50da33712b
fromAsset() builds for the host architecture by default. On x86_64 GitHub Actions runners, this produces an x86 image even with QEMU installed — the Fargate ARM64 task then fails with exec format error.
69 lines
2.2 KiB
TypeScript
69 lines
2.2 KiB
TypeScript
import { Construct } from 'constructs';
|
|
import * as ecs from 'aws-cdk-lib/aws-ecs';
|
|
import * as ecr_assets from 'aws-cdk-lib/aws-ecr-assets';
|
|
import * as ec2 from 'aws-cdk-lib/aws-ec2';
|
|
import * as secretsmanager from 'aws-cdk-lib/aws-secretsmanager';
|
|
import * as lambda from 'aws-cdk-lib/aws-lambda';
|
|
import * as logs from 'aws-cdk-lib/aws-logs';
|
|
import * as path from 'path';
|
|
|
|
export interface SocketModeProps {
|
|
vpc: ec2.IVpc;
|
|
processorLambda: lambda.IFunction;
|
|
appHomeLambda: lambda.IFunction;
|
|
}
|
|
|
|
export class SocketModeConstruct extends Construct {
|
|
constructor(scope: Construct, id: string, props: SocketModeProps) {
|
|
super(scope, id);
|
|
|
|
const appTokenSecret = secretsmanager.Secret.fromSecretNameV2(
|
|
this, 'AppTokenSecret', 'seahaven/slack/app-level-token',
|
|
);
|
|
|
|
const cluster = new ecs.Cluster(this, 'Cluster', {
|
|
clusterName: 'seahaven-socket-mode',
|
|
vpc: props.vpc,
|
|
});
|
|
|
|
const taskDef = new ecs.FargateTaskDefinition(this, 'TaskDef', {
|
|
memoryLimitMiB: 512,
|
|
cpu: 256,
|
|
runtimePlatform: {
|
|
cpuArchitecture: ecs.CpuArchitecture.ARM64,
|
|
operatingSystemFamily: ecs.OperatingSystemFamily.LINUX,
|
|
},
|
|
});
|
|
|
|
taskDef.addContainer('socket-mode', {
|
|
image: ecs.ContainerImage.fromAsset(
|
|
path.join(__dirname, '../../services/socket-mode'),
|
|
{ platform: ecr_assets.Platform.LINUX_ARM64 },
|
|
),
|
|
environment: {
|
|
APP_TOKEN_SECRET_ARN: appTokenSecret.secretArn,
|
|
PROCESSOR_FUNCTION_NAME: props.processorLambda.functionName,
|
|
APP_HOME_FUNCTION_NAME: props.appHomeLambda.functionName,
|
|
},
|
|
logging: ecs.LogDrivers.awsLogs({
|
|
streamPrefix: 'socket-mode',
|
|
logRetention: logs.RetentionDays.TWO_MONTHS,
|
|
}),
|
|
});
|
|
|
|
appTokenSecret.grantRead(taskDef.taskRole);
|
|
props.processorLambda.grantInvoke(taskDef.taskRole);
|
|
props.appHomeLambda.grantInvoke(taskDef.taskRole);
|
|
|
|
new ecs.FargateService(this, 'Service', {
|
|
serviceName: 'seahaven-socket-mode',
|
|
cluster,
|
|
taskDefinition: taskDef,
|
|
desiredCount: 1,
|
|
minHealthyPercent: 100,
|
|
maxHealthyPercent: 200,
|
|
assignPublicIp: false,
|
|
vpcSubnets: { subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS },
|
|
});
|
|
}
|
|
}
|