resource "aws_ecr_repository" "txmgr-vault-service" {
  # checkov:skip=CKV_AWS_136: Ensure that ECR repositories are encrypted using KMS
  provider             = aws.eu-central-1
  force_delete         = null
  image_tag_mutability = "MUTABLE"
  name                 = "txmgr-vault-service"
  tags                 = {}
  tags_all             = {}
  encryption_configuration {
    encryption_type = "AES256"
    kms_key         = null
  }
  image_scanning_configuration {
    scan_on_push = true
  }
}

resource "aws_ecr_repository" "aoma-amazoncorretto" {
  # checkov:skip=CKV_AWS_136: Ensure that ECR repositories are encrypted using KMS
  provider             = aws.eu-central-1
  force_delete         = null
  image_tag_mutability = "MUTABLE"
  name                 = "aoma-amazoncorretto"
  tags                 = {}
  tags_all             = {}
  encryption_configuration {
    encryption_type = "AES256"
    kms_key         = null
  }
  image_scanning_configuration {
    scan_on_push = true
  }
}

resource "aws_ecr_repository" "ameba-ai-assistant" {
  # checkov:skip=CKV_AWS_136: Ensure that ECR repositories are encrypted using KMS
  provider             = aws.eu-central-1
  force_delete         = null
  image_tag_mutability = "MUTABLE"
  name                 = "ameba-ai-assistant"
  tags                 = {}
  tags_all             = {}
  encryption_configuration {
    encryption_type = "AES256"
    kms_key         = null
  }
  image_scanning_configuration {
    scan_on_push = true
  }
}

resource "aws_ecr_repository" "aomad-txmgr-tpc-checker" {
  # checkov:skip=CKV_AWS_136: Ensure that ECR repositories are encrypted using KMS
  provider             = aws.eu-central-1
  force_delete         = null
  image_tag_mutability = "MUTABLE"
  name                 = "aomad-txmgr-tpc-checker"
  tags                 = {}
  tags_all             = {}
  encryption_configuration {
    encryption_type = "AES256"
    kms_key         = null
  }
  image_scanning_configuration {
    scan_on_push = true
  }
}

resource "aws_ecr_repository" "aomas-txmgr-tpc-checker" {
  # checkov:skip=CKV_AWS_136: Ensure that ECR repositories are encrypted using KMS
  provider             = aws.eu-central-1
  force_delete         = null
  image_tag_mutability = "MUTABLE"
  name                 = "aomas-txmgr-tpc-checker"
  tags                 = {}
  tags_all             = {}
  encryption_configuration {
    encryption_type = "AES256"
    kms_key         = null
  }
  image_scanning_configuration {
    scan_on_push = true
  }
}

resource "aws_ecr_repository" "aoma-v2" {
  # checkov:skip=CKV_AWS_136: Ensure that ECR repositories are encrypted using KMS
  provider             = aws.eu-central-1
  force_delete         = null
  image_tag_mutability = "MUTABLE"
  name                 = "aoma-v2"
  tags                 = {}
  tags_all             = {}
  encryption_configuration {
    encryption_type = "AES256"
    kms_key         = null
  }
  image_scanning_configuration {
    scan_on_push = true
  }
}

resource "aws_ecr_repository" "amp-search-v2" {
  # checkov:skip=CKV_AWS_136: Ensure that ECR repositories are encrypted using KMS
  provider             = aws.eu-central-1
  force_delete         = null
  image_tag_mutability = "MUTABLE"
  name                 = "amp-search-v2"
  tags                 = {}
  tags_all             = {}
  encryption_configuration {
    encryption_type = "AES256"
    kms_key         = null
  }
  image_scanning_configuration {
    scan_on_push = true
  }
}

resource "aws_ecr_repository" "aoma-service-v2" {
  # checkov:skip=CKV_AWS_136: Ensure that ECR repositories are encrypted using KMS
  provider             = aws.eu-central-1
  force_delete         = null
  image_tag_mutability = "MUTABLE"
  name                 = "aoma-service-v2"
  tags                 = {}
  tags_all             = {}
  encryption_configuration {
    encryption_type = "AES256"
    kms_key         = null
  }
  image_scanning_configuration {
    scan_on_push = true
  }
}

resource "aws_ecr_repository" "aoma-api-v2" {
  # checkov:skip=CKV_AWS_136: Ensure that ECR repositories are encrypted using KMS
  provider             = aws.eu-central-1
  force_delete         = null
  image_tag_mutability = "MUTABLE"
  name                 = "aoma-api-v2"
  tags                 = {}
  tags_all             = {}
  encryption_configuration {
    encryption_type = "AES256"
    kms_key         = null
  }
  image_scanning_configuration {
    scan_on_push = true
  }
}

resource "aws_ecr_repository" "aoma-ui-service-v2" {
  # checkov:skip=CKV_AWS_136: Ensure that ECR repositories are encrypted using KMS
  provider             = aws.eu-central-1
  force_delete         = null
  image_tag_mutability = "MUTABLE"
  name                 = "aoma-ui-service-v2"
  tags                 = {}
  tags_all             = {}
  encryption_configuration {
    encryption_type = "AES256"
    kms_key         = null
  }
  image_scanning_configuration {
    scan_on_push = true
  }
}

resource "aws_ecr_repository" "remote-export-daemon-v2" {
  # checkov:skip=CKV_AWS_136: Ensure that ECR repositories are encrypted using KMS
  provider             = aws.eu-central-1
  force_delete         = null
  image_tag_mutability = "MUTABLE"
  name                 = "remote-export-daemon-v2"
  tags                 = {}
  tags_all             = {}
  encryption_configuration {
    encryption_type = "AES256"
    kms_key         = null
  }
  image_scanning_configuration {
    scan_on_push = true
  }
}

# aoma-ui-v2: Angular SPA served by nginx behind the gateway at /aoma-ui/ (ci-build.yaml pushes image
# 'aoma-ui-v2'). Follows the -v2 naming of the other SB4 repos here. Static server — no IRSA role needed.
resource "aws_ecr_repository" "aoma-ui-v2" {
  # checkov:skip=CKV_AWS_136: Ensure that ECR repositories are encrypted using KMS
  provider             = aws.eu-central-1
  force_delete         = null
  image_tag_mutability = "MUTABLE"
  name                 = "aoma-ui-v2"
  tags                 = {}
  tags_all             = {}
  encryption_configuration {
    encryption_type = "AES256"
    kms_key         = null
  }
  image_scanning_configuration {
    scan_on_push = true
  }
}