Unable to Delete Artifacts marked as Immutable

[BojanZelic]

Expected behavior and actual behavior:
Using the Harbor UI when I navigate to an artifact that is 'immutable' I am unable to delete the artifact even through other components (ex retention policies) can successfully delete the artifact.

Immutable tags should mean the specific tags can't be edited/removed/duplicated/ect... but not that the artifact itself is permanent.

Steps to reproduce the problem:

1. Create Project
2. Configure Tag Immutability rules for the project
3. Upload artifact with a tag
4. Attempt to Delete the artifact through the UI

Versions:

• harbor version: v2.13.1-9384ed0e

Additional context:

[Vad1mo]

That's the whole point of immutability.
It is binding a tag to an artifact, disallowing its state to change. Deletion is a state change.

What did you have in mind here?

There is an issue & PR trying to make immutability more maintainable. Might solve your problem.
#20989

[BojanZelic]

We're mostly using immutability rules to prevent duplicate pushes of different container images to the same tag. I was mostly expecting consistent behavior between when immutable artifacts can be deleted. If the answer is that they can't be deleted at all, that's fine just should be consistent.

They can't be deleted manually via the UI

But can be deleted via retention policies or via replication?

Sounds like #20989 would change that? (so that neither can delete immutable images)?

[fwende]

I am running into the same issue, we have accumulated a quite large number of artifacts and want to clean up our instance to bring down the storage use from ~12TB.
I understand the purpose of immutable tags, but what is recommended approach to delete these artifacts? There has to be a procedure for deleting artifacts even if they have immutable tags e.g. removing the tags?

[github-actions]

This issue is being marked stale due to a period of inactivity. If this issue is still relevant, please comment or remove the stale label. Otherwise, this issue will close in 30 days.

[bupd]

this issue should be open as the development of this feature has been completed in PR #22047 and a proposal has been created in community repo goharbor/community#271 both of them are currently waiting for approval from maintainers

[reasonerjt]

@BojanZelic

They can't be deleted manually via the UI

But can be deleted via retention policies or via replication?

Current behavior(as of v2.15): if an artifact is "immutable" it can't be deleted via UI, nor API, nor retention policy.

[github-actions]

This issue is being marked stale due to a period of inactivity. If this issue is still relevant, please comment or remove the stale label. Otherwise, this issue will close in 30 days.

[github-actions]

This issue was closed because it has been stalled for 30 days with no activity. If this issue is still relevant, please re-open a new issue.