API for bulk removal of tags at the group level
Problem to solve
The GitLab Container Registry allows developers to build, push and share Docker images/tags using the Docker client and/or GitLab CI/CD.
For organizations that build many images across many projects, it is important to regularly remove old, unused images and tags. Currently we allow users to remove tags at the project level in the container registry user interface or using the Container Registry API.
For organizations with many projects or many groups and sub-groups, removing tags at the project level is inefficient and error prone.
Add a new API to allow for bulk removal of tags at the group level.
Permissions and Security
We will follow the same permissions as bulk deletion at the project level, which is to limit this destructive API call to maintainers and administrators.
- As this creates the potential for deleting all of a groups images/tags, we will need to test that only users with maintainer/admin privileges can use this endpoint.
What does success look like, and how can we measure that?
Success can be measured in two ways.
- The first is the adoption and usage of the container registry API. For that we should track the
number of API calls for bulk removal of images at the group levelWe will compare this with other API usage.
- The second is in our ability to create useful expiration and retention policies.