wg-aws/roles/aws_graviton_nano_spot/tasks/main.yml

- name: copy ssh public key
  amazon.aws.ec2_key:
    name: vpn_key
    key_material: "{{ lookup('file', '{{ ssh_pub_key_file }}') }}"

- name: network security policy that allows all traffic incoming and outgoing
  amazon.aws.ec2_group:
    name: "vpn allow all"
    description: allow all traffic/protocol/ports
    region: "{{ aws_region }}"
    rules:
      - proto: all
        cidr_ip: 0.0.0.0/0
      - proto: all
        group_name: "vpn allow all"
    rules_egress:
      - proto: all
        cidr_ip: 0.0.0.0/0
  register: security_group
           
- name: create graviton spot instance
  amazon.aws.ec2:
    region: "{{ aws_region }}"
    spot_type: persistent
    spot_wait_timeout: 120
    key_name: vpn_key
    group_id: "{{ security_group.group_id }}"
    instance_type: "{{ aws_type }}"
    image: "{{ aws_ami }}"
    wait: yes
    instance_initiated_shutdown_behavior: terminate
  register: graviton

- name: Wait for SSH to come up
  delegate_to: "{{ item.public_dns_name }}"
  wait_for_connection:
    delay: 60
    timeout: 320
  loop: "{{ graviton.instances }}"

- name: Add new instance to host group
  add_host:
    hostname: "{{ item.public_ip }}"
    groupname: launched
  loop: "{{ graviton.instances }}"

- name: Print public IP of this server
  debug:
     msg: Your instance has th public IP address  {{ item.public_ip }}
  loop: "{{ graviton.instances }}"