How to clean untagged artifacts only?

[hongbo-miao]

I am using Harbor 2.12.2

I am trying to clean untagged artifacts only. Because when a new latest artifact published, the old one will become untagged.

Based on https://registry.terraform.io/providers/goharbor/harbor/latest/docs/resources/retention_policy

Experiment 1

I initially tired this, once applied, but then the Policy page in Harbor project shows loading all time.

resource "harbor_retention_policy" "clean_untagged_artifacts" {
  scope    = var.project_id
  schedule = "Daily"
  rule {
    n_days_since_last_pull = 7
    untagged_artifacts     = true
  }
}

Experiment 2

Then I am thinking tag_matching = "**" means all tags will cleaned.
So maybe I should use tag_excluding, meaning excluding all tags. And untagged_artifacts = true helps only clean untagged artifacts.

resource "harbor_retention_policy" "clean_untagged_artifacts" {
  scope    = var.project_id
  schedule = "Daily"
  rule {
    n_days_since_last_pull = 7
    repo_matching          = "**"
    tag_excluding          = "**"
    untagged_artifacts     = true
  }
}

However, after one day, all artifacts got cleaned. How to I clean untagged artifacts only? Thanks!

[stonezdj]

It is not in tag retention policy, it is in the cleanup

[hongbo-miao]

Thanks @stonezdj for the info, I can confirm the proper way would be
https://registry.terraform.io/providers/goharbor/harbor/latest/docs/resources/garbage_collection

resource "harbor_garbage_collection" "main" {
  schedule        = "weekly"
  delete_untagged = true
  workers         = 1
}