
    Vh                     |    d Z dZdZ	 ddlZddlmZ ddlmZ	  G d d      Z
d	 Zed
k(  r e        yy# e$ r Y .w xY w)a|  
---
module: ecs_taskdefinition
version_added: 1.0.0
short_description: register a task definition in ecs
description:
    - Registers or deregisters task definitions in the Amazon Web Services (AWS) EC2 Container Service (ECS).
author:
    - Mark Chance (@Java1Guy)
    - Alina Buzachis (@alinabuzachis)
options:
    state:
        description:
            - State whether the task definition should exist or be deleted.
        required: true
        choices: ['present', 'absent']
        type: str
    arn:
        description:
            - The ARN of the task description to delete.
        required: false
        type: str
    family:
        description:
            - A Name that would be given to the task definition.
        required: false
        type: str
    revision:
        description:
            - A revision number for the task definition.
        required: False
        type: int
    force_create:
        description:
            - Always create new task definition.
        required: False
        type: bool
        default: false
    containers:
        description:
            - A list of containers definitions.
            - See U(https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/ecs.html) for a complete list of parameters.
        required: True
        type: list
        elements: dict
        suboptions:
            name:
                description: The name of a container.
                required: False
                type: str
            image:
                description: The image used to start a container.
                required: False
                type: str
            repositoryCredentials:
                description: The private repository authentication credentials to use.
                required: False
                type: dict
                suboptions:
                    credentialsParameter:
                        description:
                            - The Amazon Resource Name (ARN) of the secret containing the private repository credentials.
                        required: True
                        type: str
            cpu:
                description: The number of cpu units reserved for the container.
                required: False
                type: int
            memory:
                description: The amount (in MiB) of memory to present to the container.
                required: False
                type: int
            memoryReservation:
                description: The soft limit (in MiB) of memory to reserve for the container.
                required: False
                type: int
            links:
                description:
                    - Allows containers to communicate with each other without the need for port mappings.
                    - This parameter is only supported if I(network_mode=bridge).
                required: False
                type: list
                elements: str
            portMappings:
                description: The list of port mappings for the container.
                required: False
                type: list
                elements: dict
                suboptions:
                    containerPort:
                        description: The port number on the container that is bound to the user-specified or automatically assigned host port.
                        required: False
                        type: int
                    hostPort:
                        description: The port number on the container instance to reserve for your container.
                        required: False
                        type: int
                    protocol:
                        description: The protocol used for the port mapping.
                        required: False
                        type: str
                        default: tcp
                        choices: ['tcp', 'udp']
            essential:
                description:
                    - If I(essential=True), and the container fails or stops for any reason, all other containers that are part of the task are stopped.
                required: False
                type: bool
            entryPoint:
                description: The entry point that is passed to the container.
                required: False
                type: str
            command:
                description: The command that is passed to the container. If there are multiple arguments, each argument is a separated string in the array.
                required: False
                type: list
                elements: str
            environment:
                description: The environment variables to pass to a container.
                required: False
                type: list
                elements: dict
                suboptions:
                    name:
                        description: The name of the key-value pair.
                        required: False
                        type: str
                    value:
                        description: The value of the key-value pair.
                        required: False
                        type: str
            environmentFiles:
                description: A list of files containing the environment variables to pass to a container.
                required: False
                type: list
                elements: dict
                suboptions:
                    value:
                        description: The Amazon Resource Name (ARN) of the Amazon S3 object containing the environment variable file.
                        required: False
                        type: str
                    type:
                        description: The file type to use. The only supported value is C(s3).
                        required: False
                        type: str
            mountPoints:
                description: The mount points for data volumes in your container.
                required: False
                type: list
                elements: dict
                suboptions:
                    sourceVolume:
                        description: The name of the volume to mount.
                        required: False
                        type: str
                    containerPath:
                        description: The path on the container to mount the host volume at.
                        required: False
                        type: str
                    readOnly:
                        description:
                            - If this value is C(True), the container has read-only access to the volume.
                            - If this value is C(False), then the container can write to the volume.
                        required: False
                        default: False
                        type: bool
            volumesFrom:
                description: Data volumes to mount from another container.
                required: False
                type: list
                elements: dict
                suboptions:
                    sourceContainer:
                        description:
                            - The name of another container within the same task definition from which to mount volumes.
                        required: False
                        type: str
                    readOnly:
                        description:
                            - If this value is C(True), the container has read-only access to the volume.
                            - If this value is C(False), then the container can write to the volume.
                        required: False
                        default: False
                        type: bool
            linuxParameters:
                description: Linux-specific modifications that are applied to the container, such as Linux kernel capabilities.
                required: False
                type: dict
                suboptions:
                    capabilities:
                        description:
                            - The Linux capabilities for the container that are added to or dropped from the default configuration provided by Docker.
                        required: False
                        type: dict
                        suboptions:
                            add:
                                description:
                                    - The Linux capabilities for the container that have been added to the default configuration provided by Docker.
                                    - If I(launch_type=FARGATE), this parameter is not supported.
                                required: False
                                type: list
                                choices: ["ALL", "AUDIT_CONTROL", "AUDIT_WRITE", "BLOCK_SUSPEND", "CHOWN", "DAC_OVERRIDE", "DAC_READ_SEARCH", "FOWNER",
                                          "FSETID", "IPC_LOCK", "IPC_OWNER", "KILL", "LEASE", "LINUX_IMMUTABLE", "MAC_ADMIN", "MAC_OVERRIDE", "MKNOD",
                                          "NET_ADMIN", "NET_BIND_SERVICE", "NET_BROADCAST", "NET_RAW", "SETFCAP", "SETGID", "SETPCAP", "SETUID",
                                          "SYS_ADMIN", "SYS_BOOT", "SYS_CHROOT", "SYS_MODULE", "SYS_NICE", "SYS_PACCT", "SYS_PTRACE", "SYS_RAWIO",
                                          "SYS_RESOURCE", "SYS_TIME", "SYS_TTY_CONFIG", "SYSLOG", "WAKE_ALARM"]
                                elements: str
                            drop:
                                description:
                                    - The Linux capabilities for the container that have been removed from the default configuration provided by Docker.
                                required: False
                                type: list
                                choices: ["ALL", "AUDIT_CONTROL", "AUDIT_WRITE", "BLOCK_SUSPEND", "CHOWN", "DAC_OVERRIDE", "DAC_READ_SEARCH", "FOWNER",
                                          "FSETID", "IPC_LOCK", "IPC_OWNER", "KILL", "LEASE", "LINUX_IMMUTABLE", "MAC_ADMIN", "MAC_OVERRIDE", "MKNOD",
                                          "NET_ADMIN", "NET_BIND_SERVICE", "NET_BROADCAST", "NET_RAW", "SETFCAP", "SETGID", "SETPCAP", "SETUID",
                                          "SYS_ADMIN", "SYS_BOOT", "SYS_CHROOT", "SYS_MODULE", "SYS_NICE", "SYS_PACCT", "SYS_PTRACE", "SYS_RAWIO",
                                          "SYS_RESOURCE", "SYS_TIME", "SYS_TTY_CONFIG", "SYSLOG", "WAKE_ALARM"]
                                elements: str
                    devices:
                        description:
                            - Any host devices to expose to the container.
                            - If I(launch_type=FARGATE), this parameter is not supported.
                        required: False
                        type: list
                        elements: dict
                        suboptions:
                            hostPath:
                                description: The path for the device on the host container instance.
                                required: True
                                type: str
                            containerPath:
                                description: The path inside the container at which to expose the host device.
                                required: False
                                type: str
                            permissions:
                                description: The explicit permissions to provide to the container for the device.
                                required: False
                                type: list
                                elements: str
                    initProcessEnabled:
                        description: Run an init process inside the container that forwards signals and reaps processes.
                        required: False
                        type: bool
                    sharedMemorySize:
                        description:
                            - The value for the size (in MiB) of the /dev/shm volume.
                            - If I(launch_type=FARGATE), this parameter is not supported.
                        required: False
                        type: int
                    tmpfs:
                        description:
                            - The container path, mount options, and size (in MiB) of the tmpfs mount.
                            - If I(launch_type=FARGATE), this parameter is not supported.
                        required: False
                        type: list
                        elements: dict
                        suboptions:
                            containerPath:
                                description: The absolute file path where the tmpfs volume is to be mounted.
                                required: True
                                type: str
                            size:
                                description: The size (in MiB) of the tmpfs volume.
                                required: True
                                type: int
                            mountOptions:
                                description: The list of tmpfs volume mount options.
                                required: False
                                type: list
                                choices: ["defaults", "ro", "rw", "suid", "nosuid", "dev", "nodev", "exec", "noexec", "sync", "async", "dirsync",
                                          "remount", "mand", "nomand", "atime", "noatime", "diratime", "nodiratime", "bind", "rbind", "unbindable",
                                          "runbindable", "private", "rprivate", "shared", "rshared", "slave", "rslave", "relatime", "norelatime",
                                          "strictatime", "nostrictatime", "mode", "uid", "gid", "nr_inodes", "nr_blocks", "mpol"]
                                elements: str
                    maxSwap:
                        description:
                            - The total amount of swap memory (in MiB) a container can use.
                            - If I(launch_type=FARGATE), this parameter is not supported.
                        required: False
                        type: int
                    swappiness:
                        description:
                            - This allows you to tune a container's memory swappiness behavior.
                            - If I(launch_type=FARGATE), this parameter is not supported.
                        required: False
                        type: int
            secrets:
                description: The secrets to pass to the container.
                required: False
                type: list
                elements: dict
                suboptions:
                    name:
                        description: The value to set as the environment variable on the container.
                        required: True
                        type: str
                    size:
                        description: The secret to expose to the container.
                        required: True
                        type: str
            dependsOn:
                description:
                    - The dependencies defined for container startup and shutdown.
                    - When a dependency is defined for container startup, for container shutdown it is reversed.
                required: False
                type: list
                elements: dict
                suboptions:
                    containerName:
                        description: The name of a container.
                        type: str
                        required: True
                    condition:
                        description: The dependency condition of the container.
                        type: str
                        required: True
                        choices: ["start", "complete", "success", "healthy"]
            startTimeout:
                description: Time duration (in seconds) to wait before giving up on resolving dependencies for a container.
                required: False
                type: int
            stopTimeout:
                description: Time duration (in seconds) to wait before the container is forcefully killed if it doesn't exit normally on its own.
                required: False
                type: int
            hostname:
                description:
                    - The hostname to use for your container.
                    - This parameter is not supported if I(network_mode=awsvpc).
                required: False
                type: str
            user:
                description:
                    - The user to use inside the container.
                    - This parameter is not supported for Windows containers.
                required: False
                type: str
            workingDirectory:
                description: The working directory in which to run commands inside the container.
                required: False
                type: str
            disableNetworking:
                description: When this parameter is C(True), networking is disabled within the container.
                required: False
                type: bool
            privileged:
                description: When this parameter is C(True), the container is given elevated privileges on the host container instance.
                required: False
                type: bool
            readonlyRootFilesystem:
                description: When this parameter is C(True), the container is given read-only access to its root file system.
                required: false
                type: bool
            dnsServers:
                description:
                    - A list of DNS servers that are presented to the container.
                    - This parameter is not supported for Windows containers.
                required: False
                type: list
                elements: str
            dnsSearchDomains:
                description:
                    - A list of DNS search domains that are presented to the container.
                    - This parameter is not supported for Windows containers.
                required: False
                type: list
                elements: str
            extraHosts:
                description:
                    - A list of hostnames and IP address mappings to append to the /etc/hosts file on the container.
                    - This parameter is not supported for Windows containers or tasks that use I(network_mode=awsvpc).
                required: False
                type: list
                elements: dict
                suboptions:
                    hostname:
                        description: The hostname to use in the /etc/hosts entry.
                        type: str
                        required: False
                    ipAddress:
                        description: The IP address to use in the /etc/hosts entry.
                        type: str
                        required: False
            dockerSecurityOptions:
                description:
                    - A list of strings to provide custom labels for SELinux and AppArmor multi-level security systems.
                    - This parameter is not supported for Windows containers.
                required: False
                type: list
                elements: str
            interactive:
                description:
                    - When I(interactive=True), it allows to deploy containerized applications that require stdin or a tty to be allocated.
                required: False
                type: bool
            pseudoTerminal:
                description: When this parameter is C(True), a TTY is allocated.
                required: False
                type: bool
            dockerLabels:
                description: A key/value map of labels to add to the container.
                required: False
                type: dict
            ulimits:
                description:
                    - A list of ulimits to set in the container.
                    - This parameter is not supported for Windows containers.
                required: False
                type: list
                elements: dict
                suboptions:
                    name:
                        description: The type of the ulimit.
                        type: str
                        required: False
                        choices: ['core', 'cpu', 'data', 'fsize', 'locks', 'memlock', 'msgqueue', 'nice', 'nofile', 'nproc', 'rss',
                                  'rtprio', 'rttime', 'sigpending', 'stack']
                    softLimit:
                        description: The soft limit for the ulimit type.
                        type: int
                        required: False
                    hardLimit:
                        description: The hard limit for the ulimit type.
                        type: int
                        required: False
            logConfiguration:
                description: The log configuration specification for the container.
                required: False
                type: dict
                suboptions:
                    logDriver:
                        description:
                            - The log driver to use for the container.
                            - For tasks on AWS Fargate, the supported log drivers are C(awslogs), C(splunk), and C(awsfirelens).
                            - For tasks hosted on Amazon EC2 instances, the supported log drivers are C(awslogs), C(fluentd),
                              C(gelf), C(json-file), C(journald), C(logentries), C(syslog), C(splunk), and C(awsfirelens).
                        type: str
                        required: False
            options:
                description: The configuration options to send to the log driver.
                required: False
                type: str
            secretOptions:
                description: The secrets to pass to the log configuration.
                required: False
                type: list
                elements: dict
                suboptions:
                    name:
                        description: The name of the secret.
                        type: str
                        required: False
                    valueFrom:
                        description: The secret to expose to the container.
                        type: str
                        required: False
            healthCheck:
                description: The health check command and associated configuration parameters for the container.
                required: False
                type: dict
                suboptions:
                    command:
                        description:
                            - A string array representing the command that the container runs to determine if it is healthy.
                            - >
                              The string array must start with CMD to run the command arguments directly,
                              or CMD-SHELL to run the command with the container's default shell.
                            - An exit code of 0 indicates success, and non-zero exit code indicates failure.
                        required: False
                        type: list
                        elements: str
                    interval:
                        description:
                            - The time period in seconds between each health check execution.
                            - You may specify between 5 and 300 seconds. The default value is 30 seconds.
                        required: False
                        type: int
                        default: 30
                    retries:
                        description:
                            - The number of times to retry a failed health check before the container is considered unhealthy.
                            - You may specify between 1 and 10 retries. The default value is 3.
                        required: False
                        type: int
                        default: 3
                    startPeriod:
                        description:
                            - >
                              The optional grace period to provide containers time to bootstrap
                              before failed health checks count towards the maximum number of retries.
                            - You can specify between 0 and 300 seconds. By default, the startPeriod is disabled.
                            - >
                              Note: If a health check succeeds within the startPeriod,
                              then the container is considered healthy and any subsequent failures count toward the maximum number of retries.
                        required: False
                        type: int
                    timeout:
                        description:
                            - The time period in seconds to wait for a health check to succeed before it is considered a failure.
                            - You may specify between 2 and 60 seconds. The default value is 5.
                        required: False
                        type: int
                        default: 5
            systemControls:
                description: A list of namespaced kernel parameters to set in the container.
                required: False
                type: list
                elements: dict
                suboptions:
                    namespace:
                        description: The namespaced kernel parameter to set a C(value) for.
                        type: str
                    value:
                        description: The value for the namespaced kernel parameter that's specified in C(namespace).
                        type: str
            resourceRequirements:
                description:
                    - The type and amount of a resource to assign to a container.
                    - The only supported resources are C(GPU) and C(InferenceAccelerator).
                required: False
                type: list
                elements: dict
                suboptions:
                    value:
                        description: The value for the specified resource type.
                        type: str
                    type:
                        description: The type of resource to assign to a container.
                        type: str
                        choices: ['GPU', 'InferenceAccelerator']
            firelensConfiguration:
                description:
                    - The FireLens configuration for the container.
                    - This is used to specify and configure a log router for container logs.
                required: False
                type: dict
                suboptions:
                    type:
                        description:
                            - The log router to use. The valid values are C(fluentd) or C(fluentbit).
                        required: False
                        type: str
                        choices:
                            - fluentd
                            - fluentbit
                    options:
                        description:
                            - The options to use when configuring the log router.
                            - This field is optional and can be used to specify a custom configuration
                              file or to add additional metadata, such as the task, task definition, cluster,
                              and container instance details to the log event.
                            - If specified, the syntax to use is
                              C({"enable-ecs-log-metadata":"true|false","config-file-type:"s3|file","config-file-value":"arn:aws:s3:::mybucket/fluent.conf|filepath"}).
                            - For more information, see U(https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_firelens.html#firelens-taskdef).
                        required: False
                        type: dict
    network_mode:
        description:
            - The Docker networking mode to use for the containers in the task.
            - Windows containers must use I(network_mode=default), which will utilize docker NAT networking.
            - Setting I(network_mode=default) for a Linux container will use C(bridge) mode.
        required: false
        default: bridge
        choices: [ 'default', 'bridge', 'host', 'none', 'awsvpc' ]
        type: str
    task_role_arn:
        description:
            - The Amazon Resource Name (ARN) of the IAM role that containers in this task can assume. All containers in this task are granted
              the permissions that are specified in this role.
        required: false
        type: str
        default: ''
    execution_role_arn:
        description:
            - The Amazon Resource Name (ARN) of the task execution role that the Amazon ECS container agent and the Docker daemon can assume.
        required: false
        type: str
        default: ''
    volumes:
        description:
            - A list of names of volumes to be attached.
        required: False
        type: list
        elements: dict
        suboptions:
            name:
                type: str
                description: The name of the volume.
                required: true
    launch_type:
        description:
            - The launch type on which to run your task.
        required: false
        type: str
        choices: ["EC2", "FARGATE"]
    cpu:
        description:
            - The number of cpu units used by the task. If I(launch_type=EC2), this field is optional and any value can be used.
            - If I(launch_type=FARGATE), this field is required and you must use one of C(256), C(512), C(1024), C(2048), C(4096).
        required: false
        type: str
    memory:
        description:
            - The amount (in MiB) of memory used by the task. If I(launch_type=EC2), this field is optional and any value can be used.
            - If I(launch_type=FARGATE), this field is required and is limited by the CPU.
        required: false
        type: str
    placement_constraints:
        version_added: 2.1.0
        description:
            - Placement constraint objects to use for the task.
            - You can specify a maximum of 10 constraints per task.
            - Task placement constraints are not supported for tasks run on Fargate.
        required: false
        type: list
        elements: dict
        suboptions:
            type:
                description: The type of constraint.
                type: str
            expression:
                description: A cluster query language expression to apply to the constraint.
                type: str
    runtime_platform:
        version_added: 6.4.0
        description:
            - runtime platform configuration for the task
        required: false
        type: dict
        default: {
                    "operatingSystemFamily": "LINUX",
                    "cpuArchitecture": "X86_64"
                }
        suboptions:
            cpuArchitecture:
                description: The CPU Architecture type to be used by the task
                type: str
                required: false
                choices: ['X86_64', 'ARM64']
            operatingSystemFamily:
                description: OS type to be used by the task
                type: str
                required: false
                choices: ['LINUX', 'WINDOWS_SERVER_2019_FULL', 'WINDOWS_SERVER_2019_CORE', 'WINDOWS_SERVER_2022_FULL', 'WINDOWS_SERVER_2022_CORE']
extends_documentation_fragment:
    - amazon.aws.common.modules
    - amazon.aws.region.modules
    - amazon.aws.boto3
an  
- name: Create task definition
  community.aws.ecs_taskdefinition:
    containers:
      - name: simple-app
        cpu: 10
        essential: true
        image: "httpd:2.4"
        memory: 300
        mountPoints:
          - containerPath: /usr/local/apache2/htdocs
            sourceVolume: my-vol
        portMappings:
          - containerPort: 80
            hostPort: 80
        logConfiguration:
          logDriver: awslogs
          options:
            awslogs-group: /ecs/test-cluster-taskdef
            awslogs-region: us-west-2
            awslogs-stream-prefix: ecs
      - name: busybox
        command:
          - >
            /bin/sh -c "while true; do echo '<html><head><title>Amazon ECS Sample App</title></head><body><div><h1>Amazon ECS Sample App</h1>
            <h2>Congratulations!</h2>
            <p>Your application is now running on a container in Amazon ECS.</p>' > top; /bin/date > date ; echo '</div></body></html>' > bottom;
            cat top date bottom > /usr/local/apache2/htdocs/index.html ; sleep 1; done"
        cpu: 10
        entryPoint:
          - sh
          - "-c"
        essential: false
        image: busybox
        memory: 200
        volumesFrom:
          - sourceContainer: simple-app
    volumes:
      - name: my-vol
    family: test-cluster-taskdef
    state: present
  register: task_output

- name: Create task definition
  community.aws.ecs_taskdefinition:
    family: nginx
    containers:
      - name: nginx
        essential: true
        image: "nginx"
        portMappings:
          - containerPort: 8080
            hostPort: 8080
        cpu: 512
        memory: 1024
    state: present

- name: Create task definition
  community.aws.ecs_taskdefinition:
    family: nginx
    containers:
      - name: nginx
        essential: true
        image: "nginx"
        portMappings:
          - containerPort: 8080
            hostPort: 8080
    launch_type: FARGATE
    cpu: 512
    memory: 1024
    state: present
    network_mode: awsvpc

- name: Create task definition
  community.aws.ecs_taskdefinition:
    family: nginx
    containers:
      - name: nginx
        essential: true
        image: "nginx"
        portMappings:
          - containerPort: 8080
            hostPort: 8080
        cpu: 512
        memory: 1024
        dependsOn:
          - containerName: "simple-app"
            condition: "start"

# Create Task Definition with Environment Variables and Secrets
- name: Create task definition
  community.aws.ecs_taskdefinition:
    family: nginx
    containers:
      - name: nginx
        essential: true
        image: "nginx"
        environment:
          - name: "PORT"
            value: "8080"
        secrets:
          # For variables stored in Secrets Manager
          - name: "NGINX_HOST"
            valueFrom: "arn:aws:secretsmanager:us-west-2:123456789012:secret:nginx/NGINX_HOST"
          # For variables stored in Parameter Store
          - name: "API_KEY"
            valueFrom: "arn:aws:ssm:us-west-2:123456789012:parameter/nginx/API_KEY"
    launch_type: FARGATE
    cpu: 512
    memory: 1GB
    state: present
    network_mode: awsvpc

# Create Task Definition with health check
- name: Create task definition
  community.aws.ecs_taskdefinition:
    family: nginx
    containers:
      - name: nginx
        essential: true
        image: "nginx"
        portMappings:
          - containerPort: 8080
            hostPort: 8080
        cpu: 512
        memory: 1024
        healthCheck:
          command:
            - CMD-SHELL
            - /app/healthcheck.py
          interval: 60
          retries: 3
          startPeriod: 15
          timeout: 15
    state: present
zk
taskdefinition:
    description: a reflection of the input parameters
    type: dict
    returned: always
    N)AWSRetry)AnsibleCommunityAWSModulec                   .    e Zd ZdZd Zd Zd Zd Zd Zy)EcsTaskManagerzHandles ECS Tasksc                 d    || _         |j                  dt        j                               | _        y )Necs)moduleclientr   jittered_backoffr   )selfr	   s     t/home/dcms/DCMS/lib/python3.12/site-packages/ansible_collections/community/aws/plugins/modules/ecs_taskdefinition.py__init__zEcsTaskManager.__init__.  s$    ==(A(A(CD    c                     	 | j                   j                  d|      }|d   S # t        j                  j                  t        j                  j
                  f$ r Y y w xY wNT	aws_retrytaskDefinitionr   )r   describe_task_definitionbotocore
exceptionsClientErrorBotoCoreError)r   	task_nameresponses      r   describe_taskzEcsTaskManager.describe_task3  s\    	xx884Xa8bH,--##//1D1D1R1RS 		s   !$ 7AAc                    g }|D ]+  }dD ]  }||v st        ||         ||<    d|v rf|d   D ]^  }dD ]  }||v st        ||         ||<    |dk(  s&d|v s+|d   |j                  d      k7  sC| j                  j                  d       ` d	|v ra|j                  d	      D ]M  }|d
k(  r#|d	   d
   D ]  }d|v st        |d         |d<    dD ]  }||v st        |d	   |         |d	   |<     O d|v r'|d   D ]  }dD ]  }||v st        ||         ||<    ! |j	                  |       . t        ||||      }|dk7  r||d<   |r||d<   |	r|	|d<   |r|g|d<   |r||d<   |
r|
|d<   |r||d<   	  | j                  j                  dddi|}|d   S # t        j                  j                  t        j                  j                  f$ r+}| j                  j                  |d       Y d }~d   S d }~ww xY w)N)memorycpumemoryReservationstartTimeoutstopTimeoutportMappings)hostPortcontainerPortawsvpcr$   r%   zYIn awsvpc network mode, host port must be set to the same as container port or not be setmsglinuxParameterstmpfssize)maxSwap
swappinesssharedMemorySizeulimits)	softLimit	hardLimit)familytaskRoleArncontainerDefinitionsvolumesdefaultnetworkModer   r   requiresCompatibilitiesexecutionRoleArnplacementConstraintsruntimePlatformr   TzFailed to register taskr    )intgetr	   	fail_jsonappenddictr   register_task_definitionr   r   r   r   fail_json_aws)r   r2   task_role_arnexecution_role_arnnetwork_modecontainer_definitionsr5   launch_typer   r   placement_constraintsruntime_platformvalidated_containers	containerparamport_mappingportlinux_paramtmpfs_paramlimits_mappinglimitparamsr   es                           r   register_taskzEcsTaskManager.register_task:  s     " / $	3I^ =I%'*9U+;'<Ie$= *$-n$= L = I</14\$5G1HL.I $x/J,4N'
3|7G7G7XX KK11%C 2  !I-#,==1B#C kK"g-+45F+G+P OK%469+f:M6NF 3O "O k K/BEiPaFbchFiBjI&78?kk I%&/	&: ON!; O N247u8M4NN51OO
 !''	2I$	3L %!6	
 9$$0F=!F5M%F81<F,-);F%& -BF)*(8F$%	H8txx88R4R6RH ()) ##//1D1D1R1RS 	HKK%%a-F%GG())	Hs   9F 7G>G99G>c                      g d d fd} |       r		  |       r	t        t        d   D cg c]"  } j                  j                  d|      d   $ c}d             S c c}w )	N)taskDefinitionArns	nextTokenc                      di} d   rd   | d<    j                   j                  dddi| }dxx   |d   z  cc<   |j                  dd       d<   d   d uS )NfamilyPrefixrY   r   TrX   r<   )r   list_task_definitionsr>   )rT   resultdatar2   r   s     r   fetchz7EcsTaskManager.describe_task_definitions.<locals>.fetch  s~    $f-FK &*;&7{#3TXX33MdMfMF%&&1E*FF& &

; =D$D00r   rX   Tr   r   c                     | d   S )Nrevisionr<   )tds    r   <lambda>z:EcsTaskManager.describe_task_definitions.<locals>.<lambda>  s
    r*~ r   )key)listsortedr   r   )r   r2   r_   arnr^   s   ``  @r   describe_task_definitionsz(EcsTaskManager.describe_task_definitions  s}    &(t<
	1 g g   $$89 HH55UX5YZjk .
 	
s   'A&c                 F    | j                   j                  d|      }|d   S r   )r   deregister_task_definition)r   taskArnr   s      r   deregister_taskzEcsTaskManager.deregister_task  s(    8866V]6^())r   N)	__name__
__module____qualname____doc__r   r   rV   rh   rl   r<   r   r   r   r   +  s!    E
Q*f
<*r   r   c                  <   t        t        dddg      t        dd      t        dd      t        dd      t        ddd	
      t        ddd      t        ddg dd      t        ddd
      t        ddd
      t        ddd      t        dddg      t               t        dd      t        dddt        t        d      t        d                  t        dddddt        t        dddg      t        dg d                        } t        | dddd d!gfg"      }d }t        |      }t        d#      }|j                  d$   dk(  rd%|j                  vs|j                  d%   s|j	                  d&'       d(|j                  vs|j                  d(   s|j	                  d)'       |j                  d*   }|j                  d   }|j                  d+   }|dk(  r+|d,k7  r|j	                  d-'       |r|j	                  d.'       |j                  d%   D ]  }|j                  d/      r|d,k(  r|j	                  d0'       |j                  d1g       D ]
  }	|	d2   |	d2<    |j                  d3g       D ]  }
|
d4   d5k7  s|j	                  d6'        |j                  d7i       D ]  }|d8k(  r|dk(  r|j	                  d9'       |d8k(  r|dk(  r|j	                  d:'       n+|d8k(  r&t        |d7   d8         d;k  r|j	                  d<'       |d=k(  r:t        |d7   d=         d;k  st        |d7   d=         d>kD  r|j	                  d?'       |d@k(  r|dk(  r|j	                  dA'       |dBk(  s|dk(  s|j	                  dC'        |j                  dD      r|d,k(  r|j	                  dE'       |j                  dF      s|d,k(  s|j	                  dG'        |j                  d(   }|j                  |j                  d(         }dH|j                  v r|j                  dH   rt        |j                  dH         }|D cg c]  }|dH   |k(  s| }}t        |      d;kD  r|d;   nd }|r+|dI   dJk7  r#|j	                  dK| dLt        |       dM'       n|s|s%|dNk7  r |j	                  dOt        |       dP'       n|r|dQ   dH   dNz   |k7  r|j	                  dOt        |       dRt        |dQ   dH   dNz          '       nfd }dS fdT}|D ]V  |j                  dU   xs g }|j                  d%   xs g }|j                  dV   }|j                  d   } |||||      }|sV n |r"|j                  j                  dW      s||dX<   n|j                  s|j                  j                  dUg       xs g }|j                  |j                  d(   |j                  dV   |j                  dY   |j                  d*   |j                  d%   ||j                  d   |j                  d    |j                  d!   |j                  d+   |j                  dZ         |dX<   d|d[<   n|j                  d$   dk(  r|j                  d$   dk(  rd\|j                  v r|j                  d\   |j                  d\   }nxd(|j                  v rX|j                  d(   IdH|j                  v r;|j                  dH   ,|j                  d(   d]z   t        |j                  dH         z   }n|j	                  d^'       |j                  |      }|sn9||dX<   dI|v r|dI   d_k(  rd|d[<   n"|j                  s|j                  |       d|d[<    |j                  d`i | y c c}w )aNTpresentabsent)requiredchoicesFstr)rt   typer=   bool)rt   r6   rw   re   rA   )rt   rw   elementsbridge)r6   rz   hostnoner&   )rt   r6   ru   rw    EC2FARGATE)rw   )rw   
expression)rt   rw   ry   optionsLINUXX86_64)operatingSystemFamilycpuArchitectureARM64)r   WINDOWS_SERVER_2019_FULLWINDOWS_SERVER_2019_COREWINDOWS_SERVER_2022_FULLWINDOWS_SERVER_2022_CORE)r   r   )rt   r6   rw   r   )staterg   r2   ra   force_create
containersrF   rD   rE   r5   rH   r   r   rI   rJ   rH   r   r   )argument_specsupports_check_moderequired_if)changedr   r   z?To use task definitions, a list of containers must be specifiedr'   r2   z3To use task definitions, a family must be specifiedrF   rI   r&   z7To use FARGATE launch type, network_mode must be awsvpczETask placement constraints are not supported for tasks run on Fargatelinksz;links parameter is not supported if network mode is awsvpc.environmentvalueenvironmentFilesrw   s3z4The only supported value for environmentFiles is s3.r)   r,   z@devices parameter is not supported with the FARGATE launch type.z@maxSwap parameter is not supported with the FARGATE launch type.r   z:Accepted values for maxSwap are 0 or any positive integer.r-   d   zCAccepted values for swappiness are whole numbers between 0 and 100.r.   zIsharedMemorySize parameter is not supported with the FARGATE launch type.r*   z>tmpfs parameter is not supported with the FARGATE launch type.hostnamezIhostname parameter is not supported when the awsvpc network mode is used.
extraHostszKextraHosts parameter is not supported when the awsvpc network mode is used.ra   statusACTIVEzA task in family 'z' already exists for revision z, but it is inactive   z!You have specified a revision of z" but a created revision would be 1z! but a created revision would be c                    | j                         D ]  \  }}|s||vr||   s||v r	|||   k(  r t        |t              rz||v rv|}||   xs g }t        |      t        |      k7  r y|D ]L  }||vst        |t              s|j                  d      r+t	        |      }|j                  d       ||v sMN  y |j                         D ]  \  }}|s	|| vs|dk(  r|du r y y)NFprotocoltcp)r   	essentialT)items
isinstancere   lenrA   r>   update)leftrightkv	left_list
right_listlist_valmodified_list_vals           r   _right_has_values_of_leftz'main.<locals>._right_has_values_of_left:  s    JJL )DAq!"eAhQRWZ\]afghai\i%a.1:()I).qRJ"9~Z@',,5 5#+:#= (2(D'A(,,WaJb<@N(9(9(@(@%(@(P+<
+J,45 $))). "KKM )DAqQd]+T	 #() r   c                    d   dk7  ry |j                  dd      k7  ry ||j                  dg       vry j                  dg       xs g }t        |       t        |      k7  ry t        |       dkD  r!| D ]  }d}|D ]  } ||      sd	} n |r y  j                  d
g       xs g }	t        |      t        |	      k7  ry |D ]  }
d}|	D ]  } |
|      sd	} n |r y  |S )Nr   r   r3   r}   r8   r5   r   FTr4   )r>   r   )requested_volumesrequested_containersrequested_task_role_arnrequested_launch_typeexisting_task_definitionexisting_volumesrequested_volfound
actual_volexisting_containersrequested_containeractual_containerr   rb   s               r   _task_definition_matchesz&main.<locals>._task_definition_matches]  sB    h<8+*bff]B.GG(49NVXV\V\-rW :  #%66)R#8#>B ()S1A-BB()A-): 	( %*: &J8
S(, %&
  %#'	( ')ff-CR&H&NB#+,4G0HH+? 	$'!E,? "(45HJZ[$(E!"
 !#	$ 0/r   r5   rD   r   taskdefinitionrE   rJ   r   rg   :zHTo use task definitions, an arn or family and revision must be specifiedINACTIVEr<   )rA   AnsibleAWSModuler   rT   r?   r>   r=   rh   r   
check_moderV   rv   r   rl   	exit_json)r   r	   task_to_describetask_mgrresultsrF   rH   rI   rL   r   environment_filerP   r2   existing_definitions_in_familyra   rb   tasks_defs_for_revisionexistingr   r   r   r   r   r5   r   s                  `        @r   mainr     s@   D9h*?@%e,U/u515%fEFVDH6elq
 E2EBGe&6B%%1CDFU/"d.4U;KL	
 .5(S $eh=P Q&*"	'	
-(MT # #Y0ABCF f%H5!G}}W*v}},FMM,4O!bc6==(h0G!VW}}^4mmM2 &.E F)#x'  %^ _$  %l m|4 $	tI}}W%,(*B  %b c(}}]B? <'27';G$< %.MM2Db$I a #F+t3$$)_$`a  )}}->C k)+y0H$$)k$l)+y0H$$)k$l I-#i@Q6RS\6]2^ab2b$$)e$f,.	"34\BCaG9%67EFL$$)n$o"44	9Q$$)t$u')kY.F$$)i$j'k* }}Z(\X-E  %p q}}\*|x/G  %r sI$	tL x()1)K)KFMMZbLc)d&&6==+D6==45H 5S&qbVXYcVdhpVpr&q#&q589P5QTU5U.q1[_HHX.(:  ,VH4RSVW_S`Raauv !  5(a-$$?HNpq %  48VWY8Z[e8fij8jnv8v$$?H O  #$B2$Fz$RUV$V WXZ %  H!F50p 5 
$*MM)$<$B!'-}}\'B'Hb$*0--*H'(.m(D%3%';=TVkmo 
 FMM--n=(0G$%$$ --++Ir:@b,4,B,BMM(+MM/2MM"67MM.1MM,/MM-0MM%(MM(+MM"9:MM"45-() "&GI	w	8	+==!X-%&--*>*J#)==#7 FMM)MM(+7&--/MM*-9#)==#:S#@3v}}U_G`Ca#a   %o p))*:; )1G$%8#(:j(H%*	"((,,-=>%)	"Fwc 'rs   ^^__main__)DOCUMENTATIONEXAMPLESRETURNr   ImportError;ansible_collections.amazon.aws.plugins.module_utils.retriesr   >ansible_collections.community.aws.plugins.module_utils.modulesr   r   r   r   rm   r<   r   r   <module>r      sl   H
TGR
	 Q xB* B*Jd N	 zF i  		s   3 ;;