Skip to content

Auto-generated

This page is generated by terraform-docs at build time from the infra/ repo. Do not edit manually.

Vault ECR

ECR repositories for Vault container images (vault-api and vault-ingest). Images are scanned on push and use mutable tags for rolling deployments.

Lifecycle: untagged images are expired after 1 day. We deploy by retagging :latest on each release, which leaves the previous image untagged and available for short rollback before it's reaped — and keeps Inspector focused on the currently-deployed image.

Requirements

Name Version
terraform >= 1.6.0
aws ~> 5.0

Providers

Name Version
aws ~> 5.0

Modules

No modules.

Resources

Name Type
aws_ecr_lifecycle_policy.vault_api resource
aws_ecr_lifecycle_policy.vault_ingest resource
aws_ecr_repository.vault_api resource
aws_ecr_repository.vault_ingest resource

Inputs

Name Description Type Default Required
base_tags Base tags to apply to all resources map(string) {} no

Outputs

Name Description
vault_api_repository_url ECR repository URL for vault-api
vault_ingest_repository_url ECR repository URL for vault-ingest