Clean ecr images by schedule

Author: akirasosa

README.md

@@ -36,7 +36,6 @@ sls invoke -f notifyToSlack -l
 * [Angular2 app](https://github.com/springboot-angular2-tutorial/angular2-app)
 * [Spring Boot app](https://github.com/springboot-angular2-tutorial/boot-app)
 * [Android app](https://github.com/springboot-angular2-tutorial/android-app)
-* [Server provisioning by Ansible and Packer](https://github.com/springboot-angular2-tutorial/micropost-provisionings)
 * [Infrastructure by Terraform](https://github.com/springboot-angular2-tutorial/micropost-formation)
 
 ## License

functions/clean_ecr_images.js

@@ -0,0 +1,11 @@
+const cleanEcrImages = require('./clean_ecr_images/index');
+
+module.exports.handle = (event, context, callback) => {
+
+  cleanEcrImages(event).then(() => {
+    callback(null, {});
+  }).catch(e => {
+    console.error(e);
+  });
+
+};

functions/clean_ecr_images/index.js

@@ -0,0 +1,32 @@
+const AWS = require('aws-sdk');
+const _ = require('lodash');
+
+const ecr = new AWS.ECR();
+
+module.exports = function (params) {
+  const repositoryName = params.repositoryName;
+  const age = params.age || 2;
+
+  return ecr.describeImages({repositoryName: repositoryName})
+    .promise()
+    .then(data => findImagesToClear(data.imageDetails, age))
+    .then(imagesToClear => deleteImages(imagesToClear, repositoryName))
+    .then(data => console.log(data))
+    ;
+};
+
+function findImagesToClear(images, age) {
+  return _.chain(images)
+    .sortBy('imagePushedAt')
+    .take(images.length - age)
+    .value();
+}
+
+function deleteImages(images, repositoryName) {
+  const imageIds = images.map(i => _.pick(i, 'imageDigest'));
+
+  return ecr.batchDeleteImage({
+    imageIds: imageIds,
+    repositoryName: repositoryName,
+  }).promise();
+}

package.json

@@ -2,6 +2,7 @@
   "dependencies": {
     "@slack/client": "^3.6.0",
     "dotenv": "^2.0.0",
+    "lodash": "^4.17.2",
     "serverless-plugin-write-env-vars": "^1.0.1"
   },
   "devDependencies": {

serverless.yml

@@ -5,12 +5,33 @@ provider:
   runtime: nodejs4.3
   region: ap-northeast-1
   stage: ${opt:stage, self:custom.defaultStage}
+  iamRoleStatements:
+    - Effect: "Allow"
+      Action:
+        - "ecr:DescribeImages"
+        - "ecr:BatchDeleteImage"
+      Resource: "*"
 
 functions:
   notifyToSlack:
     handler: functions/notify_to_slack.handle
     events:
       - sns: web_autoscaled
+  cleanEcrImages:
+    handler: functions/clean_ecr_images.handle
+    events:
+      - schedule:
+          rate: rate(24 hours)
+          enabled: true
+          input:
+            age: 2
+            repositoryName: 'micropost/frontend'
+      - schedule:
+          rate: rate(1 minute)
+          enabled: true
+          input:
+            age: 2
+            repositoryName: 'micropost/backend'
 
 custom:
   defaultStage: stg

yarn.lock

@@ -344,7 +344,7 @@ jsprim@^1.2.2:
     json-schema "0.2.3"
     verror "1.3.6"
 
-lodash@^4.13.1:
+lodash@^4.13.1, lodash@^4.17.2:
   version "4.17.2"
   resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.2.tgz#34a3055babe04ce42467b607d700072c7ff6bf42"