堆栈内存溢出
  繁体   English   中英

AWS EC2 任务上没有 Docker 网络配置（健康检查超时）

[英]No Docker network config on AWS EC2 task (health check timeout)

 原文  2021-11-26 20:23:46  6   0    docker/ amazon-ec2/ timeout/ health-check

问题描述

我正在尝试在带有 EC2 实例的 AWS ECS 上运行 Dockerized Java 应用程序。 我用 Terraform 创建了一个集群、vpc、服务、任务和一个负载均衡器。 由于运行状况检查失败，任务在一段时间后被关闭：

Task failed ELB health checks in (target-group arn:aws:elasticloadbalancing:eu-central-1:741962468442:targetgroup/alb-target-group/fa9ea8365fff866a)

这是我的（部分）Terraform 配置：

目标群体：

resource "aws_alb_target_group" "target_group" {
  name     = "alb-target-group"
  port     = 8080
  protocol = "HTTP"
  vpc_id   = aws_vpc.vpc.id
  target_type = "ip"
}

ALB（侦听器和安全组省略）：

resource "aws_lb" "alb" {
  name               = "alb"
  internal           = false
  load_balancer_type = "application"
  security_groups    = [aws_security_group.sg_load_balancer.id]
  subnets            = [aws_subnet.subnet_public_1.id, aws_subnet.subnet_public_2.id]
  enable_deletion_protection = false
}

任务定义（使用8080:8080 portMapping ）

resource "aws_ecs_task_definition" "codebase_task" {
  family                = "cb-service"
  network_mode          = "awsvpc"
  container_definitions = jsonencode([
    {
      name         = var.container_name
      image        = "rub/cb-app:2"
      cpu          = 10
      memory       = 256
      essential    = true
      portMappings = [
        {
          containerPort = 8080
          hostPort      = 8080
        }
      ]
    }
  ])
}

我尝试过的事情：

  • 向我的应用程序添加了一个healthcheck端点，它返回 200（-> 未解决）
  • 在 EC2 和 ELB 之间切换了 autoscaling 组的健康检查类型（-> 未解决）
  • 通过 SSH 连接到一个实例以检查 Docker：

docker container ls ：

CONTAINER ID   IMAGE                            COMMAND                  CREATED          STATUS                   PORTS     NAMES
f724e33ce505   rub/cb-app:2                     "java -Dspring.profi…"   18 seconds ago   Up 17 seconds                      ecs-cb-service-32-cb-container-8aee88afbc9198b26400
eb604882c6dc   amazon/amazon-ecs-pause:0.1.0    "/pause"                 20 seconds ago   Up 19 seconds                      ecs-cb-service-32-internalecspause-8e9aadf897aac6dfff01
a502ff50bf32   amazon/amazon-ecs-agent:latest   "/agent"                 9 minutes ago    Up 9 minutes (healthy)             ecs-agent

等等，PORTS下没有端口映射？

docker inspect f724e33ce505 ：

[
  {
    "Id": "f724e33ce5050a570453495a6ba398ac0142cab08d48504aec48a51106c5ccac",
    "Created": "2021-11-26T19:45:46.61341165Z",
    "Path": "java",
    "Args": [
      "-Dspring.profiles.active=prod",
      "-jar",
      "app.jar"
    ],
    "State": {
      "Status": "exited",
      "Running": false,
      "Paused": false,
      "Restarting": false,
      "OOMKilled": false,
      "Dead": false,
      "Pid": 0,
      "ExitCode": 143,
      "Error": "",
      "StartedAt": "2021-11-26T19:45:47.001363933Z",
      "FinishedAt": "2021-11-26T19:48:21.110114525Z"
    },
    "Image": "sha256:6b551b9910fab4ca808685f663723b8e2c65bdf88a78664924579347487d2d17",
    "ResolvConfPath": "/var/lib/docker/containers/eb604882c6dcd920e20e906ffc19c15be80c9f4c0e3b47be7bebf19d30f44820/resolv.conf",
    "HostnamePath": "/var/lib/docker/containers/eb604882c6dcd920e20e906ffc19c15be80c9f4c0e3b47be7bebf19d30f44820/hostname",
    "HostsPath": "/var/lib/docker/containers/eb604882c6dcd920e20e906ffc19c15be80c9f4c0e3b47be7bebf19d30f44820/hosts",
    "LogPath": "",
    "Name": "/ecs-cb-service-32-cb-container-8aee88afbc9198b26400",
    "RestartCount": 0,
    "Driver": "overlay2",
    "Platform": "linux",
    "MountLabel": "",
    "ProcessLabel": "",
    "AppArmorProfile": "",
    "ExecIDs": null,
    "HostConfig": {
      "Binds": [],
      "ContainerIDFile": "",
      "LogConfig": {
        "Type": "awslogs",
        "Config": {
          "awslogs-group": "cb_cloudwatch_group",
          "awslogs-region": "eu-central-1",
          "awslogs-stream": "ecs/cb-container/24028f20fa3e41b79a42f852ad55478d"
        }
      },
      "NetworkMode": "container:eb604882c6dcd920e20e906ffc19c15be80c9f4c0e3b47be7bebf19d30f44820",
      "PortBindings": {},
      "RestartPolicy": {
        "Name": "",
        "MaximumRetryCount": 0
      },
      "AutoRemove": false,
      "VolumeDriver": "",
      "VolumesFrom": [],
      "CapAdd": [],
      "CapDrop": [],
      "CgroupnsMode": "host",
      "Dns": null,
      "DnsOptions": null,
      "DnsSearch": null,
      "ExtraHosts": null,
      "GroupAdd": null,
      "IpcMode": "shareable",
      "Cgroup": "",
      "Links": null,
      "OomScoreAdj": 0,
      "PidMode": "",
      "Privileged": false,
      "PublishAllPorts": false,
      "ReadonlyRootfs": false,
      "SecurityOpt": null,
      "UTSMode": "",
      "UsernsMode": "",
      "ShmSize": 67108864,
      "Runtime": "runc",
      "ConsoleSize": [
        0,
        0
      ],
      "Isolation": "",
      "CpuShares": 10,
      "Memory": 268435456,
      "NanoCpus": 0,
      "CgroupParent": "/ecs/24028f20fa3e41b79a42f852ad55478d",
      "BlkioWeight": 0,
      "BlkioWeightDevice": null,
      "BlkioDeviceReadBps": null,
      "BlkioDeviceWriteBps": null,
      "BlkioDeviceReadIOps": null,
      "BlkioDeviceWriteIOps": null,
      "CpuPeriod": 0,
      "CpuQuota": 0,
      "CpuRealtimePeriod": 0,
      "CpuRealtimeRuntime": 0,
      "CpusetCpus": "",
      "CpusetMems": "",
      "Devices": null,
      "DeviceCgroupRules": null,
      "DeviceRequests": null,
      "KernelMemory": 0,
      "KernelMemoryTCP": 0,
      "MemoryReservation": 0,
      "MemorySwap": 536870912,
      "MemorySwappiness": null,
      "OomKillDisable": false,
      "PidsLimit": null,
      "Ulimits": [
        {
          "Name": "nofile",
          "Hard": 65536,
          "Soft": 32768
        }
      ],
      "CpuCount": 0,
      "CpuPercent": 0,
      "IOMaximumIOps": 0,
      "IOMaximumBandwidth": 0,
      "MaskedPaths": [
        "/proc/asound",
        "/proc/acpi",
        "/proc/kcore",
        "/proc/keys",
        "/proc/latency_stats",
        "/proc/timer_list",
        "/proc/timer_stats",
        "/proc/sched_debug",
        "/proc/scsi",
        "/sys/firmware"
      ],
      "ReadonlyPaths": [
        "/proc/bus",
        "/proc/fs",
        "/proc/irq",
        "/proc/sys",
        "/proc/sysrq-trigger"
      ]
    },
    "GraphDriver": {
      "Data": {
        "LowerDir": "/var/lib/docker/overlay2/53f5f62a606650aaaf7a5a3866ff5c816d8361f049130b00433d9b041adfc136-init/diff:/var/lib/docker/overlay2/c281a58c57980f024f32ffe9becbc850b60dfdc0ef37f425ebab1ce867c4a697/diff:/var/lib/docker/overlay2/60a91192161a5a7cc9fe7b7babda2164a374e61e1e9e33733c984377604b0d1f/diff:/var/lib/docker/overlay2/64d2c70e36075bca1aaa903d6489efec40a83d16166ee8f68c5dab474b2505dc/diff:/var/lib/docker/overlay2/25f1b27c0c8155a3e4638617d7cd9ad4aacd93c4a8e7739823429dff7130df85/diff:/var/lib/docker/overlay2/ddb3a6c0f8cae6053f1d3bfe5b03c6491b44f68e879ef107d9ebcedd1f4063cb/diff",
        "MergedDir": "/var/lib/docker/overlay2/53f5f62a606650aaaf7a5a3866ff5c816d8361f049130b00433d9b041adfc136/merged",
        "UpperDir": "/var/lib/docker/overlay2/53f5f62a606650aaaf7a5a3866ff5c816d8361f049130b00433d9b041adfc136/diff",
        "WorkDir": "/var/lib/docker/overlay2/53f5f62a606650aaaf7a5a3866ff5c816d8361f049130b00433d9b041adfc136/work"
      },
      "Name": "overlay2"
    },
    "Mounts": [],
    "Config": {
      "Hostname": "ip-10-0-1-135.eu-central-1.compute.internal",
      "Domainname": "",
      "User": "",
      "AttachStdin": false,
      "AttachStdout": false,
      "AttachStderr": false,
      "ExposedPorts": {
        "8080/tcp": {}
      },
      "Tty": false,
      "OpenStdin": false,
      "StdinOnce": false,
      "Env": [
        "AWS_EXECUTION_ENV=AWS_ECS_EC2",
        "ECS_CONTAINER_METADATA_URI=http://169.254.170.2/v3/db1b29d1-9e94-481e-83d6-833ffc1ec1a9",
        "ECS_CONTAINER_METADATA_URI_V4=http://169.254.170.2/v4/db1b29d1-9e94-481e-83d6-833ffc1ec1a9",
        "PATH=/usr/java/openjdk-17/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
        "JAVA_HOME=/usr/java/openjdk-17",
        "LANG=C.UTF-8",
        "JAVA_VERSION=17.0.1"
      ],
      "Cmd": [
        "java",
        "-Dspring.profiles.active=prod",
        "-jar",
        "app.jar"
      ],
      "Image": "rub/cb-app:2",
      "Volumes": null,
      "WorkingDir": "/app",
      "Entrypoint": null,
      "OnBuild": null,
      "Labels": {
        "com.amazonaws.ecs.cluster": "default",
        "com.amazonaws.ecs.container-name": "cb-container",
        "com.amazonaws.ecs.task-arn": "arn:aws:ecs:eu-central-1:741962468442:task/default/24028f20fa3e41b79a42f852ad55478d",
        "com.amazonaws.ecs.task-definition-family": "cb-service",
        "com.amazonaws.ecs.task-definition-version": "32"
      }
    },
    "NetworkSettings": {
      "Bridge": "",
      "SandboxID": "",
      "HairpinMode": false,
      "LinkLocalIPv6Address": "",
      "LinkLocalIPv6PrefixLen": 0,
      "Ports": {},
      "SandboxKey": "",
      "SecondaryIPAddresses": null,
      "SecondaryIPv6Addresses": null,
      "EndpointID": "",
      "Gateway": "",
      "GlobalIPv6Address": "",
      "GlobalIPv6PrefixLen": 0,
      "IPAddress": "",
      "IPPrefixLen": 0,
      "IPv6Gateway": "",
      "MacAddress": "",
      "Networks": {}
    }
  }
]

容器没有网络NetworkSettings ？ 没有IPAddress ，没有Ports 。 这个容器确实是无法到达的。 当我在实例中手动启动映像（ docker run -d rub/cb-app:2 ）时，它会得到一个 IP 和端口映射（8080），我可以使用 ZA8BC924D0898064A4584C 毫无问题地到达其端点。

我试图了解 AWS 如何启动我的映像以及为什么它没有任何网络配置。

0 个解决方案

暂无
暂无

声明:本站的技术帖子网页，遵循CC BY-SA 4.0协议，如果您需要转载，请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

相关问题 Docker - AWS EC2 上的 springboot 适用于AWS的Docker或适用于AWS EC2的Docker 启动ECS任务之前的AWS EC2用户数据docker系统修剪 AWS ECS EC2 任务开始时间 带有 docker 的 AWS EC2 实例角色 用于运行 Docker 映像的 AWS EC2 AMI Docker无法连接AWS EC2云 AWS - 无法在 EC2 上创建 docker 容器 AWS EC2 Docker容器更新 Docker 在 aws ec2 上的图像访问
相关标签
 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM