||
|
|
@@ -283,11 +295,11 @@
|
||
|
|
|
||
|
|
for rtb in $(echo $OCF_RESKEY_routing_table | sed -e 's/,/ /g'); do
|
||
|
|
if [[ -z "${OCF_RESKEY_routing_table_role}" ]]; then
|
||
|
|
- cmd="$OCF_RESKEY_awscli --profile $OCF_RESKEY_profile --output text ec2 replace-route --route-table-id $rtb --destination-cidr-block ${OCF_RESKEY_ip}/32 --network-interface-id $EC2_NETWORK_INTERFACE_ID"
|
||
|
|
+ cmd="$OCF_RESKEY_awscli --profile $OCF_RESKEY_profile $region_opt --output text ec2 replace-route --route-table-id $rtb --destination-cidr-block ${OCF_RESKEY_ip}/32 --network-interface-id $EC2_NETWORK_INTERFACE_ID"
|
||
|
|
ocf_log debug "executing command: $cmd"
|
||
|
|
$cmd
|
||
|
|
else
|
||
|
|
- cmd="$OCF_RESKEY_awscli --output text ec2 replace-route --route-table-id $rtb --destination-cidr-block ${OCF_RESKEY_ip}/32 --network-interface-id $EC2_NETWORK_INTERFACE_ID"
|
||
|
|
+ cmd="$OCF_RESKEY_awscli $region_opt --output text ec2 replace-route --route-table-id $rtb --destination-cidr-block ${OCF_RESKEY_ip}/32 --network-interface-id $EC2_NETWORK_INTERFACE_ID"
|
||
|
|
update_response="$(execute_cmd_as_role "$cmd" $OCF_RESKEY_routing_table_role)"
|
||
|
|
fi
|
||
|
|
rc=$?
|
||
|
|
@@ -397,7 +409,7 @@
|
||
|
|
ec2ip_monitor;;
|
||
|
|
validate-all)
|
||
|
|
exit $?;;
|
||
|
|
- *)
|
||
|
|
+ *)
|
||
|
|
echo $USAGE
|
||
|
|
exit $OCF_ERR_UNIMPLEMENTED
|
||
|
|
;;
|