This repository was archived by the owner on Nov 27, 2023. It is now read-only.
This repository was archived by the owner on Nov 27, 2023. It is now read-only.
ECS: don't expose all ports to load balancer #1740
Open
Description
Sometimes we need to expose ports in ECS cluster, but not necessary to load balancer. For example, to use Cloudwatch prometheus agent in the ECS cluster we need to define tasks with exposed ports for getting metrics, but for security reasons, we don't want expose these ports to outside. But currently compose
create a listener for each exposed port in the docker compose file.
So, a syntax like this might be useful:
services:
test:
image: myImage
ports:
- target: 3000
x-aws-protocol: none