aws-lambda-ecr-cleaner's Introduction

AWS lambda ecr cleaner

An AWS Lambda Function to clean ecr repos automatically.

Requirements

node.js ( AWS Lambda working version is 4.3.2 )

Installation

Clone this repository and install dependencies:

$ git clone [email protected]:Puemos/aws-lambda-ecr-cleaner.git
$ cd aws-lambda-ecr-cleaner
$ npm install

Packaging

AWS Lambda accepts zip archived package. To create it, run npm run package task simply.

$ npm run package --packageDirectory=./dist

It will create aws-lambda-ecr-cleaner.zip at project root. You can upload it.

Configuration

Hardcode the configuration on config.json

Use AWS Environment Variables

Name	Type	Description	Default
DRY_RUN	Bool	Run without delete	true
API_DELAY	Integer	Delay between calls	500
REPO_AGE_THRESHOLD	Integer	Image age threshold	90
REPO_FIRST_N_THRESHOLD	Integer	How many images from each group to keep	3
AWS_ACCOUNT_ID	Integer	The account id number
REGION	String	ECR and ECS region.	us-east-1
REPO_TO_CLEAN	String / Array String	One repo name or an array of repos name to clean
ENVS	Array String	Group by these strings and one for each unique tag

Lambda IAM Role

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "LambdaBasicExecution",
            "Effect": "Allow",
            "Action": [
                "logs:CreateLogGroup",
                "logs:CreateLogStream",
                "logs:PutLogEvents"
            ],
            "Resource": "*"
        },
        {
            "Action": [
                "ecr:BatchDeleteImage",
                "ecr:ListImages",
                "ecr:DescribeImages",
            ],
            "Effect": "Allow",
            "Resource": "*"
        },
        {
            "Action": [
                "ecs:DescribeTaskDefinition",
                "ecs:ListTaskDefinitions"
            ],
            "Effect": "Allow",
            "Resource": "*"
        }
    ]
}

For a more restrictive policy, you can specify the resources. See ARNs and Namespace docs for complete list.

ECR Resources:
- "arn:aws:ecr:region:account:repository/my-repo"
- "arn:aws:ecr:region:account:repository/develop-*"
ECS Resources
- "arn:aws:ecs:region:account-id:task-definition/task-definition-family-name:task-definition-revision-number"
- "arn:aws:ecs:region:account-id:task-definition/task-definition-family-name:*"
- "arn:aws:ecs:region:account-id:task-definition/*"

License

MIT License @ Shy Alter

Credits

aws-lambda-ecr-cleaner's People

Contributors

Stargazers

Watchers

aws-lambda-ecr-cleaner's Issues

cannot read property '0' of undefined

Hi,
many thanks for your project. I use it for last couple of weeks. This is more request for help than bug report....

Since 4th of Jan 2017 your aws-lambda-ecr-cleaner starts failing on error
{"errorMessage":"Cannot read property '0' of undefined","errorType":"TypeError","stackTrace":["/var/task/lib/index.js:152:37","Array.map (native)","/var/task/lib/index.js:149:18","tryCatcher (/var/task/node_modules/bluebird/js/release/util.js:16:23)","Promise._settlePromiseFromHandler (/var/task/node_modules/bluebird/js/release/promise.js:510:31)","Promise._settlePromise (/var/task/node_modules/bluebird/js/release/promise.js:567:18)","Promise._settlePromise0 (/var/task/node_modules/bluebird/js/release/promise.js:612:10)","Promise._settlePromises (/var/task/node_modules/bluebird/js/release/promise.js:691:18)","Promise._fulfill (/var/task/node_modules/bluebird/js/release/promise.js:636:18)","Response.<anonymous> (/var/task/node_modules/bluebird/js/release/nodeback.js:42:21)","Request.<anonymous> (/var/task/node_modules/aws-sdk/lib/request.js:355:18)","Request.callListeners (/var/task/node_modules/aws-sdk/lib/sequential_executor.js:105:20)","Request.emit (/var/task/node_modules/aws-sdk/lib/sequential_executor.js:77:10)","Request.emit (/var/task/node_modules/aws-sdk/lib/request.js:668:14)","Request.transition (/var/task/node_modules/aws-sdk/lib/request.js:22:10)","AcceptorStateMachine.runTo (/var/task/node_modules/aws-sdk/lib/state_machine.js:14:12)"]}

Do you have any idea what could be wrong? I'm not aware of any changes made in code nor in AWS...Do you also use this project? can you try to run it today to see if it works for you or not?

Thanks
Martin

"Invalid parameter at 'imageIds' failed to satisfy constraint: 'Member must have length greater than or equal to 1'"

FYI, trek10inc/ecr-cleaner#8,

Would you please fix this issue.

Thanks.

puemos / aws-lambda-ecr-cleaner Goto Github PK