[ECS] [request]: Stop/replace exec'd task after ECS exec operation
- Dominant language
- Shell
- Stars
- 5.4k
- Forks
- 334
- PR merge metrics
- No merged PRs in 30d
Description
### Community Note
* Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request
* Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
* If you are interested in working on this issue or have submitted a pull request, please leave a comment
**Tell us about your request**
Ability to optionally stop/replace an ECS Exec'd task with a new task right after an ECS-exec operation finished as the exec'd tasks can be presumed as "tainted".
**Which service(s) is this request for?**
Both ECS/EC2 and ECS/Fargate
**Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard?**
We'd like to make sure that we don't keep running any _mutated_ tasks (containers) in the production workload.
**Are you currently working around this issue?**
[`readonlyRootFilesystem` ](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#container_definition_storage) can be used to avoid making changes on the container storage. However this option is not always feasible for us as 1) we sometimes need to run containers without this option enabled especially in development or test environments for debugging or troubleshooting, or 2) some of our applications need to write logs to the container storage.
**Additional context**
This issue was created on behalf of @Juju-62q.
Contributor guide
Research direction
No implementation files, tests, or entry points are mentioned. Start by reviewing the ECS Exec behavior for ECS/EC2 and ECS/Fargate, then define how an optional stop-and-replace operation should work after exec completes and verify that the resulting workload no longer runs the exec'd task.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws
- Domain
- cloud
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100