forked from dxw/terraform-aws-ecs-scheduled-task
-
Notifications
You must be signed in to change notification settings - Fork 0
/
main.tf
78 lines (62 loc) · 2.88 KB
/
main.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
## ECS task exectution role
resource "aws_iam_role" "scheduled_task_ecs_execution" {
name = "${var.name}-${var.environment}-st-ecs-execution-role"
assume_role_policy = file("${path.module}/policies/scheduled-task-ecs-execution-assume-role-policy.json")
}
data "template_file" "scheduled_task_ecs_execution_policy" {
template = file("${path.module}/policies/scheduled-task-ecs-execution-policy.json")
}
resource "aws_iam_role_policy" "scheduled_task_ecs_execution" {
name = "${var.name}-${var.environment}-st-ecs-execution-policy"
role = aws_iam_role.scheduled_task_ecs_execution.id
policy = data.template_file.scheduled_task_ecs_execution_policy.rendered
}
## ECS task role
resource "aws_iam_role" "scheduled_task_ecs" {
name = "${var.name}-${var.environment}-st-ecs-role"
assume_role_policy = file("${path.module}/policies/scheduled-task-ecs-assume-role-policy.json")
}
## Cloudwatch event role
resource "aws_iam_role" "scheduled_task_cloudwatch" {
name = "${var.name}-${var.environment}-st-cloudwatch-role"
assume_role_policy = file("${path.module}/policies/scheduled-task-cloudwatch-assume-role-policy.json")
}
data "template_file" "scheduled_task_cloudwatch_policy" {
template = file("${path.module}/policies/scheduled-task-cloudwatch-policy.json")
vars = {
task_execution_role_arn = aws_iam_role.scheduled_task_ecs_execution.arn
}
}
resource "aws_iam_role_policy" "scheduled_task_cloudwatch_policy" {
name = "${var.name}-${var.environment}-st-cloudwatch-policy"
role = aws_iam_role.scheduled_task_cloudwatch.id
policy = data.template_file.scheduled_task_cloudwatch_policy.rendered
}
## ECS task definition
resource "aws_ecs_task_definition" "scheduled_task" {
family = "${var.name}-${var.environment}-scheduled-task"
container_definitions = var.container_definitions
requires_compatibilities = ["EC2"]
network_mode = var.network_mode
execution_role_arn = aws_iam_role.scheduled_task_ecs_execution.arn
task_role_arn = aws_iam_role.scheduled_task_ecs.arn
cpu = var.cpu
memory = var.memory
}
## Cloudwatch event
resource "aws_cloudwatch_event_rule" "scheduled_task" {
name = "${var.name}_${var.environment}_scheduled_task"
description = "Run ${var.name}_${var.environment} task at a scheduled time (${var.schedule_expression})"
schedule_expression = var.schedule_expression
}
resource "aws_cloudwatch_event_target" "scheduled_task" {
target_id = "${var.name}_${var.environment}_scheduled_task_target"
rule = aws_cloudwatch_event_rule.scheduled_task.name
arn = var.cluster_arn
role_arn = aws_iam_role.scheduled_task_cloudwatch.arn
input = jsonencode({})
ecs_target {
task_count = var.task_count
task_definition_arn = aws_ecs_task_definition.scheduled_task.arn
}
}