forked from cloudposse/terraform-aws-ecr
-
Notifications
You must be signed in to change notification settings - Fork 0
/
variables.tf
executable file
·68 lines (58 loc) · 1.9 KB
/
variables.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
variable "use_fullname" {
type = bool
default = true
description = "Set 'true' to use `namespace-stage-name` for ecr repository name, else `name`"
}
variable "principals_full_access" {
type = list(string)
description = "Principal ARNs to provide with full access to the ECR"
default = []
}
variable "principals_readonly_access" {
type = list(string)
description = "Principal ARNs to provide with readonly access to the ECR"
default = []
}
variable "principals_lambda" {
type = list(string)
description = "Principal account IDs of Lambdas allowed to consume ECR"
default = []
}
variable "scan_images_on_push" {
type = bool
description = "Indicates whether images are scanned after being pushed to the repository (true) or not (false)"
default = true
}
variable "max_image_count" {
type = number
description = "How many Docker Image versions AWS ECR will store"
default = 500
}
variable "image_names" {
type = list(string)
default = []
description = "List of Docker local image names, used as repository names for AWS ECR "
}
variable "image_tag_mutability" {
type = string
default = "IMMUTABLE"
description = "The tag mutability setting for the repository. Must be one of: `MUTABLE` or `IMMUTABLE`"
}
variable "enable_lifecycle_policy" {
type = bool
description = "Set to false to prevent the module from adding any lifecycle policies to any repositories"
default = true
}
variable "protected_tags" {
type = set(string)
description = "Name of image tags prefixes that should not be destroyed. Useful if you tag images with names like `dev`, `staging`, and `prod`"
default = []
}
variable "encryption_configuration" {
type = object({
encryption_type = string
kms_key = any
})
description = "ECR encryption configuration"
default = null
}