Use the DHI Terraform provider

The DHI Terraform provider lets you manage Docker Hardened Image mirrors and customizations as infrastructure as code.

Install and configure the provider#

Add the provider to your Terraform configuration:

terraform {
  required_providers {
    dhi = {
      source = "docker-hardened-images/dhi"
    }
  }
}

provider "dhi" {
  docker_hub_username = var.docker_username
  docker_hub_password = var.docker_password
  organization        = var.org_name
}

Instead of specifying credentials in the provider block, you can set environment variables:

You can authenticate using a personal access token (PAT) or an organization access token (OAT) in place of a password. When using an OAT, permission scopes apply:

• Read (pull) access is required to list mirrors.
• Push access is required to create or delete mirrors.

Resources#

dhi_mirror#

Manages a mirrored DHI repository in your organization. See Mirror a Docker Hardened Image repository for task-based examples.

For the full list of resource attributes, see the Terraform Registry documentation.

dhi_customization#

Manages image customizations applied to a mirrored repository. See Customize a Docker Hardened Image for task-based examples.

For the full list of resource attributes, see the Terraform Registry documentation.