search

zalando-stups / pierone

STUPS' Docker registry with S3 backend, immutable tags and SCM source tracking
http://docs.stups.io/en/latest/components/pierone.html
Other
57 stars 7 forks source link

Add possibility to mark images as unuseable #94

Closed lenalebt closed 6 years ago

lenalebt commented 8 years ago

Currently, there is no possibility to delete images in pierone. This is a good thing, since we force immutability. Nevertheless, sometimes there is the need to make sure an image is not used anymore, for example because it is broken or imposes security risks.

I am looking for a feature to mark images as deleted / unuseable. I would expect that one still is able to download the images somehow (because you should always be able to inspect its contents), but it should not work by default. This way, one would make machine creation with e.g. senza impossible.

hjacobs commented 8 years ago

This is also related to https://github.com/zalando-stups/pierone-cli/issues/25 (hide some artifacts in Pier One CLI output)

hjacobs commented 8 years ago

:+1: for some new flag ("active"? "deleted"?) for image tags, this is also interesting in combination with the new Clair severity information (images with security issues could be "decommissioned").

sarnowski commented 8 years ago

It must not be "docker pullable" if its "inactive".

dryewo commented 8 years ago

Who should be authorized to do this? Deactivating some important image may result in failed builds or even deployments, having an impact on production.

So far the concept looks like this:

$ pierone deactivate stups openjdk 8-30 "No longer supported"
$ pierone activate stups openjdk 8-30 "Oops, wrong image"