containerDefinitions_environment

register_task_definition

rAgentFargateTaskDefinition:
    Type: 'AWS::ECS::TaskDefinition'
    Metadata:
      cfn-lint:
        config:
          ignore_checks:
          - E1029
    DependsOn:
      - rFlowTaskRolePolicy
      - rAgentTaskRolePolicy
    Properties:
      TaskRoleArn: !Ref 'rAgentTaskRole'
      ExecutionRoleArn: !GetAtt 'rAgentExecutionRole.Arn'
      Family: !Sub '${pEnvironment}-prefect-fargate-agent'
      ContainerDefinitions:
        - Name: 'agent'
          Essential: true
          Command: ['prefect', 'agent', 'start', 'fargate', 'enable_task_revisions=true']
          Image: !Sub
            - 'prefecthq/prefect:${version}'
            - version: !If [ cIsPrefectServerVersionLatest, 'all_extras', !Sub 'all_extras-${pPrefectServerVersion}' ]
          MemoryReservation: 128
          Environment:
            - Name: PREFECT__CLOUD__API
              Value: !Sub '<masked value>'
            - Name: PREFECT__BACKEND
              Value: 'server'
            - Name: PREFECT__CLOUD__AGENT__LABELS
              Value: '["heavy"]'
            - Name: REGION_NAME
              Value: !Ref AWS::Region
            - Name: executionRoleArn
              Value: !GetAtt 'rFlowsExecutionRole.Arn'
            - Name: taskRoleArn
              Value: !GetAtt 'rFlowsTaskRole.Arn'
            - Name: networkMode
              Value: 'awsvpc'
            - Name: cluster
              Value: !Ref pEcsCluster
            - Name: networkConfiguration
              Value: !Sub
                - '{"awsvpcConfiguration": {"assignPublicIp": "DISABLED", "subnets": ["${subnets}"], "securityGroups": ["${pDWHClientSecurityGroup}"]}}'
                - subnets: !Join ['","', !Ref pFargateSubnetIds]
            - Name: cpu
              Value: '4096'
            - Name: memory
              Value: '8192'
            - Name: containerDefinitions_environment
              Value: !Sub
                - '[{
                      "name": "AWS_DEFAULT_REGION",
                      "value": "${AWS::Region}"
                    }, {
                      "name": "INTERNAL_SERVICES_CONNECTION_DATA_SECRET_ARN",
                      "value": "${rPrefectAgentInternalServicesConnectionDataSecret}"
                    }, {
                      "name": "DWH_JSON_CONNECTION_DATA_SECRET_ARN",
                      "value": "${rPrefectAgentDWHConnectionDataSecret}"
                    }, {
                      "name": "PLATFORM_DB_JSON_CONNECTION_DATA_SECRET_ARN",
                      "value": "${rPrefectAgentPlatformDBConnectionDataSecret}"
                    }, {
                      "name": "ENVIRONMENT",
                      "value": "${pEnvironment}"
                    }, {
                      "name": "DWH_QUERY_ROLE_ARN",
                      "value": "${pSafelakeDWHClusterRoleArn}"
                    }, {
                      "name": "EXTERNAL_SERVICES_SECRETS",
                      "value": "${rPrefectAgentExternalServicesSecret}"
                    }, {
                      "name": "DWH_PLATFORM_POSTGRES_USER_SECRET_ARN",
                      "value": "${pDWHPostgreSQLVersion11UserSecretArn}"
                    }, {
                      "name": "SAFELAKE_BUCKET_INGESTION_NAME",
                      "value": "${SafelakeBucketIngestionName}"
                    }, {
                      "name": "PREFECT__CONTEXT__SECRETS__SLACK_WEBHOOK_URL",
                      "value": "${pSlackWebhook}"
                    }, {
                      "name": "ROLLBAR_ENABLED",
                      "value": "true"
                    }, {
                      "name": "SLACK_ENABLED",
                      "value": "true"
                    }, {
                      "name": "PREFECT__SERVER__UI__ENDPOINT",
                      "value": "<masked_value>"
                    }
                   ]'
                - SafelakeBucketIngestionName: !Select [1, !Split [':::', !Ref pDatalakeBucketArn]]
            - Name: containerDefinitions_logConfiguration
              Value: !Sub '{ "logDriver": "awslogs", "options": { "awslogs-group": "${rFlowsLogsGroup}", "awslogs-region": "${AWS::Region}", "awslogs-stream-prefix": "prefect-flow"}}'
          LogConfiguration:
            LogDriver: 'awslogs'
            Options:
              awslogs-group: !Ref 'rAppLogsGroup'
              awslogs-region: !Ref 'AWS::Region'
              awslogs-stream-prefix: 'prefect-agent'
      Tags:
        - Key: 'Name'
          Value: !Sub '${pEnvironment}-prefect-fargate-agent'
        - Key: 'ApplicationVersion'
          Value: !Ref 'pApplicationVersion'

--env

ECSRun(env=..)

ECSAgent(env_var)

--env

Properties:
      TaskRoleArn: !Ref 'rAgentTaskRole'
      ExecutionRoleArn: !GetAtt 'rAgentExecutionRole.Arn'
      Family: !Sub '${pEnvironment}-prefect-fargate-agent'
      ContainerDefinitions:
        - Name: 'agent'
          Essential: true
          Command: ['prefect', 'agent', 'ecs', 'start', 'TEST_ECS_ENV=value_of_env_var']

from prefect.storage import Docker
from prefect.executors import LocalExecutor
from prefect.run_configs import ECSRun
from prefect import task, Flow
import prefect
import os

STORAGE = Docker(
    registry_url="mariiaprefect",
    image_name="envvars-testflow",
)

RUN_CONFIG = ECSRun(run_task_kwargs={"cluster": "default-cluster"}, labels=["masha", "envtoken"])
EXECUTOR = LocalExecutor()

@task
def print_me():
    logger = prefect.context.get("logger")
    env_value = os.environ['TEST_ECS_ENV']
    <http://logger.info|logger.info>(f"Got the env var {env_value}")


with Flow(
    "Ale", storage=STORAGE, run_config=RUN_CONFIG
) as flow:
    print_me()