octopus-deploy-aws-ecs

Step Templates collection to deploy docker images to AWS ECS Cluster using Octopus Deploy

Limitations

Docker hub templates:

• Templates make the assumption that the task definition is composed of a single container image, for task definitions that are composed of multiple container images the step were the new task definition revision is created should be customized.
• The templates are still not integrated with AWS Application Load Balancers (to check for deployment status)

Take a look to the ecr templates they support task definitions with multiple containers and application load balancers.

Dependencies

Octopus Server Depencies

• This templates depends on a Linux Agent .

Linux Agent Dependencies

• bash
• jq
• docker
• aws cli
  • An iam role (see below)

Octopus Projects Dependencies

ECR

• aws-ecs-deploy-template.sh
  • Variables
    • Region (AWS Region)
    • Cluster (ECS Cluster Name)
    • Service (ECS Cluster Service)
    • TaskDefinition (Task Definition family)
    • TaskDefinitionContainer (The name of the container inside the task definition that will be deployed)
      • Can be empty for task definitions that only have one container.
    • EcrRepositoryUrl
    • EcrRepositoryName
    • DockerBuildTag (your custom Build tag text to identify the container)
• dockerize-artifacts.sh
  • Variables
    • Region (AWS Region)
    • EcrRepositoryUrl
    • EcrRepositoryName
    • DockerBuildTag (your custom Build tag text to identify the container)

Docker Hub

• aws-ecs-deploy-template.sh
  • Variables
    • Region (AWS Region)
    • Cluster (ECS Cluster Name)
    • Service (ECS Cluster Service)
    • TaskDefinition (Task Definition family)
    • DockerRepoUser
    • DockerRepoPassword
    • DockerRepo
    • DockerBuildTag (your custom Build tag text to identify the container)
• dockerize-artifacts.sh
  • Variables
    • DockerRepoEmail
    • DockerRepoUser
    • DockerRepoPassword
    • DockerRepo
    • DockerBuildTag (your custom Build tag text to identify the container)

AWS Dependencies

• IAM Role

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "ELBPermisions",
            "Effect": "Allow",
            "Action": [
                "elasticloadbalancing:DeregisterInstancesFromLoadBalancer",
                "elasticloadbalancing:DescribeTargetHealth",
                "elasticloadbalancing:DescribeInstanceHealth"
            ],
            "Resource": [
                "*"
            ]
        },
        {
            "Sid": "ECSPermisions",
            "Effect": "Allow",
            "Action": [
                "ecs:DescribeServices",
                "ecs:DescribeTaskDefinition",
                "ecs:RegisterTaskDefinition",
                "ecs:UpdateService",
                "ecs:ListTasks",
                "ecs:StopTask",
                "ecr:GetAuthorizationToken",
                "iam:PassRole"
            ],
            "Resource": [
                "*"
            ]
        }
    ]
}