Strip '_' character from 'title' to avoid illegal character in IAM role policy.

ecr.tf

@@ -1,7 +1,32 @@
 resource "aws_ecr_repository" "image" {
-  name = "${var.name}"
+  name = var.name
 
-  tags {
-    Project = "${local.project}"
+  tags = {
+    Project = local.project
   }
 }
+
+# Only keep last 30 images
+resource "aws_ecr_lifecycle_policy" "cleanup" {
+  repository = aws_ecr_repository.image.name
+
+  policy = <<END_OF_POLICY
+{
+   "rules": [
+      {
+        "rulePriority": 1,
+        "description": "Keep last 30 images",
+        "selection": {
+          "tagStatus": "any",
+          "countType": "imageCountMoreThan",
+          "countNumber": 30
+        },
+        "action": {
+          "type": "expire"
+        }
+      }
+    ]
+}
+END_OF_POLICY
+
+}

outputs.tf

@@ -3,17 +3,18 @@ output "ecr_host" {
 }
 
 output "ecr_repo" {
-  value = "${aws_ecr_repository.image.name}"
+  value = aws_ecr_repository.image.name
 }
 
 output "ecr_repository_url" {
-  value = "${aws_ecr_repository.image.repository_url}"
+  value = aws_ecr_repository.image.repository_url
 }
 
 output "ecr_repo_rw_policy" {
-  value = "${data.aws_iam_policy_document.allow_manage_docker_repo.json}"
+  value = data.aws_iam_policy_document.allow_manage_docker_repo.json
 }
 
 output "ecr_repo_ro_policy" {
-  value = "${data.aws_iam_policy_document.allow_fetch_images_from_repo.json}"
+  value = data.aws_iam_policy_document.allow_fetch_images_from_repo.json
 }
+

variables.tf

@@ -6,11 +6,14 @@ variable "project" {
   description = "Project tag."
 }
 
-data "aws_region" "current" {}
+data "aws_region" "current" {
+}
 
 locals {
-  name    = "${var.name}"
-  region  = "${data.aws_region.current.name}"
-  project = "${var.project}"
-  title   = "${title(replace(replace(local.name, "-", "" ), " ", ""))}"
-}
+  name    = var.name
+  region  = data.aws_region.current.name
+  project = var.project
+  title = title(
+    replace(replace(replace(local.name, "-", ""), " ", ""), "_", ""),
+  )
+}

versions.tf

@@ -0,0 +1,4 @@
+
+terraform {
+  required_version = ">= 0.12"
+}