Reduce Cloud Storage / Container Registry Spending

[afrittoli]

Steps to adopt ghcr.io

• Make the list of regions configurable
• Setup auth for ghcr.io
  • Look into https://github.com/octo-sts/app as an option
• Add logic to link container images to projects
• Update runtime resource with image registry values for ghcr.io
• Do these for all projects (see list below)

Since a redirect to ghcr.io from gcr.io is not possible, we need to make images on gcr.io not publicly accessible anymore and eventually delete them, except for images used in Tekton LTS releases that are not EOL.

[afrittoli]

This will have to be done for various Tekton projects.
The set relevant for the tekton-releases project is:

• Pipeline
  • Regions configurable: Make image registry regions configurable pipeline#8246
  • Auth for ghcr.io: Support separate bucket and image reg creds pipeline#8251
  • Link images to project: Add OCI source label to images pipeline#8247
  • Update runtime resources: Move the pipeline nightly build to ghcr #2158
• Triggers
  • Changes in triggers: Migrate nightly builds and releases to ghcr.io triggers#1767
  • Changes in plumbing: Switch Triggers nightlies to ghcr.io #2206
• Chains
  • Changes in chains: Prepare release pipeline for ghcr.io chains#1220
  • Changes in plumbing: Switch chains nightly release to ghcr.io #2226
• Results
  • Changes in results: Support for release to ghcr.io results#914
  • There is no nightly build, so no changes in plumbing
• Dashboard
  • Changes in dashboard: Prepare for publishing images to GHCR dashboard#3634
  • Changes in plumbing: Move the Dashboard nightly image to GHCR #2202
• Operator
  • Changes in operator: Update the release to use ghcr.io operator#2462
  • Changes to operator (fixes): Fix wrong shell in release task operator#2466
  • Changes to plumbing: Update operator nightly builds for ghcr.io #2337, Fix ghcr.io auth in release operator#2491
• Cli
  • Currently built from the plumbing repo
  • All plumbing images will be moved to ghcr.io in Migrate Tekton multi-arch image build to ghcr.io #2223
  • Add a build in the cli repo that uses ghcr.io
• Catalog
  • Some issues depend on images on gcr.io/tekton-releases. Move those to the corresponding ghcr.io/tektoncd images Switch container images from gcr.io to ghcr.io catalog#1313

For tekton-nightly there are more projects that publish images to gcr.io, however, the egress bandwidth for those is not significant (< 10% of tekton-releases).

[afrittoli]

Migrate catalog bundles to ghcr.io: #2220