1 files changed, 119 insertions, 0 deletions
diff --git a/app/services/projects/container_repository/cleanup_tags_base_service.rb b/app/services/projects/container_repository/cleanup_tags_base_service.rb
new file mode 100644
index 00000000000..8ea4ae4830a
--- /dev/null
+++ b/app/services/projects/container_repository/cleanup_tags_base_service.rb
@@ -0,0 +1,119 @@
+# frozen_string_literal: true
+
+module Projects
+  module ContainerRepository
+    class CleanupTagsBaseService < BaseContainerRepositoryService
+      private
+
+      def filter_out_latest!(tags)
+        tags.reject!(&:latest?)
+      end
+
+      def filter_by_name!(tags)
+        regex_delete = ::Gitlab::UntrustedRegexp.new("\\A#{name_regex_delete || name_regex}\\z")
+        regex_retain = ::Gitlab::UntrustedRegexp.new("\\A#{name_regex_keep}\\z")
+
+        tags.select! do |tag|
+          # regex_retain will override any overlapping matches by regex_delete
+          regex_delete.match?(tag.name) && !regex_retain.match?(tag.name)
+        end
+      end
+
+      # Should return [tags_to_delete, tags_to_keep]
+      def partition_by_keep_n(tags)
+        return [tags, []] unless keep_n
+
+        tags = order_by_date_desc(tags)
+
+        tags.partition.with_index { |_, index| index >= keep_n_as_integer }
+      end
+
+      # Should return [tags_to_delete, tags_to_keep]
+      def partition_by_older_than(tags)
+        return [tags, []] unless older_than
+
+        older_than_timestamp = older_than_in_seconds.ago
+
+        tags.partition do |tag|
+          timestamp = pushed_at(tag)
+
+          timestamp && timestamp < older_than_timestamp
+        end
+      end
+
+      def order_by_date_desc(tags)
+        now = DateTime.current
+        tags.sort_by! { |tag| pushed_at(tag) || now }
+            .reverse!
+      end
+
+      def delete_tags(tags)
+        return success(deleted: []) unless tags.any?
+
+        service = Projects::ContainerRepository::DeleteTagsService.new(
+          project,
+          current_user,
+          tags: tags.map(&:name),
+          container_expiration_policy: container_expiration_policy
+        )
+
+        service.execute(container_repository)
+      end
+
+      def can_destroy?
+        return true if container_expiration_policy
+
+        can?(current_user, :destroy_container_image, project)
+      end
+
+      def valid_regex?
+        %w[name_regex_delete name_regex name_regex_keep].each do |param_name|
+          regex = params[param_name]
+          ::Gitlab::UntrustedRegexp.new(regex) unless regex.blank?
+        end
+        true
+      rescue RegexpError => e
+        ::Gitlab::ErrorTracking.log_exception(e, project_id: project.id)
+        false
+      end
+
+      def older_than
+        params['older_than']
+      end
+
+      def name_regex_delete
+        params['name_regex_delete']
+      end
+
+      def name_regex
+        params['name_regex']
+      end
+
+      def name_regex_keep
+        params['name_regex_keep']
+      end
+
+      def container_expiration_policy
+        params['container_expiration_policy']
+      end
+
+      def keep_n
+        params['keep_n']
+      end
+
+      def project
+        container_repository.project
+      end
+
+      def keep_n_as_integer
+        keep_n.to_i
+      end
+
+      def older_than_in_seconds
+        strong_memoize(:older_than_in_seconds) do
+          ChronicDuration.parse(older_than).seconds
+        end
+      end
+    end
+  end
+end