AWS ECS Terraform Module

Terraform module that deploys an ECS autoscaling group. If you include an EFS ID and EFS Security Group, it will also mount the EFS volume to the ECS instances.

HTTP Proxy support

In some environments an HTTP proxy will be required to get containers and talk to the outside world. This module supports this via the http_proxy and http_proxy_port variables.

Deploying with EFS

By default, the module will deploy without trying to mount an EFS volume.

There are two modes of using EFS with this module, either using EFS as a mounted file system on the hosts or as volumes for the containers.

If using EFS as volumes in the containers you will need to provide the security groups used for the EFS volumes.

If using EFS as a mounted filesystem and you attempt to deploy the EFS at the same time as the ECS cluster, a race condition exists where the autoscaling group gets created before the mount targets have finished being created. To avoid this, you can set the depends_on_efs variable to the aws_efs_mount_target output. This way, the autoscaling group won't get created until the EFS mount targets have been created.

Usage

This example is showing using EFS as a mounted filesystem on the hosts.

module "ecs-0" {
  source                        = "lazzurs/ecs/aws"
  version                       = "1.1.0"
  ecs_name                      = "my-ecs-cluster"
  vpc_id                        = vpc-0e151a59f874eadd8
  ecs_cidr_block                = ["10.0.0.0/8"]
  subnet_ids                    = ["subnet-1e151a59f874eadd8", "subnet-0e148a59f874eadd8", "subnet-2e151a57f874eadd8"]
  ecs_min_size                  = "1"
  ecs_max_size                  = "3"
  ecs_desired_capacity          = "2"
  ecs_instance_type             = "t2.large"
  ecs_key_name                  = "aws-key"
  tags                          = var.tags
  ecs_additional_iam_statements = var.ecs_additional_iam_statements
  attach_efs                    = true
  efs_id                        = "fs-532cdcd3"
  efs_sg_id                     = "sg-076487b693f21bcb8"
  depends_on_efs                = ["fsmt-8387e72b"]
}
# Variables
tags = {
         Terraform = "true"
         Environment = "development"
       }

ecs_additional_iam_statements = [
  {
    effect = "Allow"
    actions = [
      "ec2:*",
      "autoscaling:*"
    ]
    resources = ["*"]
  }
]

Variables

Name	Description	Type	Default	Required
vpc_id	The VPC ID that the cluster will be deployed to	string		yes
subnet_ids	The Subnet IDs that the cluster will be deployed to	list(string)		yes
attach_efs	Whether to try and attach an EFS volume to the instances	bool	false	no
efs_sg_ids	The EFS Security Group ID - Required if attach_efs is true	list(string)	[""]	no
efs_id	The EFS ID - Required if attach_efs is true	String	""	no
depends_on_efs	If attaching EFS, it makes sure that the mount targets are ready	list(string)	[]	no
ecs_name	Name for the ECS cluster that will be deployed	string		yes
ecs_cidr_block	CIDR Block for the Security Group	list(string)		yes
ecs_min_size	The minimum number of ECS servers to create in the autoscaling group	number	1	no
ecs_max_size	The maximuum number of ECS servers to create in the autoscaling group	number	1	no
ecs_desired_capacity	The desired number of ECS servers to create in the autoscaling group	number	1	no
ecs_instance_type	The instance type to deploy to.	string	t3.medium	no
ecs_key_name	The key name to use for the instances.	string	""	no
ecs_associate_public_ip_address	Whether to associate a public IP in the launch configuration	bool	false	no
ecs_additional_iam_statements	Additional IAM statements for the ECS instances	list(object)	[]	no
ecs_capacity_provider_target	Target percentage ECS capacity provider to use	number	""	no
http_proxy	Name of the HTTP proxy that Docker and ECS agent should use	string	""	no
http_proxy_port	Port number to use for the HTTP proxy	string	3128	no
additional_instance_role_policy	Additional policy that can be added to the ECS instances	string	policy/AmazonSSMManagedInstanceCore	no
monitoring	Enabling detailed monitoring in the launch template	string	true	no
metadata_options_endpoint	Metadata option http endpoint	string	enabled	no
metadata_options_tokens	Metadata option http tokens	string	required	no
metadata_options_hop_limit	Metadata option http hop limit	number	1	no
tags	A map of tags to add to all resources	map(string)	{}	no

Outputs

Name	Description
cluster_id	The ECS cluster ID
cluster_arn	The ECS cluster ARN
cluster_asg_name	The ECS cluster Auto Scaling Group name, used to attach Auto Scaling Policies
cluster_asg_arn	The ECS cluster Auto Scaling Group arn, used for ECS capacity providers
cluster_aws_launch_template_name	The ECS cluster AutoScaling Group aws_launch_template Name
cluster_iam_role_arn	The ECS cluster IAM role ARN, useful for attaching to ECR repos

Authors

Module has been forked from a module by Mark Honomichl. Maintained by Rob Lazzurs.

License

MIT Licensed. See LICENSE for full details