• Icon: Task Task
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • None
    • None
    • None

      After ROX-27831, there will be an accumulation of unreleased Konflux images in quay.io/rhacs-eng. Additionally, containers with source, containers representing index of multiarch images, and side-artifacts such as SBOMs aren't GCd or set to expire.
      This task is to implement an automatic cleanup to reduce consumed storage and improve search performance.

      Possible approaches:

      1. Custom task in finally section adds image expiration to 13w from now via Quay API: https://docs.projectquay.io/use_quay.html#setting-tag-expirations-v2-ui. This approach does not change the image digest, thus Konflux will still be happy with it. (This won't work because Konflux creates more tags than we control.)
      2. Custom Garbage Collector tool. Runs on a schedule and deletes images built on Konflux older than 13w from quay.io repositories. 
        Might be implemented as a backup for the first approach. If we can't deploy it with ArgoCD to Konflux cluster, we'll need to find a place where to host it.
      3. Enable auto-expiration in Quay.io once it's available.

      See related KONFLUX-5863 and https://docs.google.com/document/d/1bCKSof0166b5M0e9hvgMBgAPzU9-jH-dEHDTjqrHd54/edit?tab=t.0#heading=h.wke1r9bvcelt

      This should address:

      • Product image repos under quay.io/rhacs-eng/
      • FBC repo quay.io/rhacs-eng/stackrox-operator-index
      • Tasks repo quay.io/rhacs-eng/konflux-tasks (see https://github.com/stackrox/konflux-tasks/pull/57
      • Ideally we should delete historical garbage and not just address the ongoing garbage

              Unassigned Unassigned
              rh-ee-tmartens Tom Martensen
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: