1

Aws ecs tutorial

calendar Sep 4, 2019 · 2 分钟阅读 · aws sap  ·
分享到: linkedin copy

文章目录

关于ECS的专业的词汇

  • Task Definition ：实际就是要给launch configration,比如暴露端口号，用什么docker image，cpu 内存需要多少，运行docker 的command，环境变量

  • Task ：简单来说就是一个running instance

  • Service ：一组task

  • Cluster ：一组task 跑在一个或者多个 constainer 里面

  • Container Instance ：容器实例里面跑的是多个 task

看图

按照此图搭建一组ecs的服务

  • 创建一个ecs cluster
  • 创建一个ecsServiceRole
  • 创建Task Definition
  • 创建elb和 target group
  • 创建 service，里面只有一个task
  • 检查运行情况
  • 把service里面的task 改为4

创建一个ecs cluster

  • 创建secrutiry group my-ecs-sg 
    1aws ec2 create-security-group --group-name my-ecs-sg --description my-ecs-sg
  • 创建ecs cluster：选择vpc subnet多个

创建 ecsServiceRole

  • attach policy ：AmazonEC2ContainerServiceRole
  • trusted relationship：
 1  {
 2  "Version": "2012-10-17",
 3  "Statement": [
 4    {
 5      "Effect": "Allow",
 6      "Principal": {
 7        "Service": "ecs.amazonaws.com"
 8      },
 9      "Action": "sts:AssumeRole"
10    }
11  ]
12}

创建 task defination

 1task-definition.json
 2{
 3  "family": "sinatra-hi",
 4  "containerDefinitions": [
 5    {
 6      "name": "web",
 7      "image": "tongueroo/sinatra:latest",
 8      "cpu": 128,
 9      "memoryReservation": 128,
10      "portMappings": [
11        {
12          "containerPort": 4567,
13          "protocol": "tcp"
14        }
15      ],
16      "command": [
17        "ruby", "hi.rb"
18      ],
19      "essential": true
20    }
21  ]
22}

1    aws ec2 authorize-security-group-ingress --group-name my-ecs-sg --protocol tcp --port 1-65535 --source-group my-elb-sg  --vpc-id vpc-xxxmyid

创建elb 和 target group

  • create： my-elb with a HTTP protocol and Port 80
  • 为elb 配置 security group： my-elb-sg ，inbound allowed port 80 and source 0.0.0.0/0
  • 为my-ecs-sg 配置 inbound security group,允许来自elb的请求 aws ec2 authorize-security-group-ingress --group-id sg-xxxyyy --protocol tcp --port 1-65535 --source-group sg-xxxxx

创建 service

 1ecs-service.json
 2{
 3  "cluster": "my-cluster",
 4  "serviceName": "my-service",
 5  "taskDefinition": "sinatra-hi",
 6  "loadBalancers": [
 7      {
 8          "targetGroupArn": "FILL-IN-YOUR-TARGET-GROUP",
 9          "containerName": "web",
10          "containerPort": 4567
11      }
12  ],
13  "desiredCount": 1,
14  "role": "ecsServiceRole"
15}
16
17 aws ecs create-service --cli-input-json file://ecs-service.json

检查运行情况

  • 找到elb的dns
  • 执行curl ：dns address

把service的节点扩展为4个

  • 找到cluster 的pulibc dns 
    1ssh -i xxx.perm cluster-public-dns-address
  • 进入ecs 的container
  • 执行docker ps -a 发现有4个容器在running