site.maintenance.aws-remove-all.yml

- hosts: localhost
  connection: local
  pre_tasks:
    - name: Get VPC data
      block:
        - name: Get VPC data
          ec2_vpc_net_facts:
            region: "{{ aws_region }}"
            filters:
              "tag:Project": "{{ mageops_project }}"
              "tag:Environment": "{{ mageops_environment }}"
          register: _aws_vpc
        - name: Set VPC ID
          set_fact:
            _aws_vpc_id: "{{ _aws_vpc | json_query('vpcs[0].vpc_id')}}"

    - name: Remove Auto Scaling Groups and App servers
      block:
        - name: Get Auto Scaling Groups
          ec2_asg_facts:
            region: "{{ aws_region }}"
            tags: "{{ aws_tags_base }}"
          register: _aws_asgs
        - name: Set list of ASG to drop
          set_fact:
            _aws_asgs_to_remove: "{{ _aws_asgs | json_query('results[].{ name: auto_scaling_group_name, lc: launch_configuration_name}')}}"
        - name: Remove ASGs
          ec2_asg:
            name: "{{ item.name }}"
            launch_config_name: "{{ item.lc }}"
            region: "{{ aws_region }}"
            state: absent
          with_items: "{{ _aws_asgs_to_remove }}"
      when: remove_asg

    - name: Remove other EC2 Servers
      block:
        - name: Get list of EC2 instances
          ec2_instance_facts:
            region: "{{ aws_region }}"
            filters:
              "vpc-id": "{{ _aws_vpc_id }}"
          register: _aws_ec2
        - name: Set list of EC2 instances to drop
          set_fact:
            _aws_ec2_to_remove: "{{ _aws_ec2|json_query('instances[].instance_id')}}"
        - name: Terminate instances
          ec2:
            instance_ids: "{{ _aws_ec2_to_remove }}"
            region: "{{ aws_region }}"
            state: absent
            wait: yes
      when: remove_ec2

    - name: Remove Volumes
      # Currently not working. There seems to be a bug in Ansible and tags are required
      # We do not set tags for volumes
      block:
        - name: Get list of Volumes
          ec2_vol_facts:
            region: "{{ aws_region }}"
            filters:
              "status": "available"
            #   "tag:Environment": "{{ mageops_environment }}"
          register: _aws_fact
        - debug:
            var: _aws_fact
      when: remove_vol

    - name: Remove EFS
      block:
        - name: Get list of EFS drives
          efs_facts:
            region: "{{ aws_region }}"
            tags: "{{ aws_tags_base }}"
          register: _aws_fact
        - name: Set list of EFS instances to drop
          set_fact:
            _aws_efs_to_remove: "{{ _aws_fact | json_query('ansible_facts.efs[].file_system_id')}}"
        - name: Remove EFS
          efs:
            id: "{{ item }}"
            region: "{{ aws_region }}"
            state: absent
          with_items: "{{ _aws_efs_to_remove }}"
      when: remove_efs

    - name: Remove Lambdas
      block:
        - name: Remove Lambdas
          lambda:
            name: "{{ item }}"
            state: absent
            region: "{{ aws_region }}"
          with_items:
            - "handleAutoscalingEvent-{{ mageops_app_name }}"
            - "updateVarnishBackends-{{ mageops_app_name }}"
        - name: Find ENIs
          ec2_eni_facts:
            region: "{{ aws_region }}"
          register: _aws_fact
        - name: Set list of ENIs to drop
          set_fact:
            _aws_eni_to_remove: "{{ _aws_fact | json_query(query) }}"
          vars:
            query: "network_interfaces[?vpc_id=='{{ _aws_vpc_id }}'].id"
        - name: Remove ENI for Lambda
          ec2_eni:
            state: absent
            region: "{{ aws_region }}"
            eni_id: "{{ item }}"
            force_detach: true
          with_items: "{{ _aws_eni_to_remove }}"
      when: remove_lambda

    - name: Remove Security Groups
      block:
        - name: Get list of Security Groups for VPC
          ec2_group_facts:
            region: "{{ aws_region }}"
            filters:
              "vpc-id": "{{ _aws_vpc_id }}"
          register: _aws_fact
        - name: Set list of Security Groups to drop
          set_fact:
            _aws_groups_to_remove: "{{ _aws_fact | json_query(query)}}"
          vars:
            query: "security_groups[?group_name!='default'].{id: group_id, name: group_name}"
        - name: Drop rules from SG (removes circular dependencies)
          ec2_group:
            region: "{{ aws_region }}"
            state: present
            rules: []
            purge_rules: yes
            name: "{{ item.name }}"
            description: "To be removed"
          with_items: "{{ _aws_groups_to_remove }}"
        - name: Drop Security Groups
          ec2_group:
            region: "{{ aws_region }}"
            state: absent
            name: "{{ item.name }}"
          with_items: "{{ _aws_groups_to_remove }}"
      when: remove_sg

    - name: Remove S3 Buckets
      block:
        - name: Remove S3 bucket
          s3_bucket:
            state: absent
            region: "{{ aws_region }}"
            name: "{{ item }}"
            force: yes
          with_items:
            - "{{ aws_s3_media_bucket }}"
            - "{{ aws_s3_secret_bucket }}"
      when: remove_s3

  roles:
    - role: cs.aws-ec2-cleanup
      aws_ec2_cleanup_lcs_to_keep: 0
      aws_ec2_cleanup_lc_name_prefixes:
        - "{{ mageops_app_name }}-app-"
        - "{{ mageops_app_name }}-extra-app-"
      when: remove_asg


  vars_files:
    - vars/app/credentials.yml
    - vars/app/env.yml
    - vars/aws/env.yml
  vars:
    remove_asg: yes
    remove_ec2: yes
    remove_efs: yes
    remove_lambda: yes
    remove_sg: yes
    remove_vol: no
    remove_s3: no