UNCLASSIFIED - NO CUI

Run Harbor policy in order to clean up images from within a GitLab pipeline

This template is ONLY used for feature requests. Bug reporting or pipeline enhancement issues should use the other template options for issue submission.

Description

The Harbor policy for /ironbank needs to be manually run. This should be automated. This is more of a pipeline environment feature than a modification/addition to the pipeline itself.

Purpose

Ensure that the Harbor registry does not get too full. Eases confusion surrounding which container to pull for outside devs because they do not see untagged images.

Plan

  • Create script which uses the Harbor API in order to enforce the policy that is already in place
  • Set up schedule for pipeline task to run (also, determine appropriate interval for this to run)

Possible Blockers/Challenges

Harbor API could be tricky

Acceptance Criteria

  • Scheduled pipeline runs
  • Proper documentation of what the task accomplishes
  • Validation of untagged image removal in Harbor
  • Any Harbor credentials are properly concealed