|-- app
|   |-- Dockerfile
|   |-- cmd
|   |   `-- main.go
|   `-- go.mod
`-- infra

package main

import "net/http"

func main() {
	http.HandleFunc("/", func(w http.ResponseWriter, r *http.Request) {
		w.Write([]byte("Hello, World!"))
	})

	http.ListenAndServe(":8080", nil)
}

FROM golang:alpine

WORKDIR /app
COPY . .

RUN go mod download

WORKDIR /app/cmd
RUN go build -o main .

CMD ["/app/cmd/main"]

cd app
docker build -t go-ecs-app .

docker run -p 8080:8080 go-ecs-app

cd infra

`-- infra
    `-- main.tf

# ----------------------
# terraform configuration
# ----------------------
terraform {
  required_version = ">= 0.13"
  required_providers {
    aws = {
      source  = "hashicorp/aws"
      version = "~>3.0"
    }
  }
}

# ----------------------
# provider configuration
# ----------------------
provider "aws" {
  profile = "tknr_private"
  region  = "ap-northeast-1"
}

terraform init

resource "aws_ecr_repository" "go-ecs-app" {
  name                 = "go-ecs-app"
  image_tag_mutability = "MUTABLE"

  image_scanning_configuration {
    scan_on_push = true
  }
}

terraform plan
terraform appy

docker tag go-ecs-app:latest <your-account-id>.dkr.ecr.<your-region>.amazonaws.com/go-ecs-app:latest

aws sts get-caller-identity --query "Account" --output text

aws ecr get-login-password --region ap-northeast-1 | docker login --username AWS --password-stdin 879853972315.dkr.ecr.ap-northeast-1.amazonaws.com

docker push 879853972315.dkr.ecr.ap-northeast-1.amazonaws.com/go-ecs-app:latest

resource "aws_ecs_cluster" "golange_ecs_cluster" {
  name = "golang-ecs-cluster"
}

terraform apply

resource "aws_iam_role" "ecs_task_execution_role" {
  name = "ecs_task_execution_role"

  assume_role_policy = jsonencode({
    Version = "2012-10-17",
    Statement = [
      {
        Action = "sts:AssumeRole",
        Principal = {
          Service = "ecs-tasks.amazonaws.com",
        },
        Effect = "Allow",
        Sid    = "",
      },
    ],
  })
}

resource "aws_iam_role_policy_attachment" "ecs_task_execution_role_policy" {
  role       = aws_iam_role.ecs_task_execution_role.name
  policy_arn = "arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy"
}

resource "aws_ecs_task_definition" "golang-ecs-app" {
  family                   = "golang-ecs-app"
  requires_compatibilities = ["FARGATE"]
  network_mode             = "awsvpc"
  cpu                      = "256"
  memory                   = "512"
  execution_role_arn       = aws_iam_role.ecs_task_execution_role.arn

  container_definitions = jsonencode([
    {
      name      = "golang-ecs-app"
      image     = "${aws_ecr_repository.go-ecs-app.repository_url}:latest"
      essential = true
      portMappings = [
        {
          containerPort = 8080
          hostPort      = 8080
          protocol      = "tcp"
        }
      ]
    }
  ])
}

 container_definitions = jsonencode([
    {
      name      = "golang-ecs-app"
      image     = "${aws_ecr_repository.go-ecs-app.repository_url}:latest"
      essential = true
      portMappings = [
        {
          containerPort = 8080
          hostPort      = 8080
          protocol      = "tcp"
        }
      ]
    }
  ])

# ----------------------
# VPC
# ----------------------
resource "aws_vpc" "golang-ecs-app-vpc" {
  cidr_block           = "10.0.0.0/16"
  enable_dns_support   = true
  enable_dns_hostnames = true
  tags = {
    Name = "golang-ecs-app-vpc"
  }
}

# ----------------------
# サブネット
# ----------------------
resource "aws_subnet" "golang-ecs-app-subnet" {
  vpc_id                  = aws_vpc.golang-ecs-app-vpc.id
  cidr_block              = "10.0.1.0/24"
  availability_zone       = "ap-northeast-1a"
  map_public_ip_on_launch = true
  tags = {
    Name = "golang-ecs-app-subnet"
  }
}

# ----------------------
# セキュリティグループ
# ----------------------
resource "aws_security_group" "golang-ecs-app-sg" {
  name        = "golang-ecs-app-sg"
  description = "Allow all traffic"
  vpc_id      = aws_vpc.golang-ecs-app-vpc.id

  ingress {
    from_port   = 8080
    to_port     = 8080
    protocol    = "tcp"
    cidr_blocks = ["0.0.0.0/0"]
  }

  egress {
    from_port   = 0
    to_port     = 0
    protocol    = "-1"
    cidr_blocks = ["0.0.0.0/0"]
  }

  tags = {
    Name = "golang-ecs-app-sg"
  }
}

terraform apply

# ----------------------
# インターネットゲートウェイの設定
# ----------------------
resource "aws_internet_gateway" "golang_ecs_app_igw" {
  vpc_id = aws_vpc.golang-ecs-app-vpc.id

  tags = {
    Name = "golang-ecs-app-igw"
  }
}

# ----------------------
# ルートテーブルの設定
# ----------------------
resource "aws_route_table" "golang_ecs_app_rt" {
  vpc_id = aws_vpc.golang-ecs-app-vpc.id

  route {
    cidr_block = "0.0.0.0/0"
    gateway_id = aws_internet_gateway.golang_ecs_app_igw.id
  }

  tags = {
    Name = "golang-ecs-app-rt"
  }
}

resource "aws_route_table_association" "golang_ecs_app_rta" {
  subnet_id      = aws_subnet.golang-ecs-app-subnet.id
  route_table_id = aws_route_table.golang_ecs_app_rt.id
}

resource "aws_ecs_task_definition" "golang-ecs-app" {
  family                   = "golang-ecs-app"
  requires_compatibilities = ["FARGATE"]
  network_mode             = "awsvpc"
  cpu                      = "256"
  memory                   = "512"
  execution_role_arn       = aws_iam_role.ecs_task_execution_role.arn

  container_definitions = jsonencode([
    {
      name      = "golang-ecs-app"
      image     = "${aws_ecr_repository.go-ecs-app.repository_url}:latest"
      essential = true
      portMappings = [
        {
          containerPort = 8080
          hostPort      = 8080
          protocol      = "tcp"
        }
      ]
      logConfiguration = {
        logDriver = "awslogs"
        options = {
          "awslogs-group"         = "/ecs/golang-ecs-app",
          "awslogs-region"        = "ap-northeast-1",
          "awslogs-stream-prefix" = "ecs"
        }
      }
    }
  ])
}

# ECSサービス
resource "aws_ecs_service" "golang_ecs_app_service" {
  name                 = "golang-ecs-app-service"
  cluster              = aws_ecs_cluster.golang_ecs_cluster.id
  task_definition      = aws_ecs_task_definition.golang-ecs-app.arn
  desired_count        = 1
  launch_type          = "FARGATE"
  force_new_deployment = true // これ

# ECRにプッシュする
docker push ${ID}.dkr.ecr.ap-northeast-1.amazonaws.com/${name}:latest

# ECSにデプロイする
aws ecs update-service --cluster ${CLUSTER_NAME} --service ${SERVICE_NAME} --force-new-deployment