From 5c0f4c98fdc459f944fbbb232bf7d19e2b1ccef8 Mon Sep 17 00:00:00 2001
From: Anandkumar Patel <anand@runnable.com>
Date: Thu, 15 Sep 2016 15:21:02 -0700
Subject: [PATCH] old tags shall not pass

---
 ansible/roles/builder/tasks/main.yml | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/ansible/roles/builder/tasks/main.yml b/ansible/roles/builder/tasks/main.yml
index 1a4d1589..b747286c 100644
--- a/ansible/roles/builder/tasks/main.yml
+++ b/ansible/roles/builder/tasks/main.yml
@@ -23,6 +23,26 @@
     accept_hostkey: yes
     force: yes
 
+- name: get new tags from remote
+  tags: deploy
+  become: true
+  shell: "git fetch --tags"
+  args:
+    chdir: "{{ build_dir }}/{{ name }}/repo"
+
+- name: get latest tag name
+  tags: deploy
+  become: true
+  shell: "git describe --tags `git rev-list --tags --max-count=1`"
+  args:
+    chdir: "{{ build_dir }}/{{ name }}/repo"
+  register: latest_tag
+
+- name: ensure latest tag is deployed
+  tags: deploy
+  fail: msg="Cannot deploy {{ git_branch }} because latest is {{latest_tag.stdout}}. Bypass with `-t i_am_deploying_an_old_tag`"
+  when: node_env=="production-delta" and latest_tag.stdout != git_branch and i_am_deploying_an_old_tag is not defined
+
 - name: copy dockerfile to build folder
   tags: deploy
   become: true