无法从ECS Fargate任务访问EFS

发布于 2025-02-01 08:29:58 字数 1072 浏览 5 评论 0 原文

试图启动使用EFS卷的Fargate任务。

从ECS控制台启动任务时,我会遇到此错误:

ResourceInitializationError: failed to invoke EFS utils commands to set up EFS volumes: stderr: Failed to resolve "fs-019a4b2d1774c5586.efs.eu-west-1.amazonaws.com" - check that your file system ID is correct, and ensure that the VPC has an EFS mount target for this file system ID. See https://docs.aws.amazon.com/console/efs/mount-dns-name for more detail. Attempting to lookup mount target ip address using botocore. Failed to import necessary dependency botocore, please install botocore first. : unsuccessful EFS utils command execution; code: 1

文件系统ID正确。我已经在相同的VPC中将卷中的音量安装了,这一切都很好。

以下在此处定义的步骤:

我无法弄清楚在哪里指定ECS服务或任务的出站规则。 请参阅图像

谢谢。

Trying to launch a Fargate task that uses an EFS Volume.

When starting the task from ECS Console, I'm getting this error :

ResourceInitializationError: failed to invoke EFS utils commands to set up EFS volumes: stderr: Failed to resolve "fs-019a4b2d1774c5586.efs.eu-west-1.amazonaws.com" - check that your file system ID is correct, and ensure that the VPC has an EFS mount target for this file system ID. See https://docs.aws.amazon.com/console/efs/mount-dns-name for more detail. Attempting to lookup mount target ip address using botocore. Failed to import necessary dependency botocore, please install botocore first. : unsuccessful EFS utils command execution; code: 1

File system Id is correct. I've mounted the volume from an ec2 instance in the same VPC, all good.

Following steps defined here : https://aws.amazon.com/premiumsupport/knowledge-center/ecs-fargate-mount-efs-containers-tasks/?nc1=h_ls

I cannot figure out where to specify outbound rule for ECS service or task. See image

Thanks in advance.

如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

扫码二维码加入Web技术交流群

发布评论

需要 登录 才能够评论, 你可以免费 注册 一个本站的账号。

评论(2

一城柳絮吹成雪 2025-02-08 08:29:58

如@markB所说,我已经编辑了出站规则,并将端口2049(NFS)添加到EFS安全组,这很罚款。

As @MarkB stated, i've edited the outbound rule and added the port 2049 (NFS) to the EFS security group, and it's workin fine.

Saygoodbye 2025-02-08 08:29:58
  1. 基本上,ECS的安全组应允许端口2049上的Ingress和NFS协议中的SSH允许安装目标的安全组和
  2. MOUNT TARGET的安全组的安全组允许在2049端口上允许NFS协议。
  1. Basically the ECS'S security group should allow ssh in the ingress and nfs protocol on the port 2049 to the Securitygroup of the mount target and
  2. Mount target's security group should allow nfs protocol on the 2049 port.
~没有更多了~
我们使用 Cookies 和其他技术来定制您的体验包括您的登录状态等。通过阅读我们的 隐私政策 了解更多相关信息。 单击 接受 或继续使用网站,即表示您同意使用 Cookies 和您的相关数据。
原文