Skip to content

Commit ce857e6

Browse files
authored
Added ecr (#20)
* Added ecr * Address PR comments * Address PR * Address PR
1 parent 3f2ec13 commit ce857e6

File tree

4 files changed

+118
-0
lines changed

4 files changed

+118
-0
lines changed

aws/ecr/ecr-repo-app.tf

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
module "kops_ecr_app" {
2+
source = "git::https://github.com/cloudposse/terraform-aws-kops-ecr.git?ref=tags/0.1.0"
3+
namespace = "${var.namespace}"
4+
stage = "${var.stage}"
5+
name = "${var.repository_name}"
6+
cluster_name = "${var.region}.${var.zone_name}"
7+
8+
users = [
9+
"${module.kops_ecr_user.user_name}",
10+
]
11+
12+
tags = {
13+
Cluster = "${var.region}.${var.zone_name}"
14+
}
15+
}
16+
17+
output "kops_ecr_app_registry_id" {
18+
value = "${module.kops_ecr_app.registry_id}"
19+
description = "Registry app ID"
20+
}
21+
22+
output "kops_ecr_app_registry_url" {
23+
value = "${module.kops_ecr_app.repository_url}"
24+
description = "Registry app URL"
25+
}
26+
27+
output "kops_ecr_app_repository_name" {
28+
value = "${module.kops_ecr_app.name}"
29+
description = "Registry app name"
30+
}
31+
32+
output "kops_ecr_app_role_name" {
33+
value = "${module.kops_ecr_app.role_name}"
34+
description = "Assume Role name to get access app registry"
35+
}
36+
37+
output "kops_ecr_app_role_arn" {
38+
value = "${module.kops_ecr_app.role_arn}"
39+
description = "Assume Role ARN to get access app registry"
40+
}

aws/ecr/ecr-user.tf

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
module "kops_ecr_user" {
2+
source = "git::https://github.com/cloudposse/terraform-aws-iam-system-user.git?ref=tags/0.3.0"
3+
namespace = "${var.namespace}"
4+
stage = "${var.stage}"
5+
name = "cicd"
6+
7+
tags = {
8+
Cluster = "${var.region}.${var.zone_name}"
9+
}
10+
}
11+
12+
output "kops_ecr_user_name" {
13+
value = "${module.kops_ecr_user.user_name}"
14+
description = "Normalized IAM user name"
15+
}
16+
17+
output "kops_ecr_user_arn" {
18+
value = "${module.kops_ecr_user.user_arn}"
19+
description = "The ARN assigned by AWS for the user"
20+
}
21+
22+
output "kops_ecr_user_unique_id" {
23+
value = "${module.kops_ecr_user.user_unique_id}"
24+
description = "The user unique ID assigned by AWS"
25+
}
26+
27+
output "kops_ecr_user_access_key_id" {
28+
value = "${module.kops_ecr_user.access_key_id}"
29+
description = "The access key ID"
30+
}
31+
32+
output "kops_ecr_user_secret_access_key" {
33+
value = "${module.kops_ecr_user.secret_access_key}"
34+
description = "The secret access key. This will be written to the state file in plain-text"
35+
}

aws/ecr/main.tf

Lines changed: 39 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,39 @@
1+
terraform {
2+
required_version = ">= 0.11.2"
3+
4+
backend "s3" {}
5+
}
6+
7+
variable "aws_assume_role_arn" {
8+
type = "string"
9+
}
10+
11+
variable "namespace" {
12+
type = "string"
13+
description = "Namespace (e.g. `cp` or `cloudposse`)"
14+
}
15+
16+
variable "stage" {
17+
type = "string"
18+
description = "Stage (e.g. `prod`, `dev`, `staging`)"
19+
}
20+
21+
variable "region" {
22+
type = "string"
23+
description = "AWS region"
24+
}
25+
26+
variable "zone_name" {
27+
type = "string"
28+
description = "DNS zone name"
29+
}
30+
31+
variable "repository_name" {
32+
description = "Repository name"
33+
}
34+
35+
provider "aws" {
36+
assume_role {
37+
role_arn = "${var.aws_assume_role_arn}"
38+
}
39+
}

aws/ecr/terraform.tfvars.example

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
namespace="cp"
2+
stage="staging"
3+
region="us-west-2"
4+
zone_name="us-west-2.staging.cloudposse.co"

0 commit comments

Comments
 (0)