ECS error log when npm run service:deploy

[andsus]

ECS error log when npm run service:deploy

[rieckpil]

Hey @andsus,

thanks for reaching out. Can you provide more information about your current setup? Did you already create the database successfully and can you see the database in the RDS overview in the AWS management console in the browser?

[andsus]

Yes,
I've npm run database:deploy already.
staging-todo-app-database is active on us-west-2a

These env variable are available on the ECS task definition on AWS:
SPRING_DATASOURCE_PASSWORD value ...

SPRING_DATASOURCE_URL value
jdbc:postgresql://staging-todo-app-database.c4mk6do5vazm.us-west-2.rds.amazonaws.com:5432/stagingtodoappdatabase

SPRING_DATASOURCE_USERNAME value
stagingtodoappdbUser

I've only updated the region on yml, and domain name. Other than that, it's identical deployment based of the https://github.com/stratospheric-dev/ source code.

application.yml:
cloud:
aws:
stack:
auto: false
region:
static: us-west-2
instance:
data:
enabled: false
sns:
enabled: false

server:
forward-headers-strategy: framework

spring:
jpa:
hibernate:
ddl-auto: validate
open-in-view: false
application:
name: todo-app

management:
metrics:
export:
cloudwatch:
enabled: true
namespace: stratospheric
step: 1m
tags:
environment: ${ENVIRONMENT_NAME}

error:
handling:
exception-logging: WITH_STACKTRACE

custom:
invitation-codes: DUKE, HELLO_WORLD, STRATOSPHERIC # TODO: outsource them -> e.g. env variable or database
sharing-queue: stratospheric-todo-sharing
external-url: https://app.devops.prime-video.amazon.dev/
auto-confirm-collaborations: false
confirm-email-from-address: [email protected]
environment: ${ENVIRONMENT_NAME}

application-aws.yml:
spring:
security:
oauth2:
client:
registration:
cognito:
clientId: ${COGNITO_CLIENT_ID}
clientSecret: ${COGNITO_CLIENT_SECRET}
scope: openid, profile, email
clientName: stratospheric-users-client
provider:
cognito:
issuerUri: ${COGNITO_PROVIDER_URL}

management:
metrics:
export:
cloudwatch:
enabled: false # disabled to save some $$$ on our monthly AWS bill

custom:
sharing-queue: ${TODO_SHARING_QUEUE_NAME}
web-socket-relay-endpoint: ${WEB_SOCKET_RELAY_ENDPOINT}
web-socket-relay-username: ${WEB_SOCKET_RELAY_USERNAME}
web-socket-relay-password: ${WEB_SOCKET_RELAY_PASSWORD}
web-socket-relay-use-ssl: true
provide-test-todo-controller: false
use-cognito-as-identity-provider: true
provide-dynamodb-via-aws: true

[andsus]

I found out that the ServiceApp is missing securityGroupIdsToGrantIngressFromEcs.