ECR

data "aws_caller_identity" "current" {}

resource "aws_ecr_repository" "customer" {
  name = "customer"
  image_tag_mutability = "IMMUTABLE"

  encryption_configuration {
    encryption_type="KMS"
    kms_key = "${var.kms_id}"
  }

  image_scanning_configuration {
    scan_on_push = true
  }

  tags = {
      Name = "customer"
  }
}

resource "aws_ecr_repository" "product" {
  name = "product"
  image_tag_mutability = "IMMUTABLE"
  
  encryption_configuration {
    encryption_type="KMS"
    kms_key = "${var.kms_id}"
  }

  image_scanning_configuration {
    scan_on_push = true
  }
  
  tags = {
      Name = "product"
  }
}

resource "aws_ecr_repository" "order" {
  name = "order"
  image_tag_mutability = "IMMUTABLE"
  
  encryption_configuration {
    encryption_type="KMS"
    kms_key = "${var.kms_id}"
  }
  
  image_scanning_configuration {
    scan_on_push = true
  }
  
  tags = {
      Name = "order"
  }
}

resource "aws_ecr_replication_configuration" "ecr" {
  replication_configuration {
    rule {
      destination {
        region      = "us-east-1"
        registry_id = data.aws_caller_identity.current.account_id
      }
    }
  }
}
JSON
복사

FROM alpine
# ENV MYSQL_USER=<USERNAME>
# ENV MYSQL_PASSWORD=<PASSWORD>
# ENV MYSQL_HOST=<RDS_EP>
# ENV MYSQL_PORT=<PORT>
# ENV MYSQL_DBNAME=dev

WORKDIR /app
COPY ./customer /app/customer
RUN apk update && \
    apk add --no-cache libc6-compat libstdc++ libgcc curl openssl && \
    apk upgrade --no-cache busybox && \
    chmod +x /app/customer && \
    adduser -D -H -s /bin/sh customer
USER customer
EXPOSE 8080

CMD ["/app/customer"]
Docker
복사

FROM alpine

# ENV MYSQL_USER=<USERNAME>
# ENV MYSQL_PASSWORD=<PASSWORD>
# ENV MYSQL_HOST=<RDS_EP>
# ENV MYSQL_PORT=<PORT>
# ENV MYSQL_DBNAME=dev

WORKDIR /app
COPY ./product /app/product
RUN apk update && \
    apk add --no-cache libc6-compat libstdc++ libgcc curl openssl && \
    apk upgrade --no-cache busybox && \
    chmod +x /app/product && \
    adduser -D -H -s /bin/sh product
USER product
EXPOSE 8080

CMD ["/app/product"]
Docker
복사

FROM alpine

WORKDIR /app
COPY ./order /app/order
RUN apk update && \
    apk add --no-cache libc6-compat libstdc++ libgcc curl openssl && \
    apk upgrade --no-cache busybox && \
    chmod +x /app/order && \
    adduser -D -H -s /bin/sh order 
USER order
EXPOSE 8080

CMD ["/app/order"]
Docker
복사