stack_master 1.8.2 → 1.9.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5b129610d903f89f444f4bf571bddca39bbae220a2fdeec8dabf92fa969a7c9f
-  data.tar.gz: 8f67e8393edd03829137697a8d60bd88957c1c5a1f8d10e4f0b743e2172ee5d9
+  metadata.gz: 703182eae32be458fba4518afcd5ea019579178941d5491478ca26718816d4b3
+  data.tar.gz: 5fe2acde9e09e1eb81568244268c2ff26e35f868e02de16d80dfbc03f6079e7c
 SHA512:
-  metadata.gz: 18c00deda033824ef7153b32554ae01e25a4b08eda998dfc49a5868517ff62f7532df8b3f91d98e346b95e20928bfc07cc55adae017105c9a1c74476b4eb6e9c
-  data.tar.gz: 69fa36f3acb140b94646b60fa569b80c9ac79b5b26007db7348994859231e888785592c10081af6da2c7969b192ccffeb815dab44cb60c6417fe7b2919aec649
+  metadata.gz: df7259d1e06cff12577234e58670c83676833c4d5936e825fd232fe7815740216aad539c6ba25a87b8fd3e3a466b2fb3cc2d86071d4c4e5b8ba1b62ef6493b98
+  data.tar.gz: aec708ec027cacc228e3ea2968ea9788362022effbb087e497eeca92c7ad26e196e5497971c031e56607da115b7ca9fcfb5393a830af06af734e4a971a75f53c

data/README.md

@@ -331,6 +331,24 @@ A set of possible attributes is available in the [AWS documentation](https://doc
 
 Any value can be an array of possible matches.
 
+### Latest Container from Repository
+
+Looks up the a Container Image from an ECR repository. By default this will return the latest container in a repository.
+If `tag` is specified we return the sha digest of the image with this tag.
+This avoids the issue where CloudFormation won't update a Task Definition if we use a tag such as `latest`, because it only updates resources if a parameter has changed.
+This allows us to tag an image and deploy the latest version of that image via CloudFormation and avoids versioning our tags and having to store the metadata about the latest tag version somewhere.
+
+Returns the docker repository URI, i.e. `aws_account_id.dkr.ecr.region.amazonaws.com/container@sha256:digest`
+
+```yaml
+container_image_id:
+  latest_container:
+    repository_name: nginx # Required. The name of the repository
+    registry_id: 012345678910 # The AWS Account ID the repository is located in. Defaults to the current account's default registry
+    region: us-east-1 # Defaults to the region the stack is located in
+    tag: production # By default we'll find the latest image pushed to the repository. If tag is specified we return the sha digest of the image with this tag
+```
+
 ### Environment Variable
 
 Lookup an environment variable:

data/lib/stack_master.rb

@@ -3,6 +3,7 @@ require 'yaml'
 require 'aws-sdk-acm'
 require 'aws-sdk-cloudformation'
 require 'aws-sdk-ec2'
+require 'aws-sdk-ecr'
 require 'aws-sdk-s3'
 require 'aws-sdk-sns'
 require 'aws-sdk-ssm'
@@ -74,6 +75,7 @@ module StackMaster
     autoload :Env, 'stack_master/parameter_resolvers/env'
     autoload :ParameterStore, 'stack_master/parameter_resolvers/parameter_store'
     autoload :OnePassword, 'stack_master/parameter_resolvers/one_password'
+    autoload :LatestContainer, 'stack_master/parameter_resolvers/latest_container'
   end
 
   module AwsDriver

data/lib/stack_master/parameter_resolvers/latest_container.rb

@@ -0,0 +1,55 @@
+module StackMaster
+  module ParameterResolvers
+    class LatestContainer < Resolver
+      array_resolver class_name: 'LatestContainers'
+
+      def initialize(config, stack_definition)
+        @config = config
+        @stack_definition = stack_definition
+      end
+
+      def resolve(parameters)
+        if parameters['repository_name'].nil?
+          raise ArgumentError, "repository_name parameter is required but was not supplied"
+        end
+
+        @region = parameters['region'] || @stack_definition.region
+        ecr_client = Aws::ECR::Client.new(region: @region)
+
+        images = fetch_images(parameters['repository_name'], parameters['registry_id'], ecr_client)
+        return nil if images.empty?
+
+        if !parameters['tag'].nil?
+          images.select! { |image| image.image_tags.any? { |tag| tag == parameters['tag'] } }
+        end
+        images.sort! { |image_x, image_y| image_y.image_pushed_at <=> image_x.image_pushed_at }
+        latest_image = images.first
+
+        # aws_account_id.dkr.ecr.region.amazonaws.com/repository@sha256:digest
+        "#{latest_image.registry_id}.dkr.ecr.#{@region}.amazonaws.com/#{parameters['repository_name']}@#{latest_image.image_digest}"
+      end
+
+      private
+
+      def fetch_images(repository_name, registry_id, ecr)
+        images = []
+        next_token = nil
+        while
+          resp = ecr.describe_images({
+            repository_name: repository_name,
+            registry_id: registry_id,
+            next_token: next_token,
+            filter: {
+              tag_status: "TAGGED",
+            },
+          })
+
+          images += resp.image_details
+          next_token = resp.next_token
+          break if next_token.nil?
+        end
+        images
+      end
+    end
+  end
+end

data/lib/stack_master/version.rb

@@ -1,3 +1,3 @@
 module StackMaster
-  VERSION = "1.8.2"
+  VERSION = "1.9.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: stack_master
 version: !ruby/object:Gem::Version
-  version: 1.8.2
+  version: 1.9.0
 platform: ruby
 authors:
 - Steve Hodgkiss
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-08-17 00:00:00.000000000 Z
+date: 2018-08-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -235,6 +235,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1'
+- !ruby/object:Gem::Dependency
+  name: aws-sdk-ecr
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1'
 - !ruby/object:Gem::Dependency
   name: diffy
   requirement: !ruby/object:Gem::Requirement
@@ -415,6 +429,7 @@ files:
 - lib/stack_master/parameter_resolvers/env.rb
 - lib/stack_master/parameter_resolvers/latest_ami.rb
 - lib/stack_master/parameter_resolvers/latest_ami_by_tags.rb
+- lib/stack_master/parameter_resolvers/latest_container.rb
 - lib/stack_master/parameter_resolvers/one_password.rb
 - lib/stack_master/parameter_resolvers/parameter_store.rb
 - lib/stack_master/parameter_resolvers/secret.rb