AWS::ECS::TaskDefinition SystemControl
A list of namespaced kernel parameters to set in the container. This parameter maps to
Sysctls
in tthe docker conainer create command and the --sysctl
option to docker run. For example, you can configure
net.ipv4.tcp_keepalive_time
setting to maintain longer lived
connections.
We don't recommend that you specify network-related systemControls
parameters for multiple containers in a single task that also uses either the
awsvpc
or host
network mode. Doing this has the following
disadvantages:
-
For tasks that use the
awsvpc
network mode including Fargate, if you setsystemControls
for any container, it applies to all containers in the task. If you set differentsystemControls
for multiple containers in a single task, the container that's started last determines whichsystemControls
take effect. -
For tasks that use the
host
network mode, the network namespacesystemControls
aren't supported.
If you're setting an IPC resource namespace to use for the containers in the task, the following conditions apply to your system controls. For more information, see IPC mode.
-
For tasks that use the
host
IPC mode, IPC namespacesystemControls
aren't supported. -
For tasks that use the
task
IPC mode, IPC namespacesystemControls
values apply to all containers within a task.
Note
This parameter is not supported for Windows containers.
Note
This parameter is only supported for tasks that are hosted on
AWS Fargate if the tasks are using platform version 1.4.0
or later
(Linux). This isn't supported for Windows containers on
Fargate.
Syntax
To declare this entity in your AWS CloudFormation template, use the following syntax:
Properties
Namespace
-
The namespaced kernel parameter to set a
value
for.Required: No
Type: String
Update requires: Replacement
Value
-
The namespaced kernel parameter to set a
value
for.Valid IPC namespace values:
"kernel.msgmax" | "kernel.msgmnb" | "kernel.msgmni" | "kernel.sem" | "kernel.shmall" | "kernel.shmmax" | "kernel.shmmni" | "kernel.shm_rmid_forced"
, andSysctls
that start with"fs.mqueue.*"
Valid network namespace values:
Sysctls
that start with"net.*"
All of these values are supported by Fargate.
Required: No
Type: String
Update requires: Replacement