Merge pull request #1861 from govuk-one-login/AUT-3414

AUT-3414 - Deploy ServiceDownPage in integration and production environments

.github/workflows/deploy-frontend-sp.yml

@@ -3,7 +3,7 @@ name: Deploy frontend (with SAM Deploy Pipeline)
 on:
   push:
     branches:
-      - AUT-3364
+      - AUT-3414
   workflow_dispatch:
 
 jobs:

cloudformation/template.yaml

@@ -1,5 +1,8 @@
 AWSTemplateFormatVersion: '2010-09-09'
-Description: Authentication Frontend application
+
+Description: >
+  Authentication Frontend application
+
 Transform:
   - AWS::LanguageExtensions
   - AWS::Serverless-2016-10-31
@@ -48,6 +51,15 @@ Parameters:
     Default: 058264536367.dkr.ecr.eu-west-2.amazonaws.com/service-down-page-image-repository-containerrepository-5mf9vzblyt5l
 
 Conditions:
+  DeployServiceDownPage:
+    Fn::Or:
+      - Fn::Equals:
+        - !Ref Environment
+        - "integration"
+      - Fn::Equals:
+        - !Ref Environment
+        - "production"
+
   UseCodeSigning:
     Fn::Not:
       - Fn::Equals:
@@ -392,7 +404,7 @@ Resources:
   TaskDefinition:
     Type: AWS::ECS::TaskDefinition
     Properties:
-      Family: !Sub "${AWS::StackName}-ecs-task-definition"
+      Family: !Sub "${Environment}-frontend-ecs-task-definition"
       ContainerDefinitions:
         - Name: "frontend-application"
           Image: !Sub "${FrontendRegistry}:GIT-SHA-PLACEHOLDER"
@@ -813,6 +825,7 @@ Resources:
       Priority: 10
 
   ApplicationLoadBalancerListenerServiceDownRule:
+    Condition: DeployServiceDownPage
     Type: AWS::ElasticLoadBalancingV2::ListenerRule
     Properties:
       Actions:
@@ -903,6 +916,7 @@ Resources:
       ToPort: 8080
 
   ApplicationLoadBalancerSecurityGroupEgressServiceDownPage:
+    Condition: DeployServiceDownPage
     Type: AWS::EC2::SecurityGroupEgress
     Properties:
       GroupId: !GetAtt ApplicationLoadBalancerSecurityGroup.GroupId
@@ -917,6 +931,7 @@ Resources:
   #
 
   ServiceDownECSService:
+    Condition: DeployServiceDownPage
     Type: AWS::ECS::Service
     DependsOn: ApplicationLoadBalancerListenerHTTPS
     Properties:
@@ -955,6 +970,7 @@ Resources:
           Value: govuk-one-login/authentication-frontend/cloudformation/template.yaml
 
   ServiceDownSecurityGroup:
+    Condition: DeployServiceDownPage
     Type: AWS::EC2::SecurityGroup
     Properties:
       GroupDescription: Security Group to access the Service down page
@@ -991,9 +1007,10 @@ Resources:
           Value: govuk-one-login/authentication-frontend/cloudformation/template.yaml
 
   ServiceDownTaskDefinition:
+    Condition: DeployServiceDownPage
     Type: AWS::ECS::TaskDefinition
     Properties:
-      Family: !Sub "${AWS::StackName}-frontend-service-down-page-ecs-task-definition"
+      Family: !Sub "${Environment}-frontend-service-down-page-ecs-task-definition"
       ContainerDefinitions:
         - Name: "service-down-page"
           Image: !Sub "${ServiceDownPageRegistry}:GIT-SHA-PLACEHOLDER"
@@ -1026,6 +1043,7 @@ Resources:
           Value: govuk-one-login/authentication-frontend/cloudformation/template.yaml
 
   ServiceDownTaskExecutionRole:
+    Condition: DeployServiceDownPage
     Type: AWS::IAM::Role
     Properties:
       AssumeRolePolicyDocument:
@@ -1062,6 +1080,7 @@ Resources:
           Value: govuk-one-login/authentication-frontend/cloudformation/template.yaml
 
   ServiceDownLoadBalancerTargetGroup:
+    Condition: DeployServiceDownPage
     Type: AWS::ElasticLoadBalancingV2::TargetGroup
     Properties:
       Name: !Sub "${Environment}-fe-service-down"
@@ -1091,6 +1110,7 @@ Resources:
           Value: govuk-one-login/authentication-frontend/cloudformation/template.yaml
 
   ServiceDownTaskLogGroup:
+    Condition: DeployServiceDownPage
     Type: AWS::Logs::LogGroup
     Properties:
       KmsKeyId: !GetAtt KmsKey.Arn