ci: Add ECR container registry

main.tf

@@ -1,3 +1,7 @@
+provider "aws" {
+  region = local.region
+}
+
 locals {
   region = "us-east-1"
 
@@ -44,6 +48,13 @@ module "cluster_k8s" {
   tags = local.tags
 }
 
+module "registry" {
+  source = "./modules/registry"
+
+  region = local.region
+  tags   = local.tags
+}
+
 module "db" {
   source = "./modules/db"
 

modules/network/versions.tf

@@ -1,6 +1,4 @@
 terraform {
-  required_version = ">= 1.3"
-
   required_providers {
     aws = {
       source  = "hashicorp/aws"

modules/registry/main.tf

@@ -0,0 +1,37 @@
+provider "aws" {
+  region = local.region
+}
+
+locals {
+  region = var.region
+}
+
+data "aws_caller_identity" "current" {}
+
+module "ecr" {
+  source  = "terraform-aws-modules/ecr/aws"
+  version = "~> 1.6"
+
+  repository_name = "rms"
+
+  repository_read_write_access_arns = [data.aws_caller_identity.current.arn]
+
+  repository_lifecycle_policy = jsonencode({
+    rules = [
+      {
+        rulePriority = 1,
+        description  = "Keep last 30 images",
+        selection = {
+          tagStatus   = "any",
+          countType   = "imageCountMoreThan",
+          countNumber = 30
+        },
+        action = {
+          type = "expire"
+        }
+      }
+    ]
+  })
+
+  tags = var.tags
+}

modules/registry/outputs.tf

@@ -0,0 +1,4 @@
+output "repository_url" {
+  description = "The URL of the repository (in the form aws_account_id.dkr.ecr.region.amazonaws.com/repositoryName)."
+  value       = module.ecr.repository_url
+}

modules/registry/variables.tf

@@ -0,0 +1,10 @@
+variable "region" {
+  default     = "us-east-1"
+  description = "AWS region"
+}
+
+variable "tags" {
+  description = "Tags to set."
+  type        = map(string)
+  default     = {}
+}

modules/registry/versions.tf

@@ -0,0 +1,10 @@
+terraform {
+  required_version = ">= 1.3"
+
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = ">= 5.40"
+    }
+  }
+}

outputs.tf

@@ -23,6 +23,11 @@ output "cluster_serviceaccount_name" {
   value       = module.cluster_k8s.serviceaccount_name
 }
 
+output "repository_url" {
+  description = "The URL of the repository (in the form aws_account_id.dkr.ecr.region.amazonaws.com/repositoryName)."
+  value       = module.registry.repository_url
+}
+
 output "rds_endpoint" {
   description = "RDS instance endpoint"
   value       = module.db.rds_endpoint