Add 'ingress' option to docker_network module

plugins/modules/docker_network.py

@@ -96,6 +96,11 @@
       - Enable IPv6 networking.
     type: bool
 
+  ingress:
+    description:
+      - Enable swarm routing-mesh.
+    type: bool
+
   ipam_driver:
     description:
       - Specify an IPAM driver.
@@ -309,6 +314,7 @@ def __init__(self, client):
         self.labels = None
         self.debug = None
         self.enable_ipv6 = None
+        self.ingress = None
         self.scope = None
         self.attachable = None
 
@@ -493,6 +499,11 @@ def has_different_config(self, net):
                             parameter=self.parameters.enable_ipv6,
                             active=net.get('EnableIPv6', False))
 
+        if self.parameters.ingress is not None and self.parameters.ingress != net.get('Ingress', False):
+            differences.add('ingress',
+                            parameter=self.parameters.ingress,
+                            active=net.get('Ingress', False))
+
         if self.parameters.internal is not None and self.parameters.internal != net.get('Internal', False):
             differences.add('internal',
                             parameter=self.parameters.internal,
@@ -537,6 +548,8 @@ def create_network(self):
                 data['ConfigFrom'] = {'Network': self.parameters.config_from}
             if self.parameters.enable_ipv6:
                 data['EnableIPv6'] = True
+            if self.parameters.ingress:
+                data['Ingress'] = True
             if self.parameters.internal:
                 data['Internal'] = True
             if self.parameters.scope is not None:
@@ -679,6 +692,7 @@ def main():
             aux_addresses=dict(type='dict'),
         )),
         enable_ipv6=dict(type='bool'),
+        ingress=dict(type='bool'),
         internal=dict(type='bool'),
         labels=dict(type='dict', default={}),
         debug=dict(type='bool', default=False),

tests/integration/targets/docker_network/tasks/tests/overlay.yml

@@ -60,3 +60,55 @@
     docker_swarm:
       state: absent
       force: true
+
+####################################################################
+## ingress #########################################################
+####################################################################
+
+- block:
+  # Overlay networks require swarm initialization before they'll work
+  - name: swarm
+    docker_swarm:
+      state: present
+      advertise_addr: "{{ ansible_default_ipv4.address | default('127.0.0.1') }}"
+
+  - name: ingress
+    docker_network:
+      name: "{{ nname_1 }}"
+      driver: overlay
+      ingress: true
+    register: ingress_1
+
+  - name: ingress (idempotency)
+    docker_network:
+      name: "{{ nname_1 }}"
+      driver: overlay
+      ingress: true
+    register: ingress_2
+
+  - name: ingress (change)
+    docker_network:
+      name: "{{ nname_1 }}"
+      driver: overlay
+      ingress: false
+    register: ingress_3
+
+  - name: cleanup network
+    docker_network:
+      name: "{{ nname_1 }}"
+      state: absent
+      force: true
+
+  - assert:
+      that:
+      - ingress_1 is changed
+      - ingress_2 is not changed
+      - ingress_3 is changed
+
+  always:
+  - name: cleanup swarm
+    docker_swarm:
+      state: absent
+      force: true
+
+