search

synapsestudios / terraform-aws-ecs-service

MIT License
1 stars 0 forks source link
aws ecs-fargate ecs-service terraform terraform-aws terraform-module

readme

terraform-aws-ecs-service

This is a highly-opinionated ECS Service module for the Synapse Platform. It currently does NOT support blue-green deploys, autoscaling, customizing container sizes, or sidecar containers. It is also overly restrictive with the task role permissions.

Known Issues:

Currently we're aware of a bug occurring when trying to change container ports. If you change the container port, the service will not be able to start up due to an association bug between the load balancer target group health check and the ECS service. To correctly update the container port, you must first destroy the service, then update the container port, then re-create the service manually. This is a known issue with Terraform and AWS.

You can do this by commenting out the entire module, running a terraform apply, then uncommenting the module and running a terraform apply again after you've updated the container port.

Requirements

Name Version
aws >= 4.0

Providers

Name Version
aws >= 4.0

Modules

Name Source Version
database ./rds_cluster n/a
service_container_definition cloudposse/ecs-container-definition/aws 0.60.0

Resources

Name Type
aws_cloudwatch_log_group.service resource
aws_ecs_service.this resource
aws_ecs_task_definition.service resource
aws_iam_role.ecs_task_execution_role resource
aws_iam_role.ecs_task_role resource
aws_iam_role_policy_attachment.cognito resource
aws_iam_role_policy_attachment.ecs_task_execution_role resource
aws_iam_role_policy_attachment.s3 resource
aws_iam_role_policy_attachment.secrets_manager resource
aws_iam_role_policy_attachment.ses resource
aws_lb_listener_rule.this resource
aws_lb_target_group.this resource
aws_security_group.ecs_task resource
aws_security_group_rule.ecs_task_alb_access resource
aws_caller_identity.current data source
aws_iam_policy_document.assume_ecs_role_policy data source
aws_region.current data source

Inputs

Name Description Type Default Required
alb_security_group_id Security Group ID for the ALB string n/a yes
assign_public_ip Whether or not to assign a public IP to the task bool false no
azs Availability zones list(string) n/a yes
cluster_arn ECS cluster to deploy into string n/a yes
command Container startup command (Use null if container_definitions is set) list(string) n/a yes
container_definitions A list of valid container definitions provided as a single valid JSON document. By default, this module will generate a container definition for you. If you need to provide your own or have multiple, you can do so here. string null no
container_image Image tag of the Docker container to use for this service (Use null if container_definitions is set) string n/a yes
container_port Port exposed by the container number n/a yes
container_secrets The Secrets to Pass to the container. (Do not use if container_definitions is set) 
list(object({
    name      = string
    valueFrom = string
  }))
 [] no
db_instance_class Size of instances within the RDS cluster string "db.t4g.medium" no
db_instance_count How many RDS instances to create number 1 no
db_name Name of the postgres database to create, if creating an RDS cluster string "main" no
ecs_desired_count How many tasks to launch in ECS service number 1 no
environment_variables The environment variables to pass to the container. This is a list of maps. (Do not use if container_definitions is set) 
list(object({
    name  = string
    value = string
  }))
 [] no
health_check_path Path to use for health checks string n/a yes
host_port Port exposed by the host (Do not use if container_definitions is set) number null no
hostname Hostname to use for listener rule string n/a yes
listener_arn ALB listener ARN to add listener rule to string n/a yes
load_balancer_container_name Container name to use for load balancer target group forwarder string null no
service_name Service directory in the application git repo string n/a yes
subnets List of subnet names the service will reside on. list(string) n/a yes
task_cpu Task CPU number 1024 no
task_memory Task memory number 2048 no
use_database_cluster Whether or not we should create a DB cluster and inject the database connection string into the container bool n/a yes
vpc_id VPC to deploy into string n/a yes

Outputs

Name Description
log_group_name n/a