Operation App Demo

ECSでタスクが実行できない¶

概要¶

• デプロイ前、ECRへのコンテナイメージ取得がうまくいっていない。

タスクの停止時刻: 2024-02-21T08:17:35.493Z
ResourceInitializationError: unable to pull secrets or registry auth: execution resource retrieval failed: unable to retrieve ecr registry auth: service call has been retried 3 time(s): RequestError: send request failed caused by: Post "https://api.ecr.ap-northeast-1.amazonaws.com/": dial tcp 3.112.64.17:443: i/o timeout. Please check your task network configuration.

service my-service is unable to consistently start tasks successfully. For more information, see the Troubleshooting section of the Amazon ECS Developer Guide.

考えられる原因（仮説）¶

• ECRからイメージをプルするためのIAMロールがECSヘ割り当てられていない。
• ECS→VPCエンドポイント→ECRへの疎通ができていない。

│ Error: failed creating ECS Task Definition (task-operation-app): ClientException: Fargate requires task definition to have execution role ARN to support ECR images.
│ 
│   with module.ecs.aws_ecs_task_definition.ecs_task,
│   on ecs/main.tf line 9, in resource "aws_ecs_task_definition" "ecs_task":
│    9: resource "aws_ecs_task_definition" "ecs_task" {
│ 
╵