feat(ecs): bottlerocket support

[pahud]

feat(ecs): bottlerocket support

Closes: #10085

• machineImageType to select the bottlerocket machine image type

• SSM session manager enabled by default

• update README

• integ test

• unit test

---

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

[iamhopaul123]

This is awesome! Thank you so much for this quick PR after bottlerocket just published its ECS variant.

[pahud]

HI @iamhopaul123 ,

Should all addressed. Please take a look again. Thanks.

[pahud]

When I successfully run the integ test, I got 2 bottlerocket instances

And they both registered to the cluster with ACTIVE status

And I can hit the connect with the session manager to the instances

To enter the shell

[pahud]

If I extend the integ test to create the service like this

import * as ec2 from '@aws-cdk/aws-ec2';
import * as cdk from '@aws-cdk/core';
import * as ecs from '../../lib';
import * as patterns from '@aws-cdk/aws-ecs-patterns';

const app = new cdk.App();

const stack = new cdk.Stack(app, 'aws-ecs-integ-bottlerocket');

const vpc = new ec2.Vpc(stack, 'Vpc', { maxAzs: 2, natGateways: 1 });

const cluster = new ecs.Cluster(stack, 'EcsCluster', { vpc });

cluster.addCapacity('bottlerocket-asg', {
  minCapacity: 2,
  instanceType: new ec2.InstanceType('c5.large'),
  machineImageType: ecs.MachineImageType.BOTTLEROCKET,
});

const taskDefinition = new ecs.Ec2TaskDefinition(stack, 'TaskDef');

const web = taskDefinition.addContainer('web', {
  image: ecs.ContainerImage.fromRegistry('amazon/amazon-ecs-sample'),
  memoryReservationMiB: 1024,
});

web.addPortMappings({
  containerPort: 80,
})

new patterns.ApplicationLoadBalancedEc2Service(stack, 'ALBService', {
  cluster,
  taskDefinition,
})

app.synth();

I got the service deployed with the ALB URL returned

And if I hit the URL, I got the sample PHP running as expected

I am not going to extend this in the integ.bottlerocket.ts, just in case anyone is just interested. :-)

[iamhopaul123]

Ship it Thank you for your contribution!

[mergify]

Thank you for contributing! Your pull request will be updated from master and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[aws-cdk-automation]

AWS CodeBuild CI Report

• CodeBuild project: AutoBuildProject6AEA49D1-qxepHUsryhcu
• Commit ID: e4671aa
• Result: SUCCEEDED
• Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

[mergify]

Thank you for contributing! Your pull request will be updated from master and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[nathanpeck]

Hey @pahud there are a couple issues / caveats that I think we might want to have checks for:

• Bottlerocket doesn't support all instance families yet: "Bottlerocket builds from AWS are supported on an HVM and EC2 Bare Metal instance families with the exception of the P, G, F, and INF instance types."
• Also Bottlerocket does not yet support AWSVPC network mode yet, so it might make sense to have a check for that

[pahud]

Thank you @nathanpeck

Let me fix this in another PR 😄