Ansible 2 Cloud Automation Cookbook

How to do it...

1. We will create a firewall rule with source tag using the gce_net module:

- name: Create Firewall Rule with Source Tags  gce_net:    name: my-network    fwname: "allow-http"    allowed: tcp:80,8080    state: "present"    target_tags: "http"    subnet_region: us-west1    service_account_email: "{{ service_account_email }}"    project_id: "{{ project_id }}"    credentials_file: "{{ credentials_file }}"  tags:  - recipe6 

2. Using tags for firewalls is not possible all the time. A lot of organizations whitelist internal IP ranges or allow office IPs to reach the instances over the network. A simple way to allow a range of IP addresses is to use a source range:

- name: Create Firewall Rule with Source Range  gce_net:    name: my-network fwname: "allow-internal" ...