Skip to main content
Latest Documentation
This is the latest documentation for the Cloud Posse Reference Architecture. To determine which version you're currently using, please see Version Identification.
Version: Latest
Sponsor @cloudposse

ECS with ecspresso (Deprecated)

We use the ecspresso deployment tool for Amazon ECS to manage ECS services using a code-driven approach, alongside reusable GitHub Action workflows. This setup allows tasks to be defined with Terraform within the infrastructure repository, and task definitions to reside alongside the application code. Ecspresso provides extensive configuration options via YAML, JSON, and Jsonnet, and includes plugins for enhanced functionality such as Terraform state lookups.

Deprecated

This approach is deprecated. For new ECS deployments, we recommend using ECS with Atmos which provides a simpler, more integrated deployment workflow using Atmos for configuration orchestration.

Github Action Workflows​

The basic deployment flow is for feature branches. You can use the following sample workflow to add pull request deploys to your application repository:

Latest Examples

Check out our example app-on-ecs for the latest example of how to use ecspresso with GitHub Actions.

.github/workflows/feature-branch.yaml
name: 1 - Feature Branch
on:
  pull_request:
    branches: [ main ]
    types: [opened, synchronize, reopened, closed, labeled, unlabeled]

permissions:
  pull-requests: write
  deployments: write
  id-token: write
  contents: read

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: false

jobs:
  monorepo:
    uses:  cloudposse/github-actions-workflows/.github/workflows/controller-monorepo.yml@main
    with:
      file: ./deploy/config.yaml

  ci:
    uses: cloudposse/github-actions-workflows/.github/workflows/ci-dockerized-app-build.yml@main
    needs: [ monorepo ]
    with:
      organization: "cloudposse"
      repository: ${{ github.event.repository.name }}
    secrets:
      ecr-region: ${{ secrets.ECR_REGION }}
      ecr-iam-role: ${{ secrets.ECR_IAM_ROLE }}
      registry: ${{ secrets.ECR_REGISTRY }}
      secret-outputs-passphrase: ${{ secrets.GHA_SECRET_OUTPUT_PASSPHRASE }}

  cd:
    uses: cloudposse/github-actions-workflows/.github/workflows/cd-preview-ecspresso.yml@main
    needs: [ ci, monorepo ]
    if: ${{ always() && needs.monorepo.outputs.apps != '[]' }}
    strategy:
      matrix:
        app: ${{ fromJson(needs.monorepo.outputs.apps) }}
    with:
      image: ${{ needs.ci.outputs.image }}
      tag: ${{ needs.ci.outputs.tag }}
      repository: ${{ github.event.repository.name }}
      app: ${{ matrix.app }}
      open: ${{ github.event.pull_request.state == 'open' }}
      labels: ${{ toJSON(github.event.pull_request.labels.*.name) }}
      ref: ${{ github.event.pull_request.head.ref }}
      exclusive: true
      enable-migration: ${{ contains(fromJSON(needs.monorepo.outputs.migrations), matrix.app) }}
      settings: ${{ needs.monorepo.outputs.settings }}
      env-label: |
        qa1: deploy/qa1
    secrets:
      secret-outputs-passphrase: ${{ secrets.GHA_SECRET_OUTPUT_PASSPHRASE }}

References​