使用 Amazon CodeCatalyst 在 Amazon ECS 上部署容器 Web 应用程序

 cdk --version

mkdir cdk-ecs-infra
 cd cdk-ecs-infra
 cdk init app --language typescript

 Applying project template app for typescript
 # Welcome to your CDK TypeScript project
 
 This is a blank project for CDK development with TypeScript.
 
 The `cdk.json` file tells the CDK Toolkit how to execute your app.
 
 ## Useful commands
 
 * `npm run build` compile typescript to js
 * `npm run watch` watch for changes and compile
 * `npm run test` perform the jest unit tests
 * `cdk deploy` deploy this stack to your default AWS account/region
 * `cdk diff` compare deployed stack with current state
 * `cdk synth` emits the synthesized CloudFormation template
 
 Initializing a new git repository...
 hint: Using 'master' as the name for the initial branch. This default branch name
 hint: is subject to change. To configure the initial branch name to use in all
 hint: of your new repositories, which will suppress this warning, call:
 hint: 
 hint: git config --global init.defaultBranch <name>
 hint: 
 hint: Names commonly chosen instead of 'master' are 'main', 'trunk' and
 hint: 'development'. The just-created branch can be renamed via this command:
 hint: 
 hint: git branch -m <name>
 Executing npm install...
 npm WARN deprecated w3c-hr-time@1.0.2: Use your platform's native performance.now() and performance.timeOrigin.
 ✅ All done!

import * as ec2 from "aws-cdk-lib/aws-ec2";
import * as ecs from "aws-cdk-lib/aws-ecs";
import * as ecr from "aws-cdk-lib/aws-ecr";
import * as ecs_patterns from "aws-cdk-lib/aws-ecs-patterns";

// Look up the default VPC
 const vpc = ec2.Vpc.fromLookup(this, "VPC", {
 isDefault: true
 });

const repository = new ecr.Repository(this, 'My-Repository',{
 repositoryName: 'my-respository-cdkecsinfrastack'
 });

 const taskIamRole = new cdk.aws_iam.Role(this, "AppRole", {
 roleName: "AppRole",
 assumedBy: new cdk.aws_iam.ServicePrincipal('ecs-tasks.amazonaws.com'),
 });
 
 taskIamRole.addManagedPolicy(
 cdk.aws_iam.ManagedPolicy.fromAwsManagedPolicyName(
 "service-role/AmazonECSTaskExecutionRolePolicy"
 ));

 const taskDefinition = new ecs.FargateTaskDefinition(this, 'Task', {
 taskRole: taskIamRole,
 family : 'CdkEcsInfraStackTaskDef',
 });

 taskDefinition.addContainer('MyContainer', {
 image: ecs.ContainerImage.fromRegistry('nginx:latest'),
 portMappings: [{ containerPort: 80 }],
 memoryReservationMiB: 256,
 cpu: 256,
 });

new ecs_patterns.ApplicationLoadBalancedFargateService(this, "MyApp", {
 vpc: vpc,
 taskDefinition: taskDefinition,
 desiredCount: 1,
 serviceName: 'MyWebApp',
 assignPublicIp: true,
 publicLoadBalancer: true,
 healthCheckGracePeriod: cdk.Duration.seconds(5),
 }); 

// Output the URL of the site
 new cdk.CfnOutput(this, "MyApp URL", {
 value: "http://" + ecs_app.loadBalancer.loadBalancerDnsName
 });
 
 // Output the ARN of the ECS Cluster
 new cdk.CfnOutput(this, "ECS cluster ARN", {
 value: ecs_app.cluster.clusterArn
 });

env: { account: process.env.CDK_DEFAULT_ACCOUNT, region: process.env.CDK_DEFAULT_REGION },

cdk bootstrap
 
 #output
 ⏳ Bootstrapping environment aws://0123456789012/<region>...
 ✅ Environment aws://0123456789012/<region> bootstrapped

import * as ec2 from "aws-cdk-lib/aws-ec2";
import * as ecs from "aws-cdk-lib/aws-ecs";
import * as ecs_patterns from "aws-cdk-lib/aws-ecs-patterns";
import * as cdk from 'aws-cdk-lib';
import { Construct } from 'constructs';

export class CdkEcsInfraStack extends cdk.Stack {
 constructor(scope: Construct, id: string, props?: cdk.StackProps) {
 super(scope, id, props);

 // Look up the default VPC
 const vpc = ec2.Vpc.fromLookup(this, "VPC", {
 isDefault: true
 });

 const repository = new ecr.Repository(this, 'My-Repository',{
 repositoryName: 'my-respository-cdkecsinfrastack'
 });

 const taskIamRole = new cdk.aws_iam.Role(this, "AppRole", {
 roleName: "AppRole",
 assumedBy: new cdk.aws_iam.ServicePrincipal('ecs-tasks.amazonaws.com'),
 });

 taskIamRole.addManagedPolicy(
 cdk.aws_iam.ManagedPolicy.fromAwsManagedPolicyName(
 "service-role/AmazonECSTaskExecutionRolePolicy"
 ));

 const taskDefinition = new ecs.FargateTaskDefinition(this, 'Task', {
 taskRole: taskIamRole,
 family : 'CdkEcsInfraStackTaskDef',
 });

 taskDefinition.addContainer('MyContainer', {
 image: ecs.ContainerImage.fromRegistry('nginx:latest'),
 portMappings: [{ containerPort: 80 }],
 memoryReservationMiB: 256,
 cpu: 256,
 });

 new ecs_patterns.ApplicationLoadBalancedFargateService(this, "MyApp", {
 vpc: vpc,
 taskDefinition: taskDefinition,
 desiredCount: 1,
 serviceName: 'MyWebApp',
 assignPublicIp: true,
 publicLoadBalancer: true,
 });

 // Output the URL of the site
 new cdk.CfnOutput(this, "MyApp URL", {
 value: "http://" + ecs_app.loadBalancer.loadBalancerDnsName
 });
 
 // Output the ARN of the ECS Cluster
 new cdk.CfnOutput(this, "ECS cluster ARN", {
 value: ecs_app.cluster.clusterArn
 });
 }
}

wget -O SampleApp.zip https://github.com/build-on-aws/automate-web-app-amazon-ecs-cdk-codecatalyst/zipball/main/
unzip SampleApp.zip
mv build-on-aws-automate-web-app-amazon-ecs-cdk-codecatalyst-adb68cd/SampleApp/* SampleApp/
rm -rf build-on-aws-automate-web-app-amazon-ecs-cdk-codecatalyst-adb68cd
rm SampleApp.zip

{
 "executionRoleArn": "arn:aws:iam::<account ID>:role/AppRole",
 "containerDefinitions": [
 {
 "name": "MyContainer",
 "image": "$REPOSITORY_URI:$IMAGE_TAG",
 "essential": true,
 "portMappings": [
 {
 "hostPort": 80,
 "protocol": "tcp",
 "containerPort": 80
 }
 ]
 }
 ],
 "requiresCompatibilities": [
 "FARGATE"
 ],
 "networkMode": "awsvpc",
 "cpu": "256",
 "memory": "512",
 "family": "CdkEcsInfraStackTaskDef"
}

git add .
git commit -m "Adding sample app"
git push

Name: Workflow_752b
SchemaVersion: "1.0"

# Optional - Set automatic triggers.
Triggers:
 - Type: Push
 Branches:
 - main

# Required - Define action configurations.
Actions:

Actions:
 Build_application:
 Identifier: aws/build@v1
 Inputs:
 Sources:
 - WorkflowSource
 Variables:
 - Name: region
 Value: us-west-2
 - Name: registry
 Value: <Account-Id>.dkr.ecr.us-west-2.amazonaws.com
 - Name: image
 Value: my-respository-cdkecsinfrastack
 Outputs:
 AutoDiscoverReports:
 Enabled: false
 Variables:
 - IMAGE
 Compute:
 Type: EC2
 Environment:
 Connections:
 - Role: <CodeCatalystPreviewDevelopmentAdministrator role>
 # Add account id within quotes. Eg: "123456789012"
 Name: "<Account-Id>"
 Name: Non-prod
 Configuration:
 Steps:
 - Run: export account=`aws sts get-caller-identity --output text | awk '{ print $1 }'`
 - Run: aws ecr get-login-password --region ${region} | docker login --username AWS --password-stdin ${registry}
 - Run: docker build -t appimage .
 - Run: docker tag appimage ${registry}/${image}:${WorkflowSource.CommitId}
 - Run: docker push --all-tags ${registry}/${image}
 - Run: export IMAGE=${registry}/${image}:${WorkflowSource.CommitId}

RenderAmazonECStaskdefinition:
 Identifier: aws/ecs-render-task-definition@v1
 Configuration:
 image: ${Build_application.IMAGE}
 container-name: MyContainer
 task-definition: task.json
 Outputs:
 Artifacts:
 - Name: TaskDefinition
 Files:
 - task-definition*
 DependsOn:
 - Build_application
 Inputs:
 Sources:
 - WorkflowSource

DeploytoAmazonECS:
 Identifier: aws/ecs-deploy@v1
 Configuration:
 task-definition: /artifacts/DeploytoAmazonECS/TaskDefinition/${RenderAmazonECStaskdefinition.task-definition}
 service: MyWebApp
 cluster: <ECS cluster ARN>
 region: us-west-2
 Compute:
 Type: EC2
 Fleet: Linux.x86-64.Large
 Environment:
 Connections:
 - Role: <CodeCatalystPreviewDevelopmentAdministrator role>
 # Add account id within quotes. Eg: "12345678"
 Name: "<Account Id>"
 Name: Non-Prod
 DependsOn:
 - RenderAmazonECStaskdefinition
 Inputs:
 Artifacts:
 - TaskDefinition
 Sources:
 - WorkflowSource

Name: BuildAndDeployToECS
SchemaVersion: "1.0"

# Optional - Set automatic triggers.
Triggers:
 - Type: Push
 Branches:
 - main

# Required - Define action configurations.
Actions:
 Build_application:
 Identifier: aws/build@v1
 Inputs:
 Sources:
 - WorkflowSource
 Variables:
 - Name: region
 Value: us-west-2
 - Name: registry
 Value: <Account-Id>.dkr.ecr.us-west-2.amazonaws.com
 - Name: image
 Value: my-respository-cdkecsinfrastack
 Outputs:
 AutoDiscoverReports:
 Enabled: false
 Variables:
 - IMAGE
 Compute:
 Type: EC2
 Environment:
 Connections:
 - Role: <CodeCatalystPreviewDevelopmentAdministrator role>
 # Add account id within quotes. Eg: "123456789012"
 Name: "<Account-Id>"
 Name: Non-prod
 Configuration:
 Steps:
 - Run: export account=`aws sts get-caller-identity --output text | awk '{ print $1 }'`
 - Run: aws ecr get-login-password --region ${region} | docker login --username AWS --password-stdin ${registry}
 - Run: docker build -t appimage .
 - Run: docker tag appimage ${registry}/${image}:${WorkflowSource.CommitId}
 - Run: docker push --all-tags ${registry}/${image}
 - Run: export IMAGE=${registry}/${image}:${WorkflowSource.CommitId}
 RenderAmazonECStaskdefinition:
 Identifier: aws/ecs-render-task-definition@v1
 Configuration:
 image: ${Build_application.IMAGE}
 container-name: MyContainer
 task-definition: task.json
 Outputs:
 Artifacts:
 - Name: TaskDefinition
 Files:
 - task-definition*
 DependsOn:
 - Build_application
 Inputs:
 Sources:
 - WorkflowSource
 DeploytoAmazonECS:
 Identifier: aws/ecs-deploy@v1
 Configuration:
 task-definition: /artifacts/DeploytoAmazonECS/TaskDefinition/${RenderAmazonECStaskdefinition.task-definition}
 service: MyWebApp
 cluster: <ECS cluster ARN>
 region: us-west-2
 Compute:
 Type: EC2
 Fleet: Linux.x86-64.Large
 Environment:
 Connections:
 - Role: <CodeCatalystPreviewDevelopmentAdministrator role>
 # Add account id within quotes. Eg: "12345678"
 Name: "<Account Id>"
 Name: Non-Prod
 DependsOn:
 - RenderAmazonECStaskdefinition
 Inputs:
 Artifacts:
 - TaskDefinition
 Sources:
 - WorkflowSource

cdk destroy

Are you sure you want to delete: CdkEcsInfraStack (y/n)? y
CdkEcsInfraStack: destroying...

 ✅ CdkEcsInfraStack: destroyed