From ebb6282833b497c862b99d5d4dc5d266d7190972 Mon Sep 17 00:00:00 2001
From: Michele Cereda <cereda.michele@gmail.com>
Date: Tue, 10 Dec 2024 02:41:54 +0100
Subject: [PATCH] chore(ansible): compare time

---
 snippets/ansible/tasks.yml | 29 +++++++++++++++++++++++++++++
 1 file changed, 29 insertions(+)

diff --git a/snippets/ansible/tasks.yml b/snippets/ansible/tasks.yml
index eced24f..7a3aa8c 100644
--- a/snippets/ansible/tasks.yml
+++ b/snippets/ansible/tasks.yml
@@ -835,6 +835,10 @@
                 state: touch
                 mode: '0755'
               with_dict: "{{ users_info }}"
+    - name: Compare time
+      # https://docs.ansible.com/ansible/latest/collections/ansible/builtin/to_datetime_filter.html
+      # https://docs.python.org/3/library/datetime.html#strftime-and-strptime-behavior
+      block: []
 
 - name: AWS-specific operations
   tags: never
@@ -898,6 +902,31 @@
             resource: i-xyzxyz01
             tags:
               MyNewTag: value
+        - name: Test the remaining time for role assumption is > 5m
+          # https://docs.ansible.com/ansible/latest/collections/ansible/builtin/to_datetime_filter.html
+          # https://docs.python.org/3/library/datetime.html#strftime-and-strptime-behavior
+          ansible.builtin.debug:
+            msg: >-
+              {{
+                dict([
+                  [
+                    'assumed_role.sts_creds.expiration',
+                    assumed_role.sts_creds.expiration | to_datetime('%Y-%m-%dT%H:%M:%S+00:00')
+                  ],
+                  [ 'now()', now() ],
+                  [
+                    'assumed_role.sts_creds.expiration - now()',
+                    assumed_role.sts_creds.expiration | to_datetime('%Y-%m-%dT%H:%M:%S+00:00') - now()
+                  ],
+                  [
+                    'condition',
+                    (
+                      assumed_role.sts_creds.expiration
+                      | to_datetime('%Y-%m-%dT%H:%M:%S+00:00') - now()
+                    ).total_seconds() > 300
+                  ],
+                ])
+              }}
     - name: Update the play's inventory with a newly started instance
       tags:
         - update_inventory