amazon-web-services - 创建 ECS 服务时，CloudFormation 模板卡在 CREATE_IN_PROGRESS

Question

我正在 CloudFormation 中创建 ECS 服务。

我没有收到错误，它只是位于逻辑 ID = Service 阶段的 CREATE_IN_PROGRESS。

这是我的 CF 模板(ECS 集群和上面的一些其他内容，但由于相关性而被删除)。

  TaskDefinition:
    Type: 'AWS::ECS::TaskDefinition'
    Properties:
      Family: flink
      Memory: 2048
      Cpu: 512
      NetworkMode: awsvpc
      RequiresCompatibilities:
        - FARGATE 
      ContainerDefinitions:
        - Name: flink-jobmanager
          Image: ACCOUNT_ID.dkr.ecr.us-west-1.amazonaws.com/teststack-flink:latest
          Essential: true
          PortMappings:
            - ContainerPort: 8081
              HostPort: 8081
          LogConfiguration:
            LogDriver: awslogs
            Options:
              awslogs-group: ecs/flink-stream
              awslogs-region: !Ref AWS::Region
              awslogs-stream-prefix: ecs
          Command:
            - jobmanager
        - Name: flink-taskmanager
          Image: ACCOUNT_ID.dkr.ecr.us-west-1.amazonaws.com/teststack-flink:latest
          Essential: true
          Command:
            - taskmanager
      ExecutionRoleArn: !Sub arn:aws:iam::${AWS::AccountId}:role/ecsTaskExecutionRole
      Volumes: []
      TaskRoleArn: !Sub arn:aws:iam::${AWS::AccountId}:role/ecsTaskExecutionRole
      Tags:
        -
          Key: EnvironmentStage
          Value: !Ref EnvironmentStage

  Service:
    Type: 'AWS::ECS::Service'
    Properties:
      ServiceName: !Join ['', [!Ref EnvironmentStage, '-', !Ref 'AWS::StackName']]
      Cluster: !Join ['', ['arn:aws:ecs:', !Ref 'AWS::Region', ':', !Ref 'AWS::AccountId', ':cluster/', !Ref ECSCluster]]
      LaunchType: FARGATE
      DeploymentConfiguration:
        MaximumPercent: 200
        MinimumHealthyPercent: 75
      TaskDefinition: !Join ['', ['arn:aws:ecs:', !Ref 'AWS::Region', ':', !Ref 'AWS::AccountId', ':task-definition/', !Ref TaskDefinition]]
      # TaskDefinition: !Ref TaskDefinition
      DesiredCount: 1
      DeploymentController:
        Type: ECS
      EnableECSManagedTags: true
      PropagateTags: TASK_DEFINITION
      SchedulingStrategy: REPLICA
      NetworkConfiguration:
        AwsvpcConfiguration:
          AssignPublicIp: ENABLED
          SecurityGroups:
            - !Ref FlinkSecurityGroup
          Subnets:
            - subnet-466da11c
            - subnet-6fe65509
      Tags:
        -
          Key: EnvironmentStage
          Value: !Ref EnvironmentStage

当我手动设置时，容器都会部署到集群

Answer 1

检查集群 -> CLUSTER_NAME -> 任务 -> 停止后，我看到以下内容:

Status reason   CannotStartContainerError: Error response from daemon: 
failed to initialize logging driver: failed to create Cloudwatch log stream: 
ResourceNotFoundException: The specified log group does not exist.

问题很简单，我忘记将日志组的创建添加到我的 CF 模板中。所以我添加了以下内容:

  LogGroup:
    Type: AWS::Logs::LogGroup
    Properties:
      LogGroupName: !Sub ${EnvironmentStage}-service-flink

然后将TaskDefinition中的LogConfiguration修改为:

LogConfiguration:
  LogDriver: awslogs
  Options:
    awslogs-group: !Ref LogGroup
    awslogs-region: !Ref 'AWS::Region'
    awslogs-stream-prefix: flink

现在 CF 模板就像一个魅力:)