conditionally deploy dd role in prod

templates/app.json

@@ -59,6 +59,9 @@
             "Description": "S3 URL for sops data"
         }
     },
+    "Conditions": {
+        "IsProd": { "Fn::Equals": [ { "Ref": "Environment"}, "prod" ] }
+    },
     "Resources": {
         "InstanceProfile": {
             "Type": "AWS::IAM::InstanceProfile",
@@ -98,7 +101,13 @@
                                 { "Fn::ImportValue": { "Fn::Sub": "${RDSStack}-DBInstanceAddress" }},
                                 "' >> vars/cfoutput.yml\n",
                                 "/root/go/bin/sops -d -i vars/sec.yml\n",
-                                "ansible-playbook -t users,api,td-agent,datadog entry.yml\n"
+                                "ansible-playbook -t users,api,td-agent"
+                                { "Fn::If": [
+                                    "IsProd",
+                                    ",datadog",
+                                    ""
+                                ] },
+                                " entry.yml\n"
                             ]
                         ]
                     }
@@ -202,7 +211,13 @@
                                 { "Fn::ImportValue": { "Fn::Sub": "${RDSStack}-DBInstanceAddress" }},
                                 "' >> vars/cfoutput.yml\n",
                                 "/root/go/bin/sops -d -i vars/sec.yml\n",
-                                "ansible-playbook -t users,scheduler,td-agent,datadog entry.yml\n"
+                                "ansible-playbook -t users,scheduler,td-agent"
+                                { "Fn::If": [
+                                    "IsProd",
+                                    ",datadog",
+                                    ""
+                                ] },
+                                " entry.yml\n"
                             ]
                         ]
                     }
@@ -246,7 +261,13 @@
                                 { "Fn::GetAtt": [ "Relay2", "PrivateDnsName" ] },
                                 "' >> vars/cfoutput.yml\n",
                                 "/root/go/bin/sops -d -i vars/sec.yml\n",
-                                "ansible-playbook -t users,relay1,td-agent,datadog entry.yml\n"
+                                "ansible-playbook -t users,relay1,td-agent"
+                                { "Fn::If": [
+                                    "IsProd",
+                                    ",datadog",
+                                    ""
+                                ] },
+                                " entry.yml\n"
                             ]
                         ]
                     }
@@ -293,7 +314,13 @@
                                 ".yml vars/sec.yml\n",
                                 "echo '---' > vars/cfoutput.yml\n",
                                 "/root/go/bin/sops -d -i vars/sec.yml\n",
-                                "ansible-playbook -t users,relay2,td-agent,datadog entry.yml\n",
+                                "ansible-playbook -t users,relay2,td-agent",
+                                { "Fn::If": [
+                                    "IsProd",
+                                    ",datadog",
+                                    ""
+                                ] },
+                                " entry.yml\n",
                                 "cfn-signal -e 0 --stack '",
                                 { "Ref": "AWS::StackName" },
                                 "' --resource 'Relay2' --region '",

templates/base.json

@@ -37,6 +37,9 @@
             "Description": "S3 URL for sops data"
         }
     },
+    "Conditions": {
+        "IsProd": { "Fn::Equals": [ { "Ref": "Environment"}, "prod" ] }
+    },
     "Resources": {
         "VPC": {
             "Type": "AWS::EC2::VPC",