如何使用pulumi设置AWS Fargate的容器端口和负载平衡器？

debugcn 发表于 Dev

小牛

我正在尝试使用Pulumi在AWS Fargate上部署简单的flask python应用程序。python应用程序的dockerfile从容器公开端口8000。如何使用pulumi使用负载均衡器进行设置？到目前为止，我已经使用index.ts（pulumi）尝试了以下方法：

import * as awsx from "@pulumi/awsx";

// Step 1: Create an ECS Fargate cluster.
const cluster = new awsx.ecs.Cluster("first_cluster");

// Step 2: Define the Networking for our service.
const alb = new awsx.elasticloadbalancingv2.ApplicationLoadBalancer(
    "net-lb", { external: true, securityGroups: cluster.securityGroups });
const web = alb.createListener("web", { port: 80, external: true });

// Step 3: Build and publish a Docker image to a private ECR registry.
const img = awsx.ecs.Image.fromPath("app-img", "./app");

// Step 4: Create a Fargate service task that can scale out.
const appService = new awsx.ecs.FargateService("app-svc", {
    cluster,
    taskDefinitionArgs: {
        container: {
            image: img,
            cpu: 102 /*10% of 1024*/,
            memory: 50 /*MB*/,
            portMappings: [{ containerPort: 8000, }],
        },
    },
    desiredCount: 5,
});

// Step 5: Export the Internet address for the service.
export const url = web.endpoint.hostname;

当我卷曲URL时curl http://$(pulumi stack output url)，我得到：

<html>
<head><title>503 Service Temporarily Unavailable</title></head>
<body bgcolor="white">
<center><h1>503 Service Temporarily Unavailable</h1></center>
</body>
</html>

如何将负载均衡器端口映射到8000的容器端口？

米哈伊尔·希尔科夫（Mikhail Shilkov）

您可以在应用程序负载均衡器上指定目标端口：

const atg = alb.createTargetGroup(
    "app-tg", { port: 8000, deregistrationDelay: 0 });

然后，您可以简单地将侦听器传递到服务端口映射：

const appService = new awsx.ecs.FargateService("app-svc", {
    // ...
    taskDefinitionArgs: {
        container: {
            // ...
            portMappings: [web],
        },
    },
});

这是带有公共docker容器的完整复制品，因此任何人都可以从工作样本开始：

import * as awsx from "@pulumi/awsx";

const cluster = new awsx.ecs.Cluster("first_cluster");

const alb = new awsx.elasticloadbalancingv2.ApplicationLoadBalancer(
    "app-lb", { external: true, securityGroups: cluster.securityGroups });
const atg = alb.createTargetGroup(
    "app-tg", { port: 8080, deregistrationDelay: 0 });
const web = atg.createListener("web", { port: 80 });

const appService = new awsx.ecs.FargateService("app-svc", {
    cluster,
    taskDefinitionArgs: {
        container: {
            image: "gcr.io/google-samples/kubernetes-bootcamp:v1",
            portMappings: [web],
        },
    },
    desiredCount: 1,
});

export const url = web.endpoint.hostname;

本文收集自互联网，转载请注明来源。

如有侵权，请联系[email protected] 删除。