ecr lifecycle policy updates

Author: CLJ2006

ansible/build-ecs-proxies.yml

@@ -20,5 +20,4 @@
 
   roles:
     - setup-facts
-    - build-ecs-proxies
-    - ecr-lifecycle-policy
+    - build-ecs-proxies

ansible/deploy-ecs-proxies.yml

@@ -45,7 +45,4 @@
 
   roles:
     - setup-facts
-    - deploy-ecs-proxies
-
-    # - role: ecr-lifecycle-policy 
-    #   when: RELEASE_RELEASEID is defined and RELEASE_RELEASEID != ""
+    - deploy-ecs-proxies

ansible/roles/build-ecs-proxies/tasks/build-container.yml

@@ -32,28 +32,35 @@
     cmd: "docker push {{ image_name }}"
   when: build_result.rc == 0
 
-# - name: Get existing lifecycle policy JSON for {{ service_id }}_{{ item }}
-#   ansible.builtin.command: >
-#     {{ aws_cmd }} ecr get-lifecycle-policy
-#     --repository-name {{ service_id }}_{{ item }}
-#     --query 'lifecyclePolicyText'
-#     --output text
-#   register: existing_policy
-#   failed_when: false
-#   changed_when: false
-
-# - name: Read lifecycle policy from the local file
-#   ansible.builtin.slurp:
-#     src: "{{ role_path }}/files/ecr_lifecycle.json"
-#   register: desired_policy_raw
-
-# - name: Decode lifecycle policy file
-#   set_fact:
-#     desired_policy: "{{ desired_policy_raw.content | b64decode }}"
-
-# - name: Apply lifecycle policy to ecr {{ service_id }}_{{ item }} if different
-#   ansible.builtin.command: >
-#     {{ aws_cmd }} ecr put-lifecycle-policy
-#     --repository-name {{ service_id }}_{{ item }}
-#     --lifecycle-policy-text file://{{ role_path }}/files/ecr_lifecycle.json
-#   when: existing_policy.stdout != desired_policy and build_result.rc == 0
+- name: Get existing lifecycle policy JSON for {{ service_id }}_{{ item }}
+  ansible.builtin.command: >
+    {{ aws_cmd }} ecr get-lifecycle-policy
+    --repository-name {{ service_id }}_{{ item }}
+    --query 'lifecyclePolicyText'
+    --output text
+  register: existing_policy_raw
+  failed_when: false
+  changed_when: false
+
+- name: Parse existing lifecycle policy JSON
+  set_fact:
+    existing_policy_json: "{{ existing_policy_raw.stdout | default('{}') | from_json }}"
+  when: existing_policy_raw.stdout != ""
+
+- name: Read lifecycle policy from the local file
+  ansible.builtin.slurp:
+    src: "{{ role_path }}/files/ecr_lifecycle.json"
+  register: desired_policy_raw
+
+- name: Decode lifecycle policy file
+  set_fact:
+    desired_policy_json: "{{ desired_policy_raw.content | b64decode | from_json }}"
+
+- name: Apply lifecycle policy to ecr {{ service_id }}_{{ item }} if different
+  ansible.builtin.command: >
+    {{ aws_cmd }} ecr put-lifecycle-policy
+    --repository-name {{ service_id }}_{{ item }}
+    --lifecycle-policy-text file://{{ playbook_dir }}/../../common/a-management-utils-3/ecr-lifecycle/ecr_lifecycle.json
+  when:
+    - existing_policy_json != desired_policy_json
+    - env != "prod" or prod_lifecycle_update_allowed