Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly
Sign up
Appearance settings

Commit 010e581

Browse files
feat: Add support for advanced deployment configurations (i.e. - blue/green deployment) (#322)
* blue/green deployments * updates * update example * update example * update examples * feedback changes
1 parent 086afd9 commit 010e581

File tree

26 files changed

+333
-31
lines changed

26 files changed

+333
-31
lines changed

‎README.md

Lines changed: 2 additions & 2 deletions
Large diffs are not rendered by default.

‎examples/complete/README.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,13 +27,13 @@ Note that this example may create resources which will incur monetary charges on
2727
| Name | Version |
2828
|------|---------|
2929
| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.5.7 |
30-
| <a name="requirement_aws"></a> [aws](#requirement\_aws) | >= 6.0 |
30+
| <a name="requirement_aws"></a> [aws](#requirement\_aws) | >= 6.4 |
3131

3232
## Providers
3333

3434
| Name | Version |
3535
|------|---------|
36-
| <a name="provider_aws"></a> [aws](#provider\_aws) | >= 6.0 |
36+
| <a name="provider_aws"></a> [aws](#provider\_aws) | >= 6.4 |
3737

3838
## Modules
3939

‎examples/complete/versions.tf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ terraform {
44
required_providers {
55
aws = {
66
source = "hashicorp/aws"
7-
version = ">= 6.0"
7+
version = ">= 6.4"
88
}
99
}
1010
}

‎examples/container-definition/README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ Note that this example may create resources which will incur monetary charges on
2222
| Name | Version |
2323
|------|---------|
2424
| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.5.7 |
25-
| <a name="requirement_aws"></a> [aws](#requirement\_aws) | >= 6.0 |
25+
| <a name="requirement_aws"></a> [aws](#requirement\_aws) | >= 6.4 |
2626
| <a name="requirement_local"></a> [local](#requirement\_local) | >= 2.5 |
2727

2828
## Providers

‎examples/container-definition/versions.tf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ terraform {
44
required_providers {
55
aws = {
66
source = "hashicorp/aws"
7-
version = ">= 6.0"
7+
version = ">= 6.4"
88
}
99
local = {
1010
source = "hashicorp/local"

‎examples/ec2-autoscaling/README.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,13 +27,13 @@ Note that this example may create resources which will incur monetary charges on
2727
| Name | Version |
2828
|------|---------|
2929
| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.5.7 |
30-
| <a name="requirement_aws"></a> [aws](#requirement\_aws) | >= 6.0 |
30+
| <a name="requirement_aws"></a> [aws](#requirement\_aws) | >= 6.4 |
3131

3232
## Providers
3333

3434
| Name | Version |
3535
|------|---------|
36-
| <a name="provider_aws"></a> [aws](#provider\_aws) | >= 6.0 |
36+
| <a name="provider_aws"></a> [aws](#provider\_aws) | >= 6.4 |
3737

3838
## Modules
3939

‎examples/ec2-autoscaling/versions.tf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ terraform {
44
required_providers {
55
aws = {
66
source = "hashicorp/aws"
7-
version = ">= 6.0"
7+
version = ">= 6.4"
88
}
99
}
1010
}

‎examples/fargate/README.md

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,13 +27,13 @@ Note that this example may create resources which will incur monetary charges on
2727
| Name | Version |
2828
|------|---------|
2929
| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.5.7 |
30-
| <a name="requirement_aws"></a> [aws](#requirement\_aws) | >= 6.0 |
30+
| <a name="requirement_aws"></a> [aws](#requirement\_aws) | >= 6.4 |
3131

3232
## Providers
3333

3434
| Name | Version |
3535
|------|---------|
36-
| <a name="provider_aws"></a> [aws](#provider\_aws) | >= 6.0 |
36+
| <a name="provider_aws"></a> [aws](#provider\_aws) | >= 6.4 |
3737

3838
## Modules
3939

@@ -49,6 +49,9 @@ Note that this example may create resources which will incur monetary charges on
4949

5050
| Name | Type |
5151
|------|------|
52+
| [aws_iam_role.ecs_elb_permissions](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role) | resource |
53+
| [aws_iam_role_policy_attachment.ecs_elb_management_role](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role_policy_attachment) | resource |
54+
| [aws_iam_role_policy_attachment.ecs_service_role](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role_policy_attachment) | resource |
5255
| [aws_service_discovery_http_namespace.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/service_discovery_http_namespace) | resource |
5356
| [aws_availability_zones.available](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/availability_zones) | data source |
5457
| [aws_ssm_parameter.fluentbit](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/ssm_parameter) | data source |

‎examples/fargate/main.tf

Lines changed: 143 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -60,6 +60,26 @@ module "ecs_service" {
6060
# Enables ECS Exec
6161
enable_execute_command = true
6262

63+
# for blue/green deployments
64+
deployment_configuration = {
65+
strategy = "BLUE_GREEN"
66+
bake_time_in_minutes = 2
67+
68+
# example config using lifecycle hooks
69+
# lifecycle_hook = {
70+
# success = {
71+
# hook_target_arn = aws_lambda_function.hook_success.arn
72+
# role_arn = aws_iam_role.global.arn
73+
# lifecycle_stages = ["POST_SCALE_UP", "POST_TEST_TRAFFIC_SHIFT"]
74+
# }
75+
# failure = {
76+
# hook_target_arn = aws_lambda_function.hook_failure.arn
77+
# role_arn = aws_iam_role.global.arn
78+
# lifecycle_stages = ["TEST_TRAFFIC_SHIFT", "POST_PRODUCTION_TRAFFIC_SHIFT"]
79+
# }
80+
# }
81+
}
82+
6383
# Container definition(s)
6484
container_definitions = {
6585

@@ -152,6 +172,14 @@ module "ecs_service" {
152172
target_group_arn = module.alb.target_groups["ex_ecs"].arn
153173
container_name = local.container_name
154174
container_port = local.container_port
175+
176+
# for blue/green deployments
177+
advanced_configuration = {
178+
alternate_target_group_arn = module.alb.target_groups["ex_ecs_alternate"].arn
179+
production_listener_rule = module.alb.listener_rules["ex_http/production"].arn
180+
test_listener_rule = module.alb.listener_rules["ex_http/test"].arn
181+
role_arn = aws_iam_role.ecs_elb_permissions.arn
182+
}
155183
}
156184
}
157185

@@ -176,6 +204,12 @@ module "ecs_service" {
176204
}
177205

178206
tags = local.tags
207+
208+
depends_on = [
209+
aws_iam_role.ecs_elb_permissions,
210+
aws_iam_role_policy_attachment.ecs_service_role,
211+
aws_iam_role_policy_attachment.ecs_elb_management_role
212+
]
179213
}
180214

181215
################################################################################
@@ -278,8 +312,60 @@ module "alb" {
278312
port = 80
279313
protocol = "HTTP"
280314

281-
forward = {
282-
target_group_key = "ex_ecs"
315+
fixed_response = {
316+
content_type = "text/plain"
317+
message_body = "404: Page not found"
318+
status_code = "404"
319+
}
320+
321+
# for blue/green deployments
322+
rules = {
323+
production = {
324+
priority = 1
325+
actions = [
326+
{
327+
type = "weighted-forward"
328+
target_groups = [
329+
{
330+
target_group_key = "ex_ecs"
331+
weight = 100
332+
},
333+
{
334+
target_group_key = "ex_ecs_alternate"
335+
weight = 0
336+
}
337+
]
338+
}
339+
]
340+
conditions = [
341+
{
342+
path_pattern = {
343+
values = ["/*"]
344+
}
345+
}
346+
]
347+
}
348+
test = {
349+
priority = 2
350+
actions = [
351+
{
352+
type = "weighted-forward"
353+
target_groups = [
354+
{
355+
target_group_key = "ex_ecs_alternate"
356+
weight = 100
357+
}
358+
]
359+
}
360+
]
361+
conditions = [
362+
{
363+
path_pattern = {
364+
values = ["/*"]
365+
}
366+
}
367+
]
368+
}
283369
}
284370
}
285371
}
@@ -308,6 +394,31 @@ module "alb" {
308394
# ECS will attach the IPs of the tasks to this target group
309395
create_attachment = false
310396
}
397+
398+
# for blue/green deployments
399+
ex_ecs_alternate = {
400+
backend_protocol = "HTTP"
401+
backend_port = local.container_port
402+
target_type = "ip"
403+
deregistration_delay = 5
404+
load_balancing_cross_zone_enabled = true
405+
406+
health_check = {
407+
enabled = true
408+
healthy_threshold = 5
409+
interval = 30
410+
matcher = "200"
411+
path = "/"
412+
port = "traffic-port"
413+
protocol = "HTTP"
414+
timeout = 5
415+
unhealthy_threshold = 2
416+
}
417+
418+
# There's nothing to attach here in this definition. Instead,
419+
# ECS will attach the IPs of the tasks to this target group
420+
create_attachment = false
421+
}
311422
}
312423

313424
tags = local.tags
@@ -329,3 +440,33 @@ module "vpc" {
329440

330441
tags = local.tags
331442
}
443+
444+
resource "aws_iam_role" "ecs_elb_permissions" {
445+
name = "${local.name}-ecs-elb-role"
446+
assume_role_policy = jsonencode({
447+
Version = "2012年10月17日"
448+
Statement = [
449+
{
450+
Action = "sts:AssumeRole"
451+
Effect = "Allow"
452+
Principal = {
453+
Service = [
454+
"ecs-tasks.amazonaws.com",
455+
"ecs.amazonaws.com",
456+
]
457+
}
458+
}
459+
]
460+
})
461+
}
462+
463+
# for example purposes only
464+
resource "aws_iam_role_policy_attachment" "ecs_service_role" {
465+
role = aws_iam_role.ecs_elb_permissions.name
466+
policy_arn = "arn:aws:iam::aws:policy/service-role/AmazonEC2ContainerServiceRole"
467+
}
468+
469+
resource "aws_iam_role_policy_attachment" "ecs_elb_management_role" {
470+
role = aws_iam_role.ecs_elb_permissions.name
471+
policy_arn = "arn:aws:iam::aws:policy/AmazonECSInfrastructureRolePolicyForLoadBalancers"
472+
}

‎examples/fargate/versions.tf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ terraform {
44
required_providers {
55
aws = {
66
source = "hashicorp/aws"
7-
version = ">= 6.0"
7+
version = ">= 6.4"
88
}
99
}
1010
}

0 commit comments

Comments
(0)

AltStyle によって変換されたページ (->オリジナル) /