New Resource: ECR Lifecycle Policy

aws/provider.go

@@ -306,6 +306,7 @@ func Provider() terraform.ResourceProvider {
  "aws_dynamodb_table": resourceAwsDynamoDbTable(),
  "aws_ebs_snapshot": resourceAwsEbsSnapshot(),
  "aws_ebs_volume": resourceAwsEbsVolume(),
+ "aws_ecr_lifecycle_policy": resourceAwsEcrLifecyclePolicy(),
  "aws_ecr_repository": resourceAwsEcrRepository(),
  "aws_ecr_repository_policy": resourceAwsEcrRepositoryPolicy(),
  "aws_ecs_cluster": resourceAwsEcsCluster(),

aws/resource_aws_ecr_lifecycle_policy.go

@@ -0,0 +1,101 @@
+package aws
+
+import (
+ "github.com/aws/aws-sdk-go/aws"
+ "github.com/aws/aws-sdk-go/aws/awserr"
+ "github.com/aws/aws-sdk-go/service/ecr"
+ "github.com/hashicorp/terraform/helper/schema"
+)
+
+func resourceAwsEcrLifecyclePolicy() *schema.Resource {
+ return &schema.Resource{
+ Create: resourceAwsEcrLifecyclePolicyCreate,
+ Read: resourceAwsEcrLifecyclePolicyRead,
+ Delete: resourceAwsEcrLifecyclePolicyDelete,
+
+ Schema: map[string]*schema.Schema{
+ "repository": &schema.Schema{
+ Type: schema.TypeString,
+ Required: true,
+ ForceNew: true,
+ },
+ "policy": &schema.Schema{
+ Type: schema.TypeString,
+ Required: true,
+ ForceNew: true,
+ ValidateFunc: validateJsonString,
+ },
+ "registry_id": &schema.Schema{
+ Type: schema.TypeString,
+ Computed: true,
+ },
+ },
+ }
+}
+
+func resourceAwsEcrLifecyclePolicyCreate(d *schema.ResourceData, meta interface{}) error {
+ conn := meta.(*AWSClient).ecrconn
+
+ input := &ecr.PutLifecyclePolicyInput{
+ RepositoryName: aws.String(d.Get("repository").(string)),
+ LifecyclePolicyText: aws.String(d.Get("policy").(string)),
+ }
+
+ resp, err := conn.PutLifecyclePolicy(input)
+ if err != nil {
+ return err
+ }
+ d.SetId(*resp.RepositoryName)
+ d.Set("registry_id", *resp.RegistryId)
+ return resourceAwsEcrLifecyclePolicyRead(d, meta)
+}
+
+func resourceAwsEcrLifecyclePolicyRead(d *schema.ResourceData, meta interface{}) error {
+ conn := meta.(*AWSClient).ecrconn
+
+ input := &ecr.GetLifecyclePolicyInput{
+ RegistryId: aws.String(d.Get("registry_id").(string)),
+ RepositoryName: aws.String(d.Get("repository").(string)),
+ }
+
+ _, err := conn.GetLifecyclePolicy(input)
+ if err != nil {
+ if aerr, ok := err.(awserr.Error); ok {
+ switch aerr.Code() {
+ case ecr.ErrCodeRepositoryNotFoundException, ecr.ErrCodeLifecyclePolicyNotFoundException:
+ d.SetId("")
+ return nil
+ default:
+ return err
+ }
+ }
+ return err
+ }
+
+ return nil
+}
+
+func resourceAwsEcrLifecyclePolicyDelete(d *schema.ResourceData, meta interface{}) error {
+ conn := meta.(*AWSClient).ecrconn
+
+ input := &ecr.DeleteLifecyclePolicyInput{
+ RegistryId: aws.String(d.Get("registry_id").(string)),
+ RepositoryName: aws.String(d.Get("repository").(string)),
+ }
+
+ _, err := conn.DeleteLifecyclePolicy(input)
+ if err != nil {
+ if aerr, ok := err.(awserr.Error); ok {
+ switch aerr.Code() {
+ case ecr.ErrCodeRepositoryNotFoundException, ecr.ErrCodeLifecyclePolicyNotFoundException:
+ d.SetId("")
+ return nil
+ default:
+ return err
+ }
+ }
+ return err
+ }
+
+ return nil
+}

aws/resource_aws_ecr_lifecycle_policy_test.go

@@ -0,0 +1,97 @@
+package aws
+
+import (
+ "fmt"
+ "testing"
+
+ "github.com/aws/aws-sdk-go/aws"
+ "github.com/aws/aws-sdk-go/aws/awserr"
+ "github.com/aws/aws-sdk-go/service/ecr"
+ "github.com/hashicorp/terraform/helper/resource"
+ "github.com/hashicorp/terraform/terraform"
+)
+
+func TestAccAWSEcrLifecyclePolicy(t *testing.T) {
+ resource.Test(t, resource.TestCase{
+ PreCheck: func() { testAccPreCheck(t) },
+ Providers: testAccProviders,
+ CheckDestroy: testAccCheckAWSEcrLifecyclePolicyDestroy,
+ Steps: []resource.TestStep{
+ {
+ Config: testAccEcrLifecyclePolicyConfig,
+ Check: resource.ComposeTestCheckFunc(
+ testAccCheckAWSEcrLifecyclePolicyExists("aws_ecr_lifecycle_policy.foo"),
+ ),
+ },
+ },
+ })
+}
+
+func testAccCheckAWSEcrLifecyclePolicyDestroy(s *terraform.State) error {
+ conn := testAccProvider.Meta().(*AWSClient).ecrconn
+
+ for _, rs := range s.RootModule().Resources {
+ if rs.Type != "aws_ecr_lifecycle_policy" {
+ continue
+ }
+
+ input := &ecr.GetLifecyclePolicyInput{
+ RegistryId: aws.String(rs.Primary.Attributes["registry_id"]),
+ RepositoryName: aws.String(rs.Primary.Attributes["repository"]),
+ }
+
+ _, err := conn.GetLifecyclePolicy(input)
+ if err != nil {
+ if aerr, ok := err.(awserr.Error); ok {
+ switch aerr.Code() {
+ case ecr.ErrCodeRepositoryNotFoundException:
+ return nil
+ default:
+ return err
+ }
+ }
+ return err
+ }
+ }
+
+ return nil
+}
+
+func testAccCheckAWSEcrLifecyclePolicyExists(name string) resource.TestCheckFunc {
+ return func(s *terraform.State) error {
+ _, ok := s.RootModule().Resources[name]
+ if !ok {
+ return fmt.Errorf("Not found: %s", name)
+ }
+
+ return nil
+ }
+}
+
+const testAccEcrLifecyclePolicyConfig = `
+resource "aws_ecr_repository" "foo" {
+ name = "bar"
+}
+resource "aws_ecr_lifecycle_policy" "foo" {
+ repository = "${aws_ecr_repository.foo.name}"
+ policy = <<EOF
+{
+ "rules": [
+ {
+ "rulePriority": 1,
+ "description": "Expire images older than 14 days",
+ "selection": {
+ "tagStatus": "untagged",
+ "countType": "sinceImagePushed",
+ "countUnit": "days",
+ "countNumber": 14
+ },
+ "action": {
+ "type": "expire"
+ }
+ }
+ ]
+}
+EOF
+}
+`

website/aws.erb

@@ -704,6 +704,10 @@
  <a href="#">ECS Resources</a>
  <ul class="nav nav-visible">
 
+ <li<%= sidebar_current("docs-aws-resource-ecr-lifecycle-policy") %>>
+ <a href="/docs/providers/aws/r/ecr_lifecycle_policy.html">aws_ecr_lifecycle_policy</a>
+ </li>
+
  <li<%= sidebar_current("docs-aws-resource-ecr-repository") %>>
  <a href="/docs/providers/aws/r/ecr_repository.html">aws_ecr_repository</a>
  </li>

website/docs/r/ecr_lifecycle_policy.html.markdown

@@ -0,0 +1,57 @@
+---
+layout: "aws"
+page_title: "AWS: aws_ecr_lifecycle_policy"
+sidebar_current: "docs-aws-resource-ecr-lifecycle-policy"
+description: |-
+ Provides an ECR Lifecycle Policy.
+---
+
+# aws_ecr_ifecycle_policy
+
+Provides an ECR lifecycle policy.
+
+## Example Usage
+
+```hcl
+resource "aws_ecr_repository" "foo" {
+ name = "bar"
+}
+
+resource "aws_ecr_lifecycle_policy" "foopolicy" {
+ repository = "${aws_ecr_repository.foo.name}"
+
+ policy = <<EOF
+{
+ "rules": [
+ {
+ "rulePriority": 1,
+ "description": "Expire images older than 14 days",
+ "selection": {
+ "tagStatus": "untagged",
+ "countType": "sinceImagePushed",
+ "countUnit": "days",
+ "countNumber": 14
+ },
+ "action": {
+ "type": "expire"
+ }
+ }
+ ]
+}
+EOF
+}
+```
+
+## Argument Reference
+
+The following arguments are supported:
+
+* `repository` - (Required) Name of the repository to apply the policy.
+* `policy` - (Required) The policy document. This is a JSON formatted string.
+
+## Attributes Reference
+
+The following attributes are exported:
+
+* `repository` - The name of the repository.
+* `registry_id` - The registry ID where the repository was created.