terraform-aws-ecr

What

1. Fixes one of the example projects

Why

1. Examples allow consumers to copy / pasta and quickly get up and running with the module -- We want them working!

what

• Upgrade terraform-null-label to TF 0.13 compat version

why

• Support TF 0.13

references

• #51

what

• Added support for the environment attribute that has been added to terraform-null-label

why

• Because we need to bring this up to speed!

what

• Allow protecting images with a given set of tag names

why

• At Transcend, we tag images with dev, staging, and prod for deployments in addition to their SHA tags. We want to expire images, but not those actively is use.

references

• https://github.com/aws/containers-roadmap/issues/637
• https://docs.aws.amazon.com/AmazonECR/latest/userguide/lifecycle_policy_examples.html

Note: This change is fully backwards compatible

what

• Change TF version range

why

• Support iteration on modules with for_each

references

• https://sweetops.slack.com/archives/CB6GHNLG0/p1593194085340200

Fixes #51

what

Allow disabling lifecycle hooks across all created repos

why

Sometimes it's required to keep all images

PR #48. Closes #32 and #40

what

• Added ecr:Delete and SetRepositoryPolicy perms

why

• fixes #44

what

• Adds a variable to change tag mutability of images in AWS ECR.

why

• Image tag immutability is a useful feature supported by AWS ECR, but there is no way of configuring it using this Terraform module.

references

• Closes #38

what

• Added variables and outputs to create multiple repositories in AWS ECR.

1. passing a list of docker images :
   list_image = ["redis", "nginx"]

2. then get a map of image name to the repository :
   repository_url_map = {
   "redis" = "xxx.dkr.ecr.eu-west-1.amazonaws.com/redis"
   "nginx = "xxx.dkr.ecr.eu-west-1.amazonaws.com/nginx "
   }

why

• it is convenient that if we could create multiple repositories at once by passing a list of docker images as an argument since AWS ECR assuming one repo per one docker image.

what

• Add ImageScan actions to IAM roles

why

• Allow ReadOnly to call DescribeImageScanFindings and FullAccess to call DescribeImageScanFindings & StartImageScan

what

• Add repository ARN to output

why

• Useful if you are adding policies for the registry

what

• Expose variable "regex_replace_chars"

why

• Allow changing label module behavior

what

• Update terraform-null-label to v0.16.0

why

• Since null_resource was dropped in the terraform-null-label module starting version 0.15.0 and the code was completely removed in the recent version 0.16.0, update the terraform-null-label to the latest version

what

• Toggle image scanning on ECR

why

• As of terraform AWS provider 2.34.0 the ECR image repository now has an additional setting to enable image scanning for CVE vulnerabilities.

references

https://www.terraform.io/docs/providers/aws/r/ecr_repository.html