ECR Variant Hunter

ECR Variant Hunter is a Go script that uses the AWS SDK to find outdated ECR images and prune them. It is designed to be run as a Kubernetes CronJob.

Configuration

The script uses the following environment variables:

• AWS_REGION: The AWS region where the ECR repositories are located.
• AWS_ACCESS_KEY_ID: The AWS access key ID.
• AWS_SECRET_ACCESS_KEY: The AWS secret access key.
• ECR_REPOS_LIST: A comma-separated list of ECR repositories to scan.

Usage

go run main.go

Deployment

The script is designed to be run as a Kubernetes CronJob. The following is an example of a CronJob manifest:

apiVersion: batch/v1
kind: CronJob
metadata:
  name: ecr-variant-hunter-cron
  namespace: dev
spec:
  schedule: "0 0 * * *"
  jobTemplate:
    spec:
      template:
        spec:
          containers:
            - name: ecr-variant-hunter-cron
              image: ghcr.io/chamodshehanka/ecr-variant-hunter:latest
              imagePullPolicy: IfNotPresent
              env:
                - name: ECR_REPOS_LIST
                  value: ""
                - name: IMAGE_RETENTION_DAYS
                  value: "14"
              envFrom:
                - secretRef:
                    name: ecr-image-pull-secret
          restartPolicy: OnFailure

License

This project is licensed under the MIT License - see the LICENSE file for details.