ebpf-tls-tracer/deploy/ecs/task-definition.json at main · SCGIS-Wales/ebpf-tls-tracer · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
{
  "family": "tls-tracer",
  "networkMode": "host",
  "pidMode": "host",
  "requiresCompatibilities": ["EC2"],
  "containerDefinitions": [
    {
      "name": "tls-tracer",
      "image": "ghcr.io/scgis-wales/ebpf-tls-tracer:latest",
      "privileged": true,
      "essential": true,
      "command": ["-f", "json", "-v"],
      "mountPoints": [
        {
          "sourceVolume": "sys-kernel-debug",
          "containerPath": "/sys/kernel/debug",
          "readOnly": true
        },
        {
          "sourceVolume": "sys-kernel-tracing",
          "containerPath": "/sys/kernel/tracing",
          "readOnly": true
        },
        {
          "sourceVolume": "sys-fs-bpf",
          "containerPath": "/sys/fs/bpf",
          "readOnly": false
        },
        {
          "sourceVolume": "proc",
          "containerPath": "/proc",
          "readOnly": true
        },
        {
          "sourceVolume": "host-ssl-lib",
          "containerPath": "/host/usr/lib",
          "readOnly": true
        }
      ],
      "logConfiguration": {
        "logDriver": "awslogs",
        "options": {
          "awslogs-group": "/ecs/tls-tracer",
          "awslogs-region": "eu-west-1",
          "awslogs-stream-prefix": "tls-tracer",
          "awslogs-create-group": "true"
        }
      },
      "memory": 256,
      "cpu": 128
    }
  ],
  "volumes": [
    {
      "name": "sys-kernel-debug",
      "host": { "sourcePath": "/sys/kernel/debug" }
    },
    {
      "name": "sys-kernel-tracing",
      "host": { "sourcePath": "/sys/kernel/tracing" }
    },
    {
      "name": "sys-fs-bpf",
      "host": { "sourcePath": "/sys/fs/bpf" }
    },
    {
      "name": "proc",
      "host": { "sourcePath": "/proc" }
    },
    {
      "name": "host-ssl-lib",
      "host": { "sourcePath": "/usr/lib" }
    }
  ]
}