Add awscli role for bastion

[tei-k]

Description

Authentication to eks cluster through the aws eks get-token command when using kubernetes module of scalar-terraform

ref: scalar-labs/scalar-terraform#236

Done

Add awscli role.

How to use

• AWS

 $ ansible-playbook -i ${SCALAR_K8S_CONFIG_DIR}/inventory.ini playbooks/playbook-install-tools.yml -e "install_awscli=true"

• Azure

 $ ansible-playbook -i ${SCALAR_K8S_CONFIG_DIR}/inventory.ini playbooks/playbook-install-tools.yml

[feeblefakie]

@tei-k CI seems failed. Can you check?

[tei-k]

@feeblefakie

CI seems failed. Can you check?

OK! Fixed in b9b9887.

Ref:
https://docs.github.com/en/free-pro-team@latest/actions/reference/workflow-commands-for-github-actions#adding-a-system-path

[ymorimo]

Instead of adding a flag to the Ansible command, why don't you automate it? On HVM instances, the following task would be able to tell if the current host is an EC2 instance.
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/identify_ec2_instances.html

test $(sudo dmidecode --string system-uuid 2>&1 | cut -c1-3) = "ec2"

[tei-k]

Instead of adding a flag to the Ansible command, why don't you automate it? On HVM instances, the following task would be able to tell if the current host is an EC2 instance.

Beause I'm not sure what's the best way. 🤔

This method to determine whether a system is an EC2 instance is quick but potentially inaccurate because there is a small chance that a system that is not an EC2 instance could have a UUID that starts with these characters. Furthermore, for EC2 instances that are not using Amazon Linux, the distribution's implementation of SMBIOS might represent the UUID in little-endian format, therefore the "EC2" characters do not appear at the beginning of the UUID.

[ymorimo]

@tei-k I'm not sure how likely it is that the method of checking an "ec2" at the beginning of the dmidecode output is inaccurate, but I think it's good to go with a command-line option.
I hope there is a reliable way to determine that the host is an EC2 instance.
Then, added one comment in the documentation, please take a look.

[feeblefakie]

LGTM!

[ymorimo]

LGTM!