aws / aws/containers-roadmap

[ECS] [request]: Stop/replace exec'd task after ECS exec operation

Open
#1,323 0 comments 1 reaction 0 assignees View on GitHub
ECS Fargate Proposed
Dominant language
Shell
Stars
5.4k
Forks
334
PR merge metrics
No merged PRs in 30d

Description

### Community Note

* Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request
* Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
* If you are interested in working on this issue or have submitted a pull request, please leave a comment

**Tell us about your request**

Ability to optionally stop/replace an ECS Exec'd task with a new task right after an ECS-exec operation finished as the exec'd tasks can be presumed as "tainted".

**Which service(s) is this request for?**

Both ECS/EC2 and ECS/Fargate

**Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard?**

We'd like to make sure that we don't keep running any _mutated_ tasks (containers) in the production workload.

**Are you currently working around this issue?**

[`readonlyRootFilesystem` ](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#container_definition_storage) can be used to avoid making changes on the container storage. However this option is not always feasible for us as 1) we sometimes need to run containers without this option enabled especially in development or test environments for debugging or troubleshooting, or 2) some of our applications need to write logs to the container storage.

**Additional context**

This issue was created on behalf of @Juju-62q.

Contributor guide

Open the contributing guide

Research direction

No implementation files, tests, or entry points are mentioned. Start by reviewing the ECS Exec behavior for ECS/EC2 and ECS/Fargate, then define how an optional stop-and-replace operation should work after exec completes and verify that the resulting workload no longer runs the exec'd task.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws
Domain
cloud
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.