From 5237c7f67abe8787059f8d51de06bae587c412ba Mon Sep 17 00:00:00 2001
From: Chris Wright <chris@dxw.com>
Date: Thu, 18 Jul 2024 14:30:02 +0100
Subject: [PATCH] Create empty service env file

* When a new service is deployed, if the .env file doesn't exist in the
  environment files S3 bucket, the initial deployment will fail and
  terraform stops
* This adds a script to create an empty .env file for the service, only
  if the file doesn't exist (It won't overwrite existing files). The
  script is then ran when the bucklet or service name changes
---
 README.md                                     |  1 +
 ...structure-service-codedeploy-blue-green.tf |  1 +
 ecs-cluster-infrastructure-service.tf         | 19 +++++++
 local-exec-scripts/create-empty-s3-object.sh  | 49 +++++++++++++++++++
 4 files changed, 70 insertions(+)
 create mode 100755 local-exec-scripts/create-empty-s3-object.sh

diff --git a/README.md b/README.md
index 9226eb2..73d227a 100644
--- a/README.md
+++ b/README.md
@@ -351,6 +351,7 @@ This project creates and manages resources within an AWS account for infrastruct
 | [random_password.infrastructure_ecs_cluster_service_cloudfront_bypass_protection_secret](https://registry.terraform.io/providers/hashicorp/random/latest/docs/resources/password) | resource |
 | [random_password.infrastructure_rds_root](https://registry.terraform.io/providers/hashicorp/random/latest/docs/resources/password) | resource |
 | [terraform_data.infrastructure_ecs_cluster_service_blue_green_create_codedeploy_deployment](https://registry.terraform.io/providers/hashicorp/terraform/latest/docs/resources/data) | resource |
+| [terraform_data.infrastructure_ecs_cluster_service_env_file](https://registry.terraform.io/providers/hashicorp/terraform/latest/docs/resources/data) | resource |
 | [archive_file.ecs_cluster_infrastructure_draining_lambda](https://registry.terraform.io/providers/hashicorp/archive/latest/docs/data-sources/file) | data source |
 | [archive_file.ecs_cluster_infrastructure_ecs_asg_diff_metric_lambda](https://registry.terraform.io/providers/hashicorp/archive/latest/docs/data-sources/file) | data source |
 | [archive_file.ecs_cluster_infrastructure_pending_task_metric_lambda](https://registry.terraform.io/providers/hashicorp/archive/latest/docs/data-sources/file) | data source |
diff --git a/ecs-cluster-infrastructure-service-codedeploy-blue-green.tf b/ecs-cluster-infrastructure-service-codedeploy-blue-green.tf
index 0e17ee0..e2f559e 100644
--- a/ecs-cluster-infrastructure-service-codedeploy-blue-green.tf
+++ b/ecs-cluster-infrastructure-service-codedeploy-blue-green.tf
@@ -173,5 +173,6 @@ resource "terraform_data" "infrastructure_ecs_cluster_service_blue_green_create_
 
 depends_on = [
   aws_codepipeline.infrastructure_ecs_cluster_service,
+  terraform_data.infrastructure_ecs_cluster_service_env_file,
 ]
 }
diff --git a/ecs-cluster-infrastructure-service.tf b/ecs-cluster-infrastructure-service.tf
index 91e67c6..de7ec4d 100644
--- a/ecs-cluster-infrastructure-service.tf
+++ b/ecs-cluster-infrastructure-service.tf
@@ -193,6 +193,25 @@ resource "aws_iam_role_policy_attachment" "infrastructure_ecs_cluster_service_ta
   policy_arn = aws_iam_policy.infrastructure_ecs_cluster_service_task_custom[each.key].arn
 }
 
+
+resource "terraform_data" "infrastructure_ecs_cluster_service_env_file" {
+  for_each = local.infrastructure_ecs_cluster_services
+
+  triggers_replace = [
+    aws_ecs_service.infrastructure_ecs_cluster_service[each.key].name,
+    aws_s3_bucket.infrastructure_ecs_cluster_service_environment_files[0].bucket,
+  ]
+
+  provisioner "local-exec" {
+    interpreter = ["/bin/bash", "-c"]
+    command     = <<EOF
+      ${path.root}/local-exec-scripts/create-empty-s3-object.sh \
+      -b "${aws_s3_bucket.infrastructure_ecs_cluster_service_environment_files[0].bucket}" \
+      -k "${each.key}.env"
+    EOF
+  }
+}
+
 resource "aws_ecs_task_definition" "infrastructure_ecs_cluster_service" {
   for_each = local.infrastructure_ecs_cluster_services
 
diff --git a/local-exec-scripts/create-empty-s3-object.sh b/local-exec-scripts/create-empty-s3-object.sh
new file mode 100755
index 0000000..ca4db23
--- /dev/null
+++ b/local-exec-scripts/create-empty-s3-object.sh
@@ -0,0 +1,49 @@
+#!/bin/bash
+
+# exit on failures
+set -e
+set -o pipefail
+
+usage() {
+  echo "Usage: $(basename "$0") [OPTIONS]" 1>&2
+  echo "  -h   - help"
+  echo "  -b   - Bucket"
+  echo "  -k   - Key"
+  exit 1
+}
+
+while getopts "b:k:h" opt; do
+  case $opt in
+    b)
+      BUCKET=$OPTARG
+      ;;
+    k)
+      KEY=$OPTARG
+      ;;
+    h)
+      usage
+      ;;
+    *)
+      usage
+      ;;
+  esac
+done
+
+if [[
+  -z "$BUCKET" ||
+  -z "$KEY"
+]]
+then
+  usage
+fi
+
+if ! aws s3api head-object --bucket "$BUCKET" --key "$KEY" 2>/dev/null
+then
+    # If the file does not exist, create an empty file
+    touch /tmp/empty_file.txt
+    aws s3api put-object --bucket "$BUCKET" --key "$KEY" --body /tmp/empty_file.txt
+    rm /tmp/empty_file.txt
+    echo "==> Empty file created in S3 bucket"
+else
+    echo "==> File already exists in S3 bucket, skipping creation"
+fi