variables.tf

variable "repository_name" {
  type = string
}

variable "full_access_arns" {
  type        = list(string)
  description = "Specific IAM users with full access to repository"
  default     = []
}

variable "readonly_arns" {
  type        = list(string)
  description = "Specific IAM users with readonly access to repository"
  default     = []
}

variable "image_tag_mutability" {
  default = "MUTABLE"
  type    = string
}

variable "image_scanning_configuration_scan_on_push" {
  default = true
  type    = string
}

variable "protected_tag_prefixes" {
  type        = set(string)
  description = "Prefixes for protected tags"
  # v_ - published on a tag build
  # prod_ - can be manually tagged for hotfix, or manual troubleshouting
  default = ["prod_", "tag_", "v_"]
}

variable "max_repository_image_count" {
  type        = number
  description = "Max count of images in a repo (for cost of ownership reasoning)"
  default     = 100
}

locals {

  untagged_image_rule = [
    {
      rulePriority = length(var.protected_tag_prefixes) + 1
      description  = "Remove untagged images (tag shifted)"
      selection = {
        tagStatus   = "untagged"
        countType   = "imageCountMoreThan"
        countNumber = 1
      }
      action = {
        type = "expire"
      }
  }]

  remove_old_image_rule = [
    {
      rulePriority = length(var.protected_tag_prefixes) + 2
      description  = "Rotate images when reach ${var.max_repository_image_count} images stored",
      selection = {
        tagStatus   = "any"
        countType   = "imageCountMoreThan"
        countNumber = var.max_repository_image_count
      }
      action = {
        type = "expire"
      }
  }]

  protected_tag_rules = [
    for index, tagPrefix in zipmap(range(length(var.protected_tag_prefixes)), tolist(var.protected_tag_prefixes)) :
    {
      rulePriority = tonumber(index) + 1
      description  = "Protects image tags starting with substring ${tagPrefix}"
      selection = {
        tagStatus = "tagged"
        tagPrefixList = [
        tagPrefix]
        countType   = "imageCountMoreThan"
        countNumber = 999999
      }
      action = {
        type = "expire"
      }
    }
  ]
}