|
| 1 | +--- |
| 2 | +title: Deploying to Amazon Elastic Container Service |
| 3 | +intro: You can deploy to Amazon Elastic Container Service (ECS) as part of your continuous deployment (CD) workflows. |
| 4 | +product: '{% data reusables.gated-features.actions %}' |
| 5 | +versions: |
| 6 | + free-pro-team: '*' |
| 7 | + enterprise-server: '>=2.22' |
| 8 | +--- |
| 9 | + |
| 10 | +{% data reusables.actions.enterprise-beta %} |
| 11 | +{% data reusables.actions.enterprise-github-hosted-runners %} |
| 12 | + |
| 13 | +### Introduction |
| 14 | + |
| 15 | +This guide explains how to use {% data variables.product.prodname_actions %} to build a containerized application, push it to [Amazon Elastic Container Registry (ECR)](https://aws.amazon.com/ecr/), and deploy it to [Amazon Elastic Container Service (ECS)](https://aws.amazon.com/ecs/). |
| 16 | + |
| 17 | +On every new release in your {% data variables.product.company_short %} repository, the {% data variables.product.prodname_actions %} workflow builds and pushes a new container image to Amazon ECR, and then deploys a new task definition to Amazon ECS. |
| 18 | + |
| 19 | +### Prerequisites |
| 20 | + |
| 21 | +Before creating your {% data variables.product.prodname_actions %} workflow, you will first need to complete the following setup steps for Amazon ECR and ECS: |
| 22 | + |
| 23 | +1. Create an Amazon ECR repository to store your images. |
| 24 | + |
| 25 | + For example, using [the AWS CLI](https://aws.amazon.com/cli/): |
| 26 | + |
| 27 | + {% raw %}```bash{:copy} |
| 28 | + aws ecr create-repository \ |
| 29 | + --repository-name MY_ECR_REPOSITORY \ |
| 30 | + --region MY_AWS_REGION |
| 31 | + ```{% endraw %} |
| 32 | +
|
| 33 | + Ensure that you use the same Amazon ECR repository name (represented here by `MY_ECR_REPOSITORY`) for the `ECR_REPOSITORY` variable in the workflow below. |
| 34 | +
|
| 35 | + Ensure that you use the same AWS region value for the `AWS_REGION` (represented here by `MY_AWS_REGION`) variable in the workflow below. |
| 36 | +
|
| 37 | +2. Create an Amazon ECS task definition, cluster, and service. |
| 38 | +
|
| 39 | + For details, follow the [Getting started wizard on the Amazon ECS console](https://us-east-2.console.aws.amazon.com/ecs/home?region=us-east-2#/firstRun), or the [Getting started guide](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/getting-started-fargate.html) in the Amazon ECS documentation. |
| 40 | +
|
| 41 | + Ensure that you note the names you set for the Amazon ECS service and cluster, and use them for the `ECS_SERVICE` and `ECS_CLUSTER` variables in the workflow below. |
| 42 | +
|
| 43 | +3. Store your Amazon ECS task definition as a JSON file in your {% data variables.product.company_short %} repository. |
| 44 | +
|
| 45 | + The format of the file should be the same as the output generated by: |
| 46 | +
|
| 47 | + {% raw %}```bash{:copy} |
| 48 | + aws ecs register-task-definition --generate-cli-skeleton |
| 49 | + ```{% endraw %} |
| 50 | +
|
| 51 | + Ensure that you set the `ECS_TASK_DEFINITION` variable in the workflow below as the path to the JSON file. |
| 52 | +
|
| 53 | + Ensure that you set the `CONTAINER_NAME` variable in the workflow below as the container name in the `containerDefinitions` section of the task definition. |
| 54 | +
|
| 55 | +4. Create {% data variables.product.prodname_actions %} secrets named `AWS_ACCESS_KEY_ID` and `AWS_SECRET_ACCESS_KEY` to store the values for your Amazon IAM access key. |
| 56 | +
|
| 57 | + For more information on creating secrets for {% data variables.product.prodname_actions %}, see "[Encrypted secrets](/actions/reference/encrypted-secrets#creating-encrypted-secrets-for-a-repository)." |
| 58 | +
|
| 59 | + See the documentation for each action used below for the recommended IAM policies for the IAM user, and methods for handling the access key credentials. |
| 60 | +
|
| 61 | +### Creating the workflow |
| 62 | +
|
| 63 | +Once you've completed the prerequisites, you can proceed with creating the workflow. |
| 64 | +
|
| 65 | +The following example workflow demonstrates how to build a container image and push it to Amazon ECR. It then updates the task definition with the new image ID, and deploys the task definition to Amazon ECS. |
| 66 | +
|
| 67 | +Ensure that you provide your own values for all the variables in the `env` key of the workflow. |
| 68 | +
|
| 69 | +{% raw %} |
| 70 | +```yaml{:copy} |
| 71 | +name: Deploy to Amazon ECS |
| 72 | +
|
| 73 | +on: |
| 74 | + release: |
| 75 | + types: [ created ] |
| 76 | +
|
| 77 | +env: |
| 78 | + AWS_REGION: MY_AWS_REGION # set this to your preferred AWS region, e.g. us-west-1 |
| 79 | + ECR_REPOSITORY: MY_ECR_REPOSITORY # set this to your Amazon ECR repository name |
| 80 | + ECS_SERVICE: MY_ECS_SERVICE # set this to your Amazon ECS service name |
| 81 | + ECS_CLUSTER: MY_ECS_CLUSTER # set this to your Amazon ECS cluster name |
| 82 | + ECS_TASK_DEFINITION: MY_ECS_TASK_DEFINITION # set this to the path to your Amazon ECS task definition |
| 83 | + # file, e.g. .aws/task-definition.json |
| 84 | + CONTAINER_NAME: MY_CONTAINER_NAME # set this to the name of the container in the |
| 85 | + # containerDefinitions section of your task definition |
| 86 | +
|
| 87 | +defaults: |
| 88 | + run: |
| 89 | + shell: bash |
| 90 | +
|
| 91 | +jobs: |
| 92 | + deploy: |
| 93 | + name: Deploy |
| 94 | + runs-on: ubuntu-latest |
| 95 | +
|
| 96 | + steps: |
| 97 | + - name: Checkout |
| 98 | + uses: actions/checkout@v2 |
| 99 | +
|
| 100 | + - name: Configure AWS credentials |
| 101 | + uses: aws-actions/configure-aws-credentials@v1 |
| 102 | + with: |
| 103 | + aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} |
| 104 | + aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} |
| 105 | + aws-region: $AWS_REGION |
| 106 | +
|
| 107 | + - name: Login to Amazon ECR |
| 108 | + id: login-ecr |
| 109 | + uses: aws-actions/amazon-ecr-login@v1 |
| 110 | +
|
| 111 | + - name: Build, tag, and push image to Amazon ECR |
| 112 | + id: build-image |
| 113 | + env: |
| 114 | + ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }} |
| 115 | + IMAGE_TAG: ${{ github.sha }} |
| 116 | + run: | |
| 117 | + # Build a docker container and |
| 118 | + # push it to ECR so that it can |
| 119 | + # be deployed to ECS. |
| 120 | + docker build -t $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG . |
| 121 | + docker push $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG |
| 122 | + echo "image=$ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG" >> $GITHUB_ENV |
| 123 | +
|
| 124 | + - name: Fill in the new image ID in the Amazon ECS task definition |
| 125 | + id: task-def |
| 126 | + uses: aws-actions/amazon-ecs-render-task-definition@v1 |
| 127 | + with: |
| 128 | + task-definition: $ECS_TASK_DEFINITION |
| 129 | + container-name: $CONTAINER_NAME |
| 130 | + image: ${{ steps.build-image.outputs.image }} |
| 131 | +
|
| 132 | + - name: Deploy Amazon ECS task definition |
| 133 | + uses: aws-actions/amazon-ecs-deploy-task-definition@v1 |
| 134 | + with: |
| 135 | + task-definition: ${{ steps.task-def.outputs.task-definition }} |
| 136 | + service: $ECS_SERVICE |
| 137 | + cluster: $ECS_CLUSTER |
| 138 | + wait-for-service-stability: true |
| 139 | +``` |
| 140 | +{% endraw %} |
| 141 | + |
| 142 | +### Additional resources |
| 143 | + |
| 144 | +For more information on the services used in these examples, see the following documentation: |
| 145 | + |
| 146 | +* "[Security best practices in IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html)" in the Amazon AWS documentation. |
| 147 | +* Official AWS "[Configure AWS Credentials](https://github.com/aws-actions/configure-aws-credentials)" action. |
| 148 | +* Official AWS [Amazon ECR "Login"](https://github.com/aws-actions/amazon-ecr-login) action. |
| 149 | +* Official AWS [Amazon ECS "Render Task Definition"](https://github.com/aws-actions/amazon-ecs-render-task-definition) action. |
| 150 | +* Official AWS [Amazon ECS "Deploy Task Definition"](https://github.com/aws-actions/amazon-ecs-deploy-task-definition) action. |
0 commit comments