terraform-aws-ecr

🐛 Bug Fixes

what

• update null-label to latest 0.21.0

why

• 0.19.2 got pinned to required_version = ">= 0.12.0, < 0.14.0"

what

• upgrade aws provider to > 3.1

why

• version 3.1 introduced a bug in encryption configs

references

• closes #65

🐛 Bug Fixes

what

• Remove ecr:GetAuthorizationToken from read-only access

why

• This module has included ecr:GetAuthorizationToken for years, but today AWS is rejecting it in the Repository Policy, saying "Invalid repository policy provided"

what

• Update read-only access to include
  • ecr:GetLifecyclePolicy
  • ecr:GetLifecyclePolicyPreview
  • ecr:ListTagsForResource
• Update full access to ecr:*

why

• New features (and corresponding actions) have been added, such as Lifecycle and Image Scan policies.

what

• Update to context.tf
• Update Terratest to Golang modules

why

• Standardization and interoperability
• Keep the module up to date

What

1. Fixes one of the example projects

Why

1. Examples allow consumers to copy / pasta and quickly get up and running with the module -- We want them working!

what

• Upgrade terraform-null-label to TF 0.13 compat version

why

• Support TF 0.13

references

• #51

what

• Added support for the environment attribute that has been added to terraform-null-label

why

• Because we need to bring this up to speed!

what

• Allow protecting images with a given set of tag names

why

• At Transcend, we tag images with dev, staging, and prod for deployments in addition to their SHA tags. We want to expire images, but not those actively is use.

references

• https://github.com/aws/containers-roadmap/issues/637
• https://docs.aws.amazon.com/AmazonECR/latest/userguide/lifecycle_policy_examples.html

Note: This change is fully backwards compatible

what

• Change TF version range

why

• Support iteration on modules with for_each

references

• https://sweetops.slack.com/archives/CB6GHNLG0/p1593194085340200

Fixes #51

what

Allow disabling lifecycle hooks across all created repos

why

Sometimes it's required to keep all images

PR #48. Closes #32 and #40

what

• Added ecr:Delete and SetRepositoryPolicy perms

why

• fixes #44

what

• Adds a variable to change tag mutability of images in AWS ECR.

why

• Image tag immutability is a useful feature supported by AWS ECR, but there is no way of configuring it using this Terraform module.

references

• Closes #38

what

• Added variables and outputs to create multiple repositories in AWS ECR.

1. passing a list of docker images :
   list_image = ["redis", "nginx"]

2. then get a map of image name to the repository :
   repository_url_map = {
   "redis" = "xxx.dkr.ecr.eu-west-1.amazonaws.com/redis"
   "nginx = "xxx.dkr.ecr.eu-west-1.amazonaws.com/nginx "
   }

why

• it is convenient that if we could create multiple repositories at once by passing a list of docker images as an argument since AWS ECR assuming one repo per one docker image.

what

• Add ImageScan actions to IAM roles

why

• Allow ReadOnly to call DescribeImageScanFindings and FullAccess to call DescribeImageScanFindings & StartImageScan