-
Task
-
Resolution: Unresolved
-
Undefined
-
None
-
None
-
None
-
None
-
Product / Portfolio Work
-
False
-
-
False
-
-
After ROX-27831, there will be an accumulation of unreleased Konflux images in quay.io/rhacs-eng. Additionally, containers with source, containers representing index of multiarch images, and side-artifacts such as SBOMs aren't GCd or set to expire.
This task is to implement an automatic cleanup to reduce consumed storage and improve search performance.
Possible approaches:
Custom task in finally section adds image expiration to 13w from now via Quay API: https://docs.projectquay.io/use_quay.html#setting-tag-expirations-v2-ui. This approach does not change the image digest, thus Konflux will still be happy with it.(This won't work because Konflux creates more tags than we control.)- Custom Garbage Collector tool. Runs on a schedule and deletes images built on Konflux older than 13w from quay.io repositories.
Might be implemented as a backup for the first approach. If we can't deploy it with ArgoCD to Konflux cluster, we'll need to find a place where to host it. - Enable auto-expiration in Quay.io once it's available.
See related KONFLUX-5863 and https://docs.google.com/document/d/1bCKSof0166b5M0e9hvgMBgAPzU9-jH-dEHDTjqrHd54/edit?tab=t.0#heading=h.wke1r9bvcelt
This should address:
- Product image repos under quay.io/rhacs-eng/
- FBC repo quay.io/rhacs-eng/stackrox-operator-index
- Tasks repo quay.io/rhacs-eng/konflux-tasks (see https://github.com/stackrox/konflux-tasks/pull/57)
- Ideally we should delete historical garbage and not just address the ongoing garbage