Skip to content

Commit dd728cf

Browse files
author
iru
authored
doc: troubleshoot no logs in ecs task + upgrade howto
1 parent b1ac9ad commit dd728cf

File tree

1 file changed

+17
-0
lines changed

1 file changed

+17
-0
lines changed

README.md

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -247,6 +247,9 @@ A: Need to check several steps
247247
<br/>Dig into secure for cloud compute log (cloud-connector) and check for errors.
248248
<br/>If previous logs are ok, check [spawned scanning service](http://localhost:1313/en/docs/sysdig-secure/sysdig-secure-for-cloud/#summary) logs
249249

250+
### Q-AWS: In the ECS compute flavor of secure for cloud, I don't see any logs in the cloud-connector component
251+
A: This may be due to the task not beinb able to start, normally due not not having enough permissions to even fetch the secure apiToken, stored in the AWS SSM service.
252+
<br/>S: Access the task and see if there is any value in the "Stoped Reason" field.
250253

251254
### Q-AWS: Getting error "Error: failed creating ECS Task Definition: ClientException: No Fargate configuration exists for given values.
252255
A: Your ECS task_size values aren't valid for Fargate. Specifically, your mem_limit value is too big for the cpu_limit you specified
@@ -299,6 +302,20 @@ This error happens when the ECS `TaskRole` has no permissions to assume this rol
299302
A: Probably you or someone in the same environment you're using, already deployed a resource with the sysdig terraform module and a naming collision is happening.
300303
<br/>S: If you want to maintain several versions, make use of the [`name` input var of the examples](https://github.com/sysdiglabs/terraform-aws-secure-for-cloud/tree/master/examples/single-account#input_name)
301304

305+
<br/><br/>
306+
307+
## Upgrading
308+
309+
- Ideally you would like to upgrade the full terraform example with
310+
311+
```
312+
$ terraform init -upgrade
313+
$ terraform plan
314+
$ terraform apply
315+
```
316+
317+
- If required, you can upgrade cloud-connector component by restarting the task (stop task). Because it's not pinned to an specific version, it will download the latest one.
318+
302319
<br/><br/>
303320
## Authors
304321

0 commit comments

Comments
 (0)