Separate EC2 and Fargate

ec2.ts

@@ -0,0 +1,162 @@
+import { Construct } from 'constructs';
+
+import * as cdk from 'aws-cdk-lib';
+import * as ecs from 'aws-cdk-lib/aws-ecs';
+import type * as secretsmanager from 'aws-cdk-lib/aws-secretsmanager';
+
+// Comments are to match tsdoc formatting
+export interface EcsDatadogDaemonServiceProps {
+    /**
+     * The ECS cluster to deploy the Datadog agent to
+     */
+    readonly ecsCluster: ecs.Cluster;
+    /**
+     * The secret containing the Datadog API key
+     *
+     * @remarks
+     * The secret must be a single value, not key-value pairs.
+     */
+    readonly datadogApiKeySecret: secretsmanager.ISecret;
+    /**
+     * The Datadog site to send data to
+     *
+     * @remarks
+     * Defaults to datadoghq.com See information about other
+     * datadog site parameters at
+     * https://docs.datadoghq.com/getting_started/site/#access-the-datadog-site
+     */
+    readonly datadogSite?: string;
+    /**
+     * Whether logging should be disabled
+     */
+    readonly logsDisabled?: boolean;
+}
+
+/**
+ * Deploys the Datadog agent as a daemon service to an ECS cluster.
+ *
+ * @remarks
+ *
+ * This construct is intended to be used with an ECS cluster makes use
+ * of EC2 instances. It is not intended to be used with an ECS cluster
+ * that only runs Fargate tasks. See addDatadogToFargateTask for retrieving
+ * logs and metrics from Fargate tasks.
+ */
+export class EcsDatadogDaemonService extends Construct {
+    constructor(scope: Construct, id: string, props: EcsDatadogDaemonServiceProps) {
+        super(scope, id);
+
+        // To match as documented at
+        // https://docs.datadoghq.com/containers/amazon_ecs/?tab=awscli#setup
+        // and
+        // https://docs.datadoghq.com/containers/amazon_ecs/logs/?tab=linux
+        const taskDefinition = new ecs.Ec2TaskDefinition(this, 'TaskDefinition', {
+            family: 'datadog-agent-task',
+        });
+
+        const container = taskDefinition.addContainer('datadog-agent', {
+            image: ecs.ContainerImage.fromRegistry('public.ecr.aws/datadog/agent:latest'),
+            cpu: 100,
+            memoryLimitMiB: 512,
+            essential: true,
+            environment: {
+                DD_SITE: props.datadogSite ?? 'datadoghq.com',
+                ...(props.logsDisabled
+                    ? {}
+                    : {
+                          DD_LOGS_ENABLED: 'true',
+                          DD_LOGS_CONFIG_CONTAINER_COLLECT_ALL: 'true',
+                      }),
+            },
+            secrets: {
+                DD_API_KEY: ecs.Secret.fromSecretsManager(props.datadogApiKeySecret),
+            },
+            healthCheck: {
+                command: ['CMD-SHELL', 'agent health'],
+                retries: 3,
+                timeout: cdk.Duration.seconds(5),
+                interval: cdk.Duration.seconds(10),
+                startPeriod: cdk.Duration.seconds(15),
+            },
+            logging: ecs.LogDrivers.awsLogs({
+                streamPrefix: 'datadog-agent',
+            }),
+        });
+
+        container.addMountPoints(
+            {
+                containerPath: '/var/run/docker.sock',
+                sourceVolume: 'docker_sock',
+                readOnly: true,
+            },
+            {
+                containerPath: '/host/sys/fs/cgroup',
+                sourceVolume: 'cgroup',
+                readOnly: true,
+            },
+            {
+                containerPath: '/host/proc',
+                sourceVolume: 'proc',
+                readOnly: true,
+            },
+        );
+
+        if (!props.logsDisabled) {
+            container.addMountPoints(
+                {
+                    containerPath: '/opt/datadog-agent/run',
+                    sourceVolume: 'pointdir',
+                    readOnly: false,
+                },
+                {
+                    containerPath: '/var/lib/docker/containers',
+                    sourceVolume: 'containers_root',
+                    readOnly: true,
+                },
+            );
+        }
+
+        taskDefinition.addVolume({
+            name: 'docker_sock',
+            host: {
+                sourcePath: '/var/run/docker.sock',
+            },
+        });
+
+        taskDefinition.addVolume({
+            name: 'proc',
+            host: {
+                sourcePath: '/proc/',
+            },
+        });
+
+        taskDefinition.addVolume({
+            name: 'cgroup',
+            host: {
+                sourcePath: '/sys/fs/cgroup/',
+            },
+        });
+
+        if (!props.logsDisabled) {
+            taskDefinition.addVolume({
+                name: 'pointdir',
+                host: {
+                    sourcePath: '/opt/datadog-agent/run',
+                },
+            });
+
+            taskDefinition.addVolume({
+                name: 'containers_root',
+                host: {
+                    sourcePath: '/var/lib/docker/containers',
+                },
+            });
+        }
+
+        new ecs.Ec2Service(this, 'Service', {
+            cluster: props.ecsCluster,
+            taskDefinition,
+            daemon: true,
+        });
+    }
+}