[tanettrimas]

Summary

• Change the main-build lifecycle selector from [\"main-\", \"master-\"] to [\"main-\"].
• Update the variable description and module documentation to reflect main-only retention.

Why

ECR requires every prefix in tagPrefixList to match a tag on the same image (AND semantics). The existing selector therefore requires both a main- and a master- tag. Normal main builds do not match and are instead eligible for the catch-all expiration rule after seven days by default.

With this fix, the newest main_keep_count main-build images (three by default) are protected from the lower-priority age-based rule.

AWS evaluation rules: https://docs.aws.amazon.com/AmazonECR/latest/userguide/LifecyclePolicies.html#lp_evaluation_rules

Validation

• git diff --check passed.
• terraform fmt -check terraform/modules/ecr-repo could not run because Terraform is not installed locally.

Deployment

Apply Terraform through the usual deployment workflow to update the live ECR lifecycle policy.

[github-actions]

Terraform Plan

✅ No changes — infrastructure is up to date.

Plan output

Acquiring state lock. This may take a few moments...
aws_ssm_parameter.atlassian_org_id: Refreshing state... [id=/javabin/platform/atlassian-org-id]
aws_ssm_parameter.atlassian_api_key: Refreshing state... [id=/javabin/platform/atlassian-api-key]

No changes. Your infrastructure matches the configuration.

Terraform has compared your real infrastructure against your configuration
and found no differences, so no changes are needed.

[Kullsyreholdig]

lgtm

[Kullsyreholdig]

lgtm