ApplicationLoadBalancedFargateService does not allow targetGroup to have protocol/port other than HTTPS/80

[jackm-ts]

The target group props listed here should be configurable by the ApplicationLoadBalancedFargateServiceProps. We have use cases where our containers are accepting traffic on HTTPS.

aws-cdk/packages/@aws-cdk/aws-ecs-patterns/lib/base/application-load-balanced-service-base.ts

Lines 319 to 321 in 4e82719

	const targetProps = {
	port: 80,
	};

[SoManyHs]

I believe this can be addressed by #7417

[justin-ad]

Ran into this as well. My ApplicationLoadBalancedFargateService has the following definition:

    ecs_patterns.ApplicationLoadBalancedFargateService(
            self,
            "MyService",
            service_name=f"my-service-{env}",
            cluster=cluster,
            memory_limit_mib=1024,
            cpu=512,
            task_image_options=ecs_patterns.ApplicationLoadBalancedTaskImageOptions(
                image=ecs.ContainerImage.from_ecr_repository(
                    my_service_repo, tag=env
                ),
                container_port=443,
            ),
            domain_name="my-domain-name.com",
            domain_zone=route53.HostedZone.from_hosted_zone_attributes(
                self,
                "MyZone",
                hosted_zone_id=config["HOSTED_ZONE_ID"],
                zone_name=config["ROOT_DOMAIN"],
            ),
            security_groups=[ecs_sg],
            certificate=my_certificate,
            listener_port=443,
            protocol=elasticloadbalancingv2.ApplicationProtocol.HTTPS,
            redirect_http=True,
        )

When I synth this, I get a Target Group with Protocol: "HTTP" and Port: 80 as follows:

    "MyServiceLBPublicListenerECSGroup29B5BAF2": {
      "Type": "AWS::ElasticLoadBalancingV2::TargetGroup",
      "Properties": {
        "HealthCheckPath": "/",
        "HealthCheckProtocol": "HTTPS",
        "Matcher": {
          "HttpCode": "200,204"
        },
        "Port": 80,
        "Protocol": "HTTP",
        "TargetType": "ip",
        "VpcId": {
          "Fn::ImportValue": "my-vpc:ExportsOutputRefmihiniosvpcdevB1F54EAE4F14EF21"
        }
      },
      "Metadata": {
        "aws:cdk:path": "my-stack/MyService/LB/PublicListener/ECSGroup/Resource"
      }
    },

I can't seem to find any way to set the Target Group Port and Protocol to 443/HTTPS...

[justin-ad]

@MrArnoldPalmer @uttarasridhar Also, can we please change the issue title? I think @jackm-ts intended "HTTP/80" rather than "HTTPS/80".

[justin-ad]

#7417 Does not seem to relate to this: 7417 is related to the container listener not the Target Group listener, which this issue specifically pertains to.

[hoegertn]

Also #11381

[github-actions]

This issue has not received any attention in 1 year. If you want to keep this issue open, please leave a comment below and auto-close will be canceled.