Skip to content

Deployment role for CloudFormation #44

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
yeslayla wants to merge 3 commits into
base: development
Choose a base branch
from
Open

Deployment role for CloudFormation #44

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
edb09fb
Deployment role for CloudFormation
yeslayla Jan 7, 2020
a1a33f4
Remove RoleARN from waiter
yeslayla Jan 13, 2020
08f013e
Remove from describe stacks
yeslayla Jan 13, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
30 changes: 20 additions & 10 deletions deployer/cloudformation.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -95,21 +95,19 @@ def cancel_create(self, signal, frame):
def cancel_update(self, signal, frame):
logger.critical('Process Interupt')
logger.critical('Cancelling Stack Update: %s' % self.stack_name)
self.client.cancel_update_stack(StackName=self.stack_name)
self.client.cancel_update_stack(RoleARN=self.role, StackName=self.stack_name)
exit(1)

@retry(ClientError,logger=logger)
def get_outputs(self):
resp = self.client.describe_stacks(
StackName=self.stack_name)
resp = self.client.describe_stacks(RoleARN=self.role, StackName=self.stack_name)
self.outputs = resp['Stacks'][0]['Outputs']
return self.outputs

@retry(ClientError,tries=6,logger=logger)
def reload_stack_status(self):
try:
resp = self.client.describe_stacks(
StackName=self.stack_name)
resp = self.client.describe_stacks(StackName=self.stack_name)
self.stack_status = resp['Stacks'][0]['StackStatus']
except Exception as e:
self.stack_status = 'False'
Expand All @@ -118,6 +116,7 @@ def reload_stack_status(self):
def reload_change_set_status(self, change_set_name):
try:
resp = self.client.describe_change_set(
RoleARN=self.role,
ChangeSetName=change_set_name,
StackName=self.stack_name
)
Expand Down Expand Up @@ -218,8 +217,10 @@ def create_stack(self):
'CAPABILITY_AUTO_EXPAND'
]
}
args.update({"RoleARN": self.role}) if self.role else logger.debug("Not using deployment role!")
args.update({'TemplateBody': self.template_body} if self.template_body else {"TemplateURL": self.template_url})
args.update({'TimeoutInMinutes': self.timeout} if self.timeout else {})

args.update({'TimeoutInMinutes': self.timeout}) if self.timeout else logger.debug("Not using timeout!")
if self.template_body:
logger.info("Using local template due to null template bucket")
self.client.create_stack(**args)
Expand Down Expand Up @@ -264,6 +265,7 @@ def update_stack(self):
'CAPABILITY_AUTO_EXPAND'
]
}
args.update({"RoleARN": self.role}) if self.role else logger.debug("Not using deployment role!")
args.update({'TemplateBody': self.template_body} if self.template_body else {"TemplateURL": self.template_url})
if self.template_body:
logger.info("Using local template due to null template bucket")
Expand All @@ -288,7 +290,7 @@ def update_waiter(self, start_time):
self.output_events(start_time, 'update')
else:
try:
waiter.wait(StackName=self.stack_name)
waiter.wait(RoleARN=self.role, StackName=self.stack_name)
except WaiterError as e:
status = self.reload_stack_status()
logger.info(status)
Expand Down Expand Up @@ -337,7 +339,9 @@ def output_events(self, start_time, action):
count += 1

def delete_stack(self):
self.client.delete_stack(StackName=self.stack_name)
args = { "StackName" : self.stack_name }
args.update({"RoleARN": self.role}) if self.role else logger.debug("Not using deployment role!")
self.client.delete_stack(**args)
logger.info(self.colors['error'] + "Sent delete request to stack" + self.colors['reset'])
return True

Expand All @@ -347,11 +351,13 @@ def get_latest_change_set_name(self):
while 'NextToken' in resp or latest == None:
if 'NextToken' in resp:
resp = self.client.list_change_sets(
RoleARN=self.role,
StackName=self.stack_name,
NextToken=resp['NextToken']
)
else:
resp = self.client.list_change_sets(
RoleARN=self.role,
StackName=self.stack_name
)
for change in resp['Summaries']:
Expand All @@ -367,6 +373,7 @@ def get_change_set(self, change_set_name, change_set_description, change_set_typ
# create the change set
if self.stack_status:
resp = self.client.create_change_set(
RoleARN=self.role,
StackName=self.stack_name,
TemplateURL=self.template_url,
Parameters=self.build_params(),
Expand Down Expand Up @@ -394,12 +401,14 @@ def get_change_set(self, change_set_name, change_set_description, change_set_typ

def execute_change_set(self, change_set_name):
resp = self.client.execute_change_set(
RoleARN=self.role,
ChangeSetName=change_set_name,
StackName=self.stack_name
)

def print_change_set(self, change_set_name, change_set_description):
resp = self.client.describe_change_set(
RoleARN=self.role,
ChangeSetName=change_set_name,
StackName=self.stack_name
)
Expand All @@ -421,14 +430,14 @@ def print_change_set(self, change_set_name, change_set_description):

def check_stack_exists(self):
try:
self.client.describe_stacks(StackName=self.stack_name)
self.client.describe_stacks(RoleARN=self.role, StackName=self.stack_name)
return True
except ClientError:
return False

def describe(self):
try:
return self.client.describe_stacks(StackName=self.stack_name)['Stacks'][0]
return self.client.describe_stacks(RoleARN=self.role, StackName=self.stack_name)['Stacks'][0]
except ClientError:
return {}

Expand All @@ -446,6 +455,7 @@ def __init__(self, profile, config_file, stack, disable_rollback=False, print_ev
self.stack_name = self.get_config_att('stack_name', required=True)
self.base = self.get_config_att('sync_base', '.')
self.session = Session(profile_name=profile,region_name=self.get_config_att('region'))
self.role = self.get_config_att('deployment_role')
self.repository = self.get_repository()
self.region = self.session.region_name
self.commit = self.repository.head.object.hexsha if self.repository else 'null'
Expand Down