Merge pull request #242719 from sdkadam2017/cim_release

CIM_release

Author: Jill Grant

articles/service-fabric/container-image-management.md

@@ -0,0 +1,85 @@
+---
+title: Azure Service Fabric container image management
+description: How to use container image management in a service fabric cluster.
+ms.topic: conceptual
+ms.author: shkadam
+author: shkadam
+ms.service: service-fabric
+services: service-fabric
+ms.date: 06/22/2023
+---
+
+# Container Image Management 
+The activation path during Service Fabric containers deployment, handles the downloading of the container images to the VM on which the containers are running. Once the containers have been removed from the cluster and their application types have been unregistered, there's a cleanup cycle that deletes the container images. This container image cleanup works only if the container image has been hard coded in the service manifest. For existing Service Fabric runtime versions, the configurations supporting the cleanup of the container images are as follows - 
+
+## Settings
+
+ ```json
+ "fabricSettings": [
+                {
+                    "name": "Hosting",
+                    "parameters": [
+                       {
+                            "name": "PruneContainerImages", 
+                            "value": "true"
+                       },
+                       {
+                            "name": "CacheCleanupScanInterval",
+                            "value": "3600"
+                       }
+                    ]
+                }
+            ]
+ ```
+
+|Setting |Description |
+   | --- | --- |
+   |PruneContainerImage |Setting to enable or disable pruning of container images when application type is unregistered. |
+   |CacheCleanupScanInterval |Setting in seconds determining how often the cleanup cycle runs.  |
+
+## Container Image Management v2
+Starting Service Fabric version 10.0 there's a newer version of the container image deletion flow. This flow cleans up container images irrespective of how the container images may have been defined - either hard coded or parameterized during application deployment. PruneContainerImages and ContainerImageDeletionEnabled configuration are mutually exclusive and cluster upgrade validation exists to ensure one or the other is switched on but not both. The configuration supporting this feature are as follows - 
+
+### Settings
+
+```json
+ "fabricSettings": [
+                {
+                    "name": "Hosting",
+                    "parameters": [
+                       {
+                            "name": "ContainerImageDeletionEnabled", 
+                            "value": "true"
+                       },
+                       {
+                            "name": "ContainerImageCleanupInterval",
+                            "value": "3600"
+                       },
+                       {
+                            "name": "ContainerImageTTL",
+                            "value": "3600"
+                       },
+                       {
+                            "name": "ContainerImageDeletionOnAppInstanceDeletionEnabled",
+                            "value": "true"
+                       },
+                       {
+                            "name": "ContainerImagesToSkip",
+                            "value": "microsoft/windowsservercore|microsoft/nanoserver"
+                       }
+                    ]
+                }
+            ]
+ ```
+
+|Setting |Description |
+   | --- | --- |
+   |ContainerImageDeletionEnabled |Setting to enable or disable deletion of container images. |
+   |ContainerImageCleanupInterval |Time interval for cleaning up unused container images.  |
+   |ContainerImageTTL |Time to live for container images once they're eligible for removal (not referenced by containers on the VM and the application is deleted(if ContainerImageDeletionOnAppInstanceDeletionEnabled is enabled)).  |
+   |ContainerImageDeletionOnAppInstanceDeletionEnabled |Setting to enable or disable deletion of expired ttl container images only after application has been deleted as well.  |
+   |ContainerImagesToSkip |When set enables the container runtime to skip deleting images that match any of the set of regular expressions. The \| character separates each expression. Example: "mcr.microsoft.com/.+\|docker.io/library/alpine:latest" - this example matches everything prefixed with "mcr.microsoft.com/" and matches exactly "docker.io/library/alpine:latest". By default we don't delete the known Windows base images microsoft/windowsservercore or microsoft/nanoserver.  |
+
+## Next steps
+See the following article for related information:
+* [Service Fabric and containers][containers-introduction-link]

articles/service-fabric/toc.yml

@@ -178,6 +178,8 @@
         href: service-fabric-docker-compose.md
       - name: Probes
         href: probes-codepackage.md
+      - name: Container image management
+        href: container-image-management.md
     - name: Reliable Services
       items:
       - name: Reliable Services overview