Merge commit '60aa548d2a2accaa5c36984c5b6ec4e62d7be66a'
This commit is contained in:
commit
5e2f72f79b
63
.ci/ecr_public_lifecycle.py
Executable file
63
.ci/ecr_public_lifecycle.py
Executable file
@ -0,0 +1,63 @@
|
|||||||
|
#!/usr/bin/env python3
|
||||||
|
|
||||||
|
import argparse
|
||||||
|
import boto3
|
||||||
|
|
||||||
|
parser = argparse.ArgumentParser(
|
||||||
|
description='Implement basic public ECR lifecycle policy')
|
||||||
|
parser.add_argument('--repo', dest='repositoryName', action='store', required=True,
|
||||||
|
help='Name of the public ECR repository')
|
||||||
|
parser.add_argument('--keep', dest='keep', action='store', default=10, type=int,
|
||||||
|
help='number of tagged images to keep, default 10')
|
||||||
|
parser.add_argument('--dev', dest='delete_dev', action='store_true',
|
||||||
|
help='also delete in-development images only having tags like v0.1.1-commitNr-githash')
|
||||||
|
|
||||||
|
args = parser.parse_args()
|
||||||
|
|
||||||
|
client = boto3.client('ecr-public', region_name='us-east-1')
|
||||||
|
|
||||||
|
images = client.describe_images(repositoryName=args.repositoryName)[
|
||||||
|
"imageDetails"]
|
||||||
|
|
||||||
|
untagged = []
|
||||||
|
kept = 0
|
||||||
|
|
||||||
|
# actual Image
|
||||||
|
# imageManifestMediaType: 'application/vnd.oci.image.manifest.v1+json'
|
||||||
|
# image Index
|
||||||
|
# imageManifestMediaType: 'application/vnd.oci.image.index.v1+json'
|
||||||
|
|
||||||
|
# Sort by date uploaded
|
||||||
|
for image in sorted(images, key=lambda d: d['imagePushedAt'], reverse=True):
|
||||||
|
# Remove all untagged
|
||||||
|
# if registry uses image index all actual images will be untagged anyways
|
||||||
|
if 'imageTags' not in image:
|
||||||
|
untagged.append({"imageDigest": image['imageDigest']})
|
||||||
|
# print("Delete untagged image {}".format(image["imageDigest"]))
|
||||||
|
continue
|
||||||
|
|
||||||
|
# check for dev tags
|
||||||
|
if args.delete_dev:
|
||||||
|
_delete = True
|
||||||
|
for tag in image["imageTags"]:
|
||||||
|
# Look for at least one tag NOT beign a SemVer dev tag
|
||||||
|
if "-" not in tag:
|
||||||
|
_delete = False
|
||||||
|
if _delete:
|
||||||
|
print("Deleting development image {}".format(image["imageTags"]))
|
||||||
|
untagged.append({"imageDigest": image['imageDigest']})
|
||||||
|
continue
|
||||||
|
|
||||||
|
if kept < args.keep:
|
||||||
|
kept = kept+1
|
||||||
|
print("Keeping tagged image {}".format(image["imageTags"]))
|
||||||
|
continue
|
||||||
|
else:
|
||||||
|
print("Deleting tagged image {}".format(image["imageTags"]))
|
||||||
|
untagged.append({"imageDigest": image['imageDigest']})
|
||||||
|
|
||||||
|
deleted_images = client.batch_delete_image(
|
||||||
|
repositoryName=args.repositoryName, imageIds=untagged)
|
||||||
|
|
||||||
|
if deleted_images["imageIds"]:
|
||||||
|
print("Deleted images: {}".format(deleted_images["imageIds"]))
|
@ -1,5 +1,5 @@
|
|||||||
# Parse version from latest git semver tag
|
# Parse version from latest git semver tag
|
||||||
GIT_TAG := $(shell git describe --tags --match v*.*.* 2>/dev/null || git rev-parse --short HEAD 2>/dev/null)
|
GIT_TAG ?= $(shell git describe --tags --match v*.*.* 2>/dev/null || git rev-parse --short HEAD 2>/dev/null)
|
||||||
GIT_BRANCH ?= $(shell git rev-parse --abbrev-ref HEAD 2>/dev/null | sed -e 's/[^a-zA-Z0-9]/-/g')
|
GIT_BRANCH ?= $(shell git rev-parse --abbrev-ref HEAD 2>/dev/null | sed -e 's/[^a-zA-Z0-9]/-/g')
|
||||||
|
|
||||||
TAG := $(GIT_TAG)
|
TAG := $(GIT_TAG)
|
||||||
|
Loading…
Reference in New Issue
Block a user