create sdlf repositories in a separate stack from sdlf-main codepipeline

this allows creating git branches ahead of CodePipelines - then they won't fail so fast,
allowing the CodePipeline stopper to kick in (see #261 or 4e290af)

Author: cnfait

deploy.sh

@@ -164,16 +164,15 @@ devops_account () {
     aws cloudformation package \
         --s3-bucket "$ARTIFACTS_BUCKET" --s3-prefix template-cicd-sdlf-repositories \
         --template-file "$DIRNAME"/sdlf-cicd/template-cicd-sdlf-repositories.yaml \
-        --output-template-file "$DIRNAME"/output/packaged-template.yaml \
+        --output-template-file "$DIRNAME"/output/packaged-template-cicd-sdlf-repositories.yaml \
         --region "$REGION" \
         --profile "$DEVOPS_AWS_PROFILE"
     STACK_NAME=sdlf-cicd-sdlf-repositories
     aws cloudformation deploy \
         --s3-bucket "$ARTIFACTS_BUCKET" --s3-prefix sdlf-cicd-sdlf-repositories \
         --stack-name "$STACK_NAME" \
-        --template-file "$DIRNAME"/output/packaged-template.yaml \
+        --template-file "$DIRNAME"/output/packaged-template-cicd-sdlf-repositories.yaml \
         --parameter-overrides \
-            pArtifactsBucket=/SDLF/S3/DevOpsArtifactsBucket \
             pKMSKey=/SDLF/KMS/CICDKeyId \
         --tags Framework=sdlf \
         --capabilities "CAPABILITY_NAMED_IAM" "CAPABILITY_AUTO_EXPAND" \
@@ -182,10 +181,10 @@ devops_account () {
     template_protection "$STACK_NAME" "$REGION" "$DEVOPS_AWS_PROFILE"
     rm -Rf "$DIRNAME"/output
 
-    declare -a REPOSITORIES=("sdlf-cicd" "sdlf-foundations" "sdlf-team" "sdlf-pipeline" "sdlf-dataset" "sdlf-datalakeLibrary" "sdlf-stageA" "sdlf-stageB")
+    declare -a REPOSITORIES=("sdlf-cicd" "sdlf-foundations" "sdlf-team" "sdlf-pipeline" "sdlf-dataset" "sdlf-datalakeLibrary" "sdlf-stageA" "sdlf-stageB" "sdlf-main")
     for REPOSITORY in "${REPOSITORIES[@]}"
     do
-        latest_commit=$(aws --region "$REGION" --profile "$DEVOPS_AWS_PROFILE" codecommit get-branch --repository-name "$REPOSITORY" --branch-name main --query 'branch.commitId' --output text)
+        latest_commit=$(aws --region "$REGION" --profile "$DEVOPS_AWS_PROFILE" codecommit get-branch --repository-name "$REPOSITORY" --branch-name main --query "branch.commitId" --output text)
         aws --region "$REGION" --profile "$DEVOPS_AWS_PROFILE" codecommit create-branch --repository-name "$REPOSITORY" --branch-name dev --commit-id "$latest_commit"
         aws --region "$REGION" --profile "$DEVOPS_AWS_PROFILE" codecommit create-branch --repository-name "$REPOSITORY" --branch-name test --commit-id "$latest_commit"
     done
@@ -195,6 +194,28 @@ devops_account () {
     aws --region "$REGION" --profile "$DEVOPS_AWS_PROFILE" s3api put-object --bucket "$ARTIFACTS_BUCKET" --key aws-sam-cli-linux-x86_64.zip --body "$DIRNAME"/sdlf-cicd/aws-sam-cli-linux-x86_64.zip
     rm "$DIRNAME"/sdlf-cicd/aws-sam-cli-linux-x86_64.zip
 
+    mkdir "$DIRNAME"/output
+    aws cloudformation package \
+        --s3-bucket "$ARTIFACTS_BUCKET" --s3-prefix template-cicd-sdlf-pipelines \
+        --template-file "$DIRNAME"/sdlf-cicd/template-cicd-sdlf-pipelines.yaml \
+        --output-template-file "$DIRNAME"/output/packaged-template-cicd-sdlf-pipelines.yaml \
+        --region "$REGION" \
+        --profile "$DEVOPS_AWS_PROFILE"
+    STACK_NAME=sdlf-cicd-sdlf-pipelines
+    aws cloudformation deploy \
+        --s3-bucket "$ARTIFACTS_BUCKET" --s3-prefix sdlf-cicd-sdlf-pipelines \
+        --stack-name "$STACK_NAME" \
+        --template-file "$DIRNAME"/output/packaged-template-cicd-sdlf-pipelines.yaml \
+        --parameter-overrides \
+            pArtifactsBucket=/SDLF/S3/DevOpsArtifactsBucket \
+            pKMSKey=/SDLF/KMS/CICDKeyId \
+        --tags Framework=sdlf \
+        --capabilities "CAPABILITY_NAMED_IAM" "CAPABILITY_AUTO_EXPAND" \
+        --region "$REGION" \
+        --profile "$DEVOPS_AWS_PROFILE" || exit 1
+    template_protection "$STACK_NAME" "$REGION" "$DEVOPS_AWS_PROFILE"
+    rm -Rf "$DIRNAME"/output
+
     exit
 }
 

sdlf-cicd/README.md

@@ -602,7 +602,8 @@ Resources:
         detail-type:
           - CodePipeline Pipeline Execution State Change
         resources:
-          - prefix: !Sub "arn:${AWS::Partition}:codepipeline:${AWS::Region}:${AWS::AccountId}:sdlf-cicd-sdlf-repositories-" # stop rMain CodePipeline
+          - prefix: !Sub "arn:${AWS::Partition}:codepipeline:${AWS::Region}:${AWS::AccountId}:sdlf-cicd-sdlf-pipelines-" # stop rMain CodePipeline
+          - prefix: !Sub "arn:${AWS::Partition}:codepipeline:${AWS::Region}:${AWS::AccountId}:sdlf-cicd-teams-" # stop rTeam CodePipeline
         detail:
           state:
             - STARTED