This is the new Amazon CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the Amazon CloudFormation User Guide.
AWS::ECS::TaskDefinition SystemControl
A list of namespaced kernel parameters to set in the container. This parameter maps to
Sysctls in the docker container create command and the
--sysctl option to docker run. For example, you can configure
net.ipv4.tcp_keepalive_time setting to maintain longer lived
connections.
We don't recommend that you specify network-related systemControls
parameters for multiple containers in a single task that also uses either the
awsvpc or host network mode. Doing this has the following
disadvantages:
-
For tasks that use the
awsvpcnetwork mode including Fargate, if you setsystemControlsfor any container, it applies to all containers in the task. If you set differentsystemControlsfor multiple containers in a single task, the container that's started last determines whichsystemControlstake effect. -
For tasks that use the
hostnetwork mode, the network namespacesystemControlsaren't supported.
If you're setting an IPC resource namespace to use for the containers in the task, the following conditions apply to your system controls. For more information, see IPC mode.
-
For tasks that use the
hostIPC mode, IPC namespacesystemControlsaren't supported. -
For tasks that use the
taskIPC mode, IPC namespacesystemControlsvalues apply to all containers within a task.
Note
This parameter is not supported for Windows containers.
Note
This parameter is only supported for tasks that are hosted on
Amazon Fargate if the tasks are using platform version 1.4.0 or later
(Linux). This isn't supported for Windows containers on
Fargate.
Syntax
To declare this entity in your Amazon CloudFormation template, use the following syntax:
Properties
Namespace-
The namespaced kernel parameter to set a
valuefor.Required: No
Type: String
Update requires: Replacement
Value-
The namespaced kernel parameter to set a
valuefor.Valid IPC namespace values:
"kernel.msgmax" | "kernel.msgmnb" | "kernel.msgmni" | "kernel.sem" | "kernel.shmall" | "kernel.shmmax" | "kernel.shmmni" | "kernel.shm_rmid_forced", andSysctlsthat start with"fs.mqueue.*"Valid network namespace values:
Sysctlsthat start with"net.*". Only namespacedSysctlsthat exist within the container starting with "net.* are accepted.All of these values are supported by Fargate.
Required: No
Type: String
Update requires: Replacement