[アップデート] ECS のビルトインデプロイで線形デプロイとカナリアデプロイメントを利用できるようになりました

import * as cdk from "aws-cdk-lib";
import * as ec2 from "aws-cdk-lib/aws-ec2";
import * as ecs from "aws-cdk-lib/aws-ecs";
import * as iam from "aws-cdk-lib/aws-iam";
import * as elbv2 from "aws-cdk-lib/aws-elasticloadbalancingv2";
import { Construct } from "constructs";
import * as ecr from "aws-cdk-lib/aws-ecr";

export class IacStack extends cdk.Stack {
  constructor(scope: Construct, id: string, props?: cdk.StackProps) {
    super(scope, id, props);

    // VPC
    const vpc = new ec2.Vpc(this, "Vpc", {
      maxAzs: 2,
      natGateways: 1,
      subnetConfiguration: [
        {
          cidrMask: 24,
          name: "Public",
          subnetType: ec2.SubnetType.PUBLIC,
        },
        {
          cidrMask: 24,
          name: "Private",
          subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS,
        },
      ],
    });

    // Security Group
    const albSg = new ec2.SecurityGroup(this, "AlbSg", {
      vpc: vpc,
      allowAllOutbound: true,
    });
    albSg.addIngressRule(ec2.Peer.anyIpv4(), ec2.Port.tcp(80));
    const appSg = new ec2.SecurityGroup(this, "AppSg", {
      vpc: vpc,
      allowAllOutbound: true,
    });
    appSg.addIngressRule(
      ec2.Peer.securityGroupId(albSg.securityGroupId),
      ec2.Port.tcp(80)
    );
    appSg.addIngressRule(
      ec2.Peer.securityGroupId(albSg.securityGroupId),
      ec2.Port.tcp(8080)
    );

    // ECR Repository
    const repository = new ecr.Repository(this, "Repository", {
      repositoryName: "sample-ecs-app",
    });

    // ECS Cluster
    new ecs.Cluster(this, "Cluster", {
      vpc: vpc,
    });

    // ECS Task Execution Role
    const taskExecutionRole = new iam.Role(this, "TaskExecutionRole", {
      assumedBy: new iam.ServicePrincipal("ecs-tasks.amazonaws.com"),
      managedPolicies: [
        iam.ManagedPolicy.fromAwsManagedPolicyName(
          "service-role/AmazonECSTaskExecutionRolePolicy"
        ),
      ],
    });

    // ECS Task Definition
    const taskDefinition = new ecs.FargateTaskDefinition(
      this,
      "TaskDefinition",
      {
        cpu: 256,
        memoryLimitMiB: 512,
        executionRole: taskExecutionRole,
      }
    );
    const appContainer = taskDefinition.addContainer("App", {
      containerName: "app",
      image: ecs.ContainerImage.fromEcrRepository(repository, "v1"),
      essential: true,
      logging: ecs.LogDriver.awsLogs({
        streamPrefix: "sample-ecs-app",
      }),
    });
    appContainer.addPortMappings({
      containerPort: 80,
    });

    // Infrastructure Role for ECS
    const infrastructureRole = new iam.Role(this, "InfrastructureRole", {
      assumedBy: new iam.ServicePrincipal("ecs.amazonaws.com"),
      managedPolicies: [
        iam.ManagedPolicy.fromAwsManagedPolicyName(
          "AmazonECSInfrastructureRolePolicyForLoadBalancers"
        ),
      ],
    });

    // ALB
    const alb = new elbv2.ApplicationLoadBalancer(this, "Alb", {
      vpc: vpc,
      internetFacing: true,
      securityGroup: albSg,
      vpcSubnets: vpc.selectSubnets({
        subnetGroupName: "Public",
      }),
    });

    // ALB Target Group Blue
    const appTargetGroupBlue = new elbv2.ApplicationTargetGroup(
      this,
      "AppTargetGroupBlue",
      {
        targetGroupName: "AppTargetGroupBlue",
        vpc: vpc,
        protocol: elbv2.ApplicationProtocol.HTTP,
        targetType: elbv2.TargetType.IP,
        healthCheck: {
          path: "/",
          port: "80",
          protocol: elbv2.Protocol.HTTP,
        },
      }
    );

    // ALB Target Group Green
    const appTargetGroupGreen = new elbv2.ApplicationTargetGroup(
      this,
      "AppTargetGroupGreen",
      {
        targetGroupName: "AppTargetGroupGreen",
        vpc: vpc,
        protocol: elbv2.ApplicationProtocol.HTTP,
        targetType: elbv2.TargetType.IP,
        healthCheck: {
          path: "/",
          port: "80",
          protocol: elbv2.Protocol.HTTP,
        },
      }
    );

    // ALB Listener
    const albListener = alb.addListener("AlbListener", {
      port: 80,
      protocol: elbv2.ApplicationProtocol.HTTP,
      defaultAction: elbv2.ListenerAction.fixedResponse(404, {
        contentType: "text/plain",
        messageBody: "Not Found",
      }),
    });
    new elbv2.ApplicationListenerRule(this, "AlbListenerRule", {
      listener: albListener,
      priority: 1,
      conditions: [elbv2.ListenerCondition.pathPatterns(["*"])],
      action: elbv2.ListenerAction.forward([appTargetGroupBlue]),
    });

    const albTestListener = alb.addListener("AlbTestListener", {
      port: 8080,
      protocol: elbv2.ApplicationProtocol.HTTP,
      defaultAction: elbv2.ListenerAction.fixedResponse(404, {
        contentType: "text/plain",
        messageBody: "Not Found",
      }),
    });
    new elbv2.ApplicationListenerRule(this, "AlbTestListenerRule", {
      listener: albTestListener,
      priority: 1,
      conditions: [elbv2.ListenerCondition.pathPatterns(["*"])],
      action: elbv2.ListenerAction.forward([appTargetGroupGreen]),
    });
  }
}

import express, { Request, Response } from "express";

const app = express();

app.get("/", (request: Request, response: Response) => {
  response.status(200).send("Hello World v1");
});

app
  .listen(80, () => {
    console.log("Server running at PORT: ", 80);
  })
  .on("error", (error) => {
    throw new Error(error.message);
  });

FROM node:22-bookworm

WORKDIR /app

COPY package*.json ./
RUN npm install

COPY . .
RUN npm run build

EXPOSE 80
CMD ["npm", "run", "start"]

const http = require("http");

const url = process.argv[2];

if (!url) {
  console.error("使用方法: node check.js <URL>");
  console.error("例: node check.js http://example.com");
  process.exit(1);
}

const requestCount = 20;
let v1count = 0;
let v2count = 0;
let done = 0;

for (let i = 0; i < requestCount; i++) {
  http
    .get(url, (res) => {
      let data = "";

      res.on("data", (chunk) => (data += chunk));
      res.on("end", () => {
        const hasV1 = data.includes("v1");
        const hasV2 = data.includes("v2");

        if (hasV1 && !hasV2) v1count++;
        if (hasV2 && !hasV1) v2count++;

        done++;

        if (done === requestCount) {
          const total = v1count + v2count;
          console.log(`Result:`);
          console.log(
            `  v1: ${v1count} (${((v1count / total) * 100).toFixed(1)}%)`
          );
          console.log(
            `  v2: ${v2count} (${((v2count / total) * 100).toFixed(1)}%)`
          );
        }
      });
    })
    .on("error", (err) => {
      console.error("Request error:", err);
    });
}

aws ecs create-service \
  --cluster $CLUSTER_NAME \
  --service-name sample-ecs-app \
  --task-definition $TASK_DEFINITION \
  --desired-count 1 \
  --launch-type FARGATE \
  --platform-version 1.4.0 \
  --scheduling-strategy REPLICA \
  --network-configuration "awsvpcConfiguration={
      subnets=[$SUBNET1,$SUBNET2],
      securityGroups=[$SECURITY_GROUPS],
      assignPublicIp=DISABLED
  }" \
  --deployment-controller '{"type":"ECS"}' \
  --deployment-configuration '{
      "strategy": "LINEAR",
      "bakeTimeInMinutes": 5,
      "linearConfiguration": {
        "stepPercent": 50,
        "stepBakeTimeInMinutes": 5
      }
  }' \
  --load-balancers "targetGroupArn=$TARGET_GROUP_BLUE,containerName=app,containerPort=80,advancedConfiguration={alternateTargetGroupArn=$TARGET_GROUP_GREEN,productionListenerRule=$LISTENER_RULE_BLUE,testListenerRule=$LISTENER_RULE_GREEN,roleArn=$ROLE_ARN}"

% node check.js http://iacsta-alb16-ysj8pxeqlffw-1778688955.ap-northeast-1.elb.amazonaws.com:80
Result:
  v1: 20 (100.0%)
  v2: 0 (0.0%)

% node check.js http://iacsta-alb16-ysj8pxeqlffw-1778688955.ap-northeast-1.elb.amazonaws.com:8080
Result:
  v1: 20 (100.0%)
  v2: 0 (0.0%)

% node check.js http://iacsta-alb16-ysj8pxeqlffw-1778688955.ap-northeast-1.elb.amazonaws.com:80
Result:
  v1: 20 (100.0%)
  v2: 0 (0.0%)

% node check.js http://iacsta-alb16-ysj8pxeqlffw-1778688955.ap-northeast-1.elb.amazonaws.com:8080
Result:
  v1: 0 (0.0%)
  v2: 20 (100.0%)

% node check.js http://iacsta-alb16-ysj8pxeqlffw-1778688955.ap-northeast-1.elb.amazonaws.com:80
Result:
  v1: 10 (50.0%)
  v2: 10 (50.0%)

% node check.js http://iacsta-alb16-ysj8pxeqlffw-1778688955.ap-northeast-1.elb.amazonaws.com:80
Result:
  v1: 0 (0.0%)
  v2: 20 (100.0%)