Hi,

Please find below my Ansible role and playbook which calls that role to 
deploy cloudformation template on to an AWS account:

main.yml file of patching-cf-ssm role

```
 cat main.yml
---

- name: Check the mandatory parameters are provided
  assert:
    that:
      - ({{ variable_check }} is defined )
      - ({{ variable_check }} is not none )
      - ({{ variable_check }} | trim != '' )
  with_items:
    - Managed
    - Patching
  loop_control:
    loop_var: variable_check

- name: Check the environment variables are provided
  assert:
    that:
      - ({{ variable_check }} is defined )
      - ({{ variable_checl }} is not none )
      - ({{ variable_check }} | trim != '' )
  with_items:
    - aws_region
    - environment_type
    - assumed_role
  loop_control:
   loop_var: variable_check

# tasks file for patching-cf-ssm
- include_vars: "{{playbook_dir}}/vars/patching-config.yml" #Variable file 
for the below template (MaintenanceWindow.yml)

- name: create a cloudformation stack
  cloudformation:
    stack_name: "Melton-ansible-cloudformation"
    state: "present"
    disable_rollback: true
    template: "roles/patching-cf-ssm/files/MaintenanceWindow.yml"
  #environment:
    #AWS_ACCESS_KEY_ID: "{{ assumed_role.sts_creds.access_key }}"
    #AWS_SECRET_ACCESS_KEY: "{{ assumed_role.sts_creds.secret_key }}"
    #AWS_SECURITY_TOKEN: "{{ assumed_role.sts_creds.session_token }}"
*  when: {{ Managed: false }} | {{ Patching: disabled }} | {{ Backup: 
disabled }}*
*  when: {{ Managed: false }} | {{ Patching: enabled }} | {{ Backup: 
disabled }}*
*  when: {{ Managed: true }} | {{ Patching: disabled }} | {{ Backup: 
disabled }}*
...
pwd
ansible/playbooks/roles/patching-cf-ssm/tasks
```

and It's called in main.yml as below

```
cat patching.yml
---
- hosts: localhost
  roles:
    - patching-cf-ssm
```


Challenge is I do *NOT* want to deploy any CF template if any one of the 
"when" conditions satisfy.

How do I go about it?

Please assist

Thanks
Ameya

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/d8fe99eb-73f5-4fbc-895e-b9ae00407fceo%40googlegroups.com.

Reply via email to