Comments (3)
Great catch, thanks for looking into this :)
from cpho-phase2.
I was wondering if something like - "Delete artifacts older than 30 days but keep 5 most recent versions" would work?
Any suggestions @AlexCLeduc / @Stephen-ONeil ?
from cpho-phase2.
Sounds good to me.
My only immediate concern was that we may lose (easy) access to vulnerability scan reports for deleted images, which we may need to hold on to for auditing. I dug through some docs and it seems vulnerability scan reports are stored in a project-level Grafeas database where general project metadata goes. Didn't find anything about the retention time of records there, or if deleting the images cascades to delete their metadata too (unlikely?), but I did find audit logs for each vulnerability record creation, associated to the scanned image's URI. Worst case, we have those retained for our standard audit log storage period so we can answer questions like "were you potentially vulnerable to CVE xxx during time period yyy," even if we've already deleted the image 👍
from cpho-phase2.
Related Issues (20)
- Configure k8s postgres to autoscale storage capacity
- Infrastructure as Code/Data for non-k8s infrastructure HOT 1
- Review the k8s logs
- Pre-prod (dev/test) environment HOT 3
- Configure Istio HTTP health checks
- Flux GitHub commit status updates HOT 2
- logging out redirects to admin view logout
- Streamline project specific configurations as Kustomize patch HOT 1
- Dependent pods should restart when SealedSecret resources are modified. HOT 3
- Confirm functionality of the automated database backup feature, set retention policy HOT 7
- Disable username/pw login when ENABLE_LEGACY_LOGIN is false
- Use k8s ResourceQuota's HOT 1
- GKE upgrade breaks postgres cluster HOT 2
- Path based vs sub domain based routing HOT 3
- CR00001: Search Functionality
- Use IaD for Cloud Armor Security Policy
- figure out sequential-ID requirements
- API: figure out how to output text in both languages
- API: expose available years
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from cpho-phase2.