Account health marks Fargate clusters needing upgrade even though they are on the latest version

0

According to our account health dashboard we need to upgrade our ECS Fargate platform version because the version we are using is getting retired. It lists all our clusters, but I checked all of them were deployed with the LATEST setting and are running version 1.4.0. This version is according to the referenced document (https://docs.aws.amazon.com/AmazonECS/latest/developerguide/platform-linux-fargate.html) the latest version available.

Can somebody explain why we are still seeing these clusters as needing patching even though there were already running the latest version? I even re-created all resources for one environment and it is listed as needing patching?

Thanks

asked 5 months ago781 views
1 Answer
0
Accepted Answer

The Fargate task retirement is about the patch applied on it for bug fix or security patch purpose.

Here is the part of documentation which talks about it:

If a security issue is found that affects an existing platform version, AWS creates a new patched revision of the platform version and retires tasks running on the vulnerable revision. In some cases, you may be notified that your tasks on Fargate have been scheduled for retirement. For more information, see AWS Fargate task maintenance FAQs.

The FAQ has a comprehensive list of common questions and answers related to this topic.

I hope this helps you to clarify this question.

profile pictureAWS
EXPERT
answered 5 months ago
profile picture
EXPERT
reviewed 4 months ago
  • I do understand the why behind the task retirement. The question is, why the resources are still marked as affected in the health dashboard, even though I performed the update of the service to make sure it happened in our maintenance window (as suggested in the email informing me about the routine retirement). Also the "last update time" of these resources is wrong in the health dashboard.

  • The Health Dashboard doesn't have directly relation with the task status. For instance, the "affected" information showing there was about the time that the notification was sent. If you have done the Task replacement already, you don't need to worry about it. The same for the other fields on it. All the columns showing on the Health Dashboard are about the message itself, not about the resource referred on it. Let me know if you have further queries about it.

  • OK, great to know. Thanks!

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions