基于Corretto的Spring Boot Docker镜像ECS部署后无法查看日志求助

尝试将Spring Boot应用部署为ECS（Fargate）服务，使用amazoncorretto:20镜像，但无法在任务中查看日志。现有配置如下：

现有Dockerfile #

# 使用Amazon Corretto 20 JDK作为基础镜像
FROM amazoncorretto:20

# 设置工作目录
WORKDIR /app

# 复制JAR文件到容器内
COPY build/libs/backend-0.0.1-SNAPSHOT.jar /app/backend-0.0.1-SNAPSHOT.jar

# 容器启动时执行的命令
CMD ["java", "-jar", "backend-0.0.1-SNAPSHOT.jar"]

现有任务定义 #

{
    "taskDefinitionArn": "..../cbusha-backend-task:3",
    "containerDefinitions": [
        {
            "name": "cbusha-be",
            "image": "....dkr.ecr.us-east-2.amazonaws.com/ecomm-backend",
            "cpu": 0,
            "portMappings": [],
            "essential": true,
            "environment": [],
            "mountPoints": [],
            "volumesFrom": []
        }
    ],
    "family": "cbusha-backend-task",
    "executionRoleArn": "arn:aws:iam::...:role/ecsTaskExecutionRole",
    "networkMode": "awsvpc",
    "revision": 3,
    "volumes": [],
    "status": "ACTIVE",
    "requiresAttributes": [
        {
            "name": "com.amazonaws.ecs.capability.ecr-auth"
        },
        {
            "name": "ecs.capability.execution-role-ecr-pull"
        },
        {
            "name": "com.amazonaws.ecs.capability.docker-remote-api.1.18"
        },
        {
            "name": "ecs.capability.task-eni"
        }
    ],
    "placementConstraints": [],
    "compatibilities": [
        "EC2",
        "FARGATE"
    ],
    "requiresCompatibilities": [
        "FARGATE"
    ],
    "cpu": "1024",
    "memory": "3072",
    "registeredAt": "2023-07-09T15:08:35.980Z",
    "registeredBy": "arn:aws:iam::...:root",
    "tags": []
}

ecsTaskExecutionRole权限配置 #

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Action": [
                "logs:*"
            ],
            "Effect": "Allow",
            "Resource": "*"
        }
    ]
}

1. 为容器配置AWS日志驱动（核心步骤） #

当前任务定义未配置日志采集规则，ECS无法将容器日志同步到CloudWatch。需要在容器定义中添加logConfiguration字段，指定使用awslogs驱动：

{
    "name": "cbusha-be",
    "image": "....dkr.ecr.us-east-2.amazonaws.com/ecomm-backend",
    "cpu": 0,
    "portMappings": [],
    "essential": true,
    "environment": [],
    "mountPoints": [],
    "volumesFrom": [],
    "logConfiguration": {
        "logDriver": "awslogs",
        "options": {
            "awslogs-group": "/ecs/cbus-ha-backend", // 替换为你的CloudWatch日志组名称
            "awslogs-region": "us-east-2", // 替换为ECS集群所在区域
            "awslogs-stream-prefix": "ecs"
        }
    }
}

注：如果指定的日志组不存在，你的ecsTaskExecutionRole权限已包含logs:*，会自动创建日志组。

2. 确保Spring Boot日志输出到控制台 #

Spring Boot默认输出日志到控制台，但如果自定义了文件日志配置，需调整为同时输出到标准流。在application.properties或application.yml中添加配置：

application.properties #

logging.level.root=INFO
logging.pattern.console=%d{yyyy-MM-dd HH:mm:ss} [%thread] %-5level %logger{36} - %msg%n
# 可选：禁用本地文件日志
logging.file.name=

application.yml #

logging:
  level:
    root: INFO
  pattern:
    console: "%d{yyyy-MM-dd HH:mm:ss} [%thread] %-5level %logger{36} - %msg%n"
  file:
    name: "" # 禁用本地文件日志

3. Dockerfile优化（可选） #

可以通过环境变量统一配置日志级别或激活指定环境：

FROM amazoncorretto:20

WORKDIR /app

COPY build/libs/backend-0.0.1-SNAPSHOT.jar /app/backend-0.0.1-SNAPSHOT.jar

# 设置日志级别和激活生产环境
ENV LOGGING_LEVEL_ROOT=INFO
ENV SPRING_PROFILES_ACTIVE=prod

CMD ["java", "-jar", "backend-0.0.1-SNAPSHOT.jar"]

4. 验证日志采集 #

更新任务定义并重启ECS服务后，通过以下方式验证：

• 进入ECS控制台，找到目标任务，查看「日志」标签页
• 直接访问CloudWatch Logs，查看指定日志组的内容

如果仍无日志，排查方向：

• 检查任务状态是否正常，查看任务事件中的启动报错
• 通过ECS任务的「终端」功能进入容器，执行java -jar backend-0.0.1-SNAPSHOT.jar手动启动，确认应用是否正常输出日志
• 确认CloudWatch日志组的权限配置是否正确

内容的提问来源于stack exchange，提问作者Jackie