On this page
cs_network_acl - Manages network access control lists (ACL) on Apache CloudStack based clouds.
New in version 2.4.
Synopsis
- Create and remove network ACLs.
Requirements (on host that executes module)
- python >= 2.6
- cs >= 0.6.10
Options
| parameter | required | default | choices | comments |
|---|---|---|---|---|
| account |
no |
Account the network ACL rule is related to.
|
||
| api_http_method |
no | get |
|
HTTP method used.
|
| api_key |
no |
API key of the CloudStack API.
|
||
| api_region |
no | cloudstack |
Name of the ini section in the cloustack.ini file.
|
|
| api_secret |
no |
Secret key of the CloudStack API.
|
||
| api_timeout |
no | 10 |
HTTP timeout.
|
|
| api_url |
no |
URL of the CloudStack API e.g. https://cloud.example.com/client/api.
|
||
| description |
no |
Description of the network ACL.
If not set, identical to name.
|
||
| domain |
no |
Domain the network ACL rule is related to.
|
||
| name |
yes |
Name of the network ACL.
|
||
| poll_async |
no | True |
Poll async jobs until job has finished.
|
|
| project |
no |
Name of the project the network ACL is related to.
|
||
| state |
no | present |
|
State of the network ACL.
|
| vpc |
yes |
VPC the network ACL is related to.
|
||
| zone |
no |
Name of the zone the VPC is related to.
If not set, default zone is used.
|
Examples
# create a network ACL
local_action:
module: cs_network_acl
name: Webserver ACL
description: a more detailed description of the ACL
vpc: customers
# remove a network ACL
local_action:
module: cs_network_acl
name: Webserver ACL
vpc: customers
state: absent
Return Values
Common return values are documented here Return Values, the following are the fields unique to this module:
| name | description | returned | type | sample |
|---|---|---|---|---|
| description |
Description of the network ACL.
|
success | string | Example description of a network ACL |
| name |
Name of the network ACL.
|
success | string | customer acl |
| vpc |
VPC of the network ACL.
|
success | string | customer vpc |
| zone |
Zone the VPC is related to.
|
success | string | ch-gva-2 |
Notes
Note
- Ansible uses the
cslibrary’s configuration method if credentials are not provided by the argumentsapi_url,api_key,api_secret. Configuration is read from several locations, in the following order. - TheCLOUDSTACK_ENDPOINT,CLOUDSTACK_KEY,CLOUDSTACK_SECRETandCLOUDSTACK_METHOD.CLOUDSTACK_TIMEOUTenvironment variables. - ACLOUDSTACK_CONFIGenvironment variable pointing to an.inifile, - Acloudstack.inifile in the current working directory. - A.cloudstack.inifile in the users home directory. Optionally multiple credentials and endpoints can be specified using ini sections incloudstack.ini. Use the argumentapi_regionto select the section name, default section iscloudstack. See https://github.com/exoscale/cs for more information. - A detailed guide about cloudstack modules can be found on http://docs.ansible.com/ansible/guide_cloudstack.html
- This module supports check mode.
Status
This module is flagged as preview which means that it is not guaranteed to have a backwards compatible interface.
For help in developing on modules, should you be so inclined, please read Community Information & Contributing, Testing Ansible and Developing Modules.
© 2012–2018 Michael DeHaan
© 2018–2019 Red Hat, Inc.
Licensed under the GNU General Public License version 3.
https://docs.ansible.com/ansible/2.4/cs_network_acl_module.html