Image Cleaner (Eraser) enabled on AKS cluster

[CocoWang-wql]

With Image Cleaner, we could detect & remove all the unused & vulnerable images stored on AKS nodes.
https://docs.microsoft.com/en-us/azure/aks/image-cleaner?tabs=azure-cli

[ghost]

Hi CocoWang-wql, AKS bot here 👋
Thank you for posting on the AKS Repo, I'll do my best to get a kind human from the AKS team to assist you.

I might be just a bot, but I'm told my suggestions are normally quite good, as such:

1. If this case is urgent, please open a Support Request so that our 24/7 support team may help you faster.
2. Please abide by the AKS repo Guidelines and Code of Conduct.
3. If you're having an issue, could it be described on the AKS Troubleshooting guides or AKS Diagnostics?
4. Make sure your subscribed to the AKS Release Notes to keep up to date with all that's new on AKS.
5. Make sure there isn't a duplicate of this issue already reported. If there is, feel free to close this one and '+1' the existing issue.
6. If you have a question, do take a look at our AKS FAQ. We place the most common ones there!

[ghost]

Action required from @Azure/aks-pm

[littleccguy]

Hello,
At work, we redeploy images to our cluster daily. There seems to be a lot of stale images left around. I tried to get this working on my cluster, but I cannot enable it. All other steps in the doc worked fine up to the point of enabling. The response back was
unrecognized arguments: --enable-image-cleaner

[miwithro]

@littleccguy how are you trying to deploy image cleaner- terraform, cli etc.

If you are using cli you need to have the updated aks-preview API loaded

[CocoWang-wql]

Pls use 'az --version' to check the version and ensure you have aks-preview 0.5.96 or later CLI extension installed.
Also run the below command to ensure 'ImageCleaner' is 'registered'

az feature list -o table --query "[?contains(name, 'Microsoft.ContainerService/EnableImageCleanerPreview')].{Name:name,State:properties.state}"

[littleccguy]

Thank Coco, At what level is aks-preview installed? Subscription, resource group, or cluster?

[CocoWang-wql]

It's on your client (local, azure bash, jump box, etc).
The detailed steps are:

1. Check whether you have installed aks-preview extension

az extension list  

2. Remove the extension if you installed

az extension remove -n aks-preview

3. Install the latest version

az extension add -n aks-preview

[littleccguy]

Thank you @CocoWang-wql. I got it installed and the interval set. Is there anyway to know/set what time of day this would run?

[CocoWang-wql]

Hello @littleccguy , sorry for the delay as the message is buried. The first time of running is the installation time. The second running time is installation time + scan interval time. You can control both installation time and interval to set the desired running time.

[littleccguy]

Thank you

[mdaslamansari]

What is its expected GA timeframe?

[CocoWang-wql]

Image Cleaner is GA on 20th August.

[tommychoy]

@CocoWang-wql. Image Cleaner is now GA, but it is still required to install the aks-preview extension to enable it?

[CocoWang-wql]

We don't need the 'aks-preview extension' anymore. Did you meet any error when enabling image cleaner without aks-preview extension? @tommychoy

[tommychoy]

@CocoWang-wql , just re-ran the command in cloud shell, the aks-preview extension requirements does not pop-up anymore. Thanks.