Hi!! I’m developing some microservices in AWS using ECS and when I perform a

pulumi up

everything works nice. I automatically upload the docker image to the ERS and I have a new container definition each time I perform a

pulumi up

. My issue is that in spite the

container_definition

is new inside the task, tasks are not updated and in consequence the services are not updated. Any idea about how to force the service update forcing a rolling update in the service??

can you share the code you currrently have?

Check if you have any notifications in your service in the AWS console. I'm also struggling with my service not getting updated, and it seems to be related to the message: "Reason: You've reached the limit on the number of tasks you can run concurrently."

here is the code of my pulumi client:

def create_container_service(self, vpc, vpc_subnet, cluster, image, security_group, service_name):
    alb = aws.lb.LoadBalancer(service_name+'-app-lb',
                            security_groups=[security_group],
                            subnets=vpc_subnet,
                            )

    atg = aws.lb.TargetGroup(service_name+'-app-tg',
                            port=8080,
                            protocol='HTTP',
                            target_type='ip',
                            vpc_id=vpc,
                            )

    wl = aws.lb.Listener(service_name+'-web',
                        load_balancer_arn=alb.arn,
                        port=8080,
                        default_actions=[aws.lb.ListenerDefaultActionArgs(
                          type='forward',
                          target_group_arn=atg.arn,
                        )],
                        )

    # Create an IAM role that can be used by our service's task.
    role = aws.iam.Role(service_name+'-task-exec-role',
                      assume_role_policy=json.dumps({
                        'Version': '2008-10-17',
                        'Statement': [{
                            'Sid': '',
                            'Effect': 'Allow',
                            'Principal': {
                              'Service': '<http://ecs-tasks.amazonaws.com|ecs-tasks.amazonaws.com>'
                            },
                            'Action': 'sts:AssumeRole',
                        }]
                      }),
                      )

    aws.iam.RolePolicyAttachment(service_name+'-task-exec-policy',
                                role=role.name,
                                policy_arn='arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy',
                                )

    task_definition = aws.ecs.TaskDefinition(service_name+'-app-task',
                                            family='fargate-task-definition',
                                            cpu='256',
                                            memory='512',
                                            network_mode='awsvpc',
                                            requires_compatibilities=[
                                              'FARGATE'],
                                            execution_role_arn=role.arn,
                                            container_definitions=image,
                                            )

    aws.ecs.Service(service_name+'-svc',
                    cluster=cluster,
                    desired_count=2,
                    launch_type='FARGATE',
                    task_definition=task_definition.arn,
                    network_configuration=aws.ecs.ServiceNetworkConfigurationArgs(
                      assign_public_ip=True,
                      subnets=vpc_subnet,
                      security_groups=[security_group],
                    ),
                    load_balancers=[aws.ecs.ServiceLoadBalancerArgs(
                      target_group_arn=atg.arn,
                      container_name=service_name,
                      container_port=8080,
                    )],
                    opts=ResourceOptions(depends_on=[wl]),
                    )
    export('service.'+service_name+'.url', alb.dns_name.apply(lambda url: 'http://'+url+':8080'))