Molecule and non standard connections (aws_ssm)

[kg-87]

Hello:

I'm using molecule for role testing and have been using it in conjunction with SSH.

My requirements have changed a little and I'd like to use the aws_ssm ansible connector for testing of an instance "in-place" in a private subnet.

Running molecule create the instance is created in the correct subnet and the correct IAM role allowing ssm connections applied to the instance. Running a manual cli ssm connection works (also as expected)

unfortunately, when i Look at the inventory file created by molecule, it only refers to IP, which assumes by default I'm using SSH. I also noticed when using molecule login the inventory is recreated. removing any of the changes made to help test it out.

Has anyone successfully replaced SSH with SSM in conjunction with ansible and/or molecule and if so, would they be able to show some examples?

I've added my molecule.yml below: I've tried a few things!

molecule.yml

dependency:
  name: galaxy
driver:
  name: ec2
platforms:
  - name: ec2-instance
    assign_public_ip: false
    image_name: amzn2-ami-kernel-5.10-.....
    image_owner: "137112412989"
    instance_role: arn:aws:iam::xxxxxxxxxxx:role/role-with-ssm-permissions
    instance_type: t2.micro
    region: eu-west-1
    tags:
      Name: molecule_instance
    vpc_subnet_id: subnet-00xxxxxxxxxx
    connection: aws_ssm

provisioner:
  name: ansible
  # config_options:
  #   defaults:
  #     ansible_connection: aws_ssm
  #     ansible_aws_ssm_bucket_name: "s3 bucket for copy"
  #     ansible_aws_ssm_region: "eu-west-1"
  #     ansible_user: 'ssm-user'
  #     ansible_become: true
  # ansible_args:
  # - --inventory=aws_ec2.yaml
  # - --limit=" instanceid of host"

  env:
    ANSIBLE_ROLES_PATH: "../../roles"
verifier:
  name: ansible

[zhan9san]

@kg-87

Currently, it is not supported.

Could you help submit a PR to fix this issue?

Related code can be found here, https://github.com/ansible-community/molecule-plugins/blob/5ebdfc60e457d5303e45fb237840e6592b98715f/src/molecule_plugins/ec2/driver.py#L221

[nandac]

@kg-87 Is SSM as a connection type still unavailable as a feature in Molecule?

Are there any workarounds?

SSH with a keypair is disallowed on the images we use at my company and opening it up just for Ansible testing is not a desirable solution.

I am quite happy to make the PR but I am not sure what else would be needed to get this working.