feat(RELEASE-1437): archive and delete Releases (#7499)

This commit configures KubeArchive for Releases. With this,
all Releases will be archived. In addition, releases older
than 5 days will get pruned.

Signed-off-by: David Moreno García <[email protected]>

Author: davidmogar

components/kubearchive/base/kubearchive-config.yaml

@@ -14,6 +14,7 @@ spec:
         kind: Release
       archiveWhen: has(status.completionTime)
       archiveOnDelete: 'true'
+      deleteWhen: timestamp(metadata.creationTimestamp) < now() - duration("5d")
     - selector:
         apiVersion: tekton.dev/v1
         kind: PipelineRun

components/kubearchive/development/kustomization.yaml

@@ -5,6 +5,7 @@ resources:
   - ../base
   - postgresql.yaml
   - vacuum.yaml
+  - release-vacuum.yaml
   - https://github.com/kubearchive/kubearchive/releases/download/v1.3.0/kubearchive.yaml?timeout=90
 
 namespace: product-kubearchive

components/kubearchive/development/release-vacuum.yaml

@@ -0,0 +1,51 @@
+---
+apiVersion: kubearchive.org/v1
+kind: ClusterVacuumConfig
+metadata:
+  name: releases-vacuum-config
+spec:
+  namespaces:
+    ___all-namespaces___:
+      resources:
+        - apiVersion: appstudio.redhat.com/v1alpha1
+          kind: Release
+---
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  annotations:
+    # Needed if just the command is changed, otherwise the job needs to be deleted manually
+    argocd.argoproj.io/sync-options: Force=true,Replace=true
+  name: releases-vacuum
+spec:
+  schedule: "0 1 * * *"
+  jobTemplate:
+    spec:
+      template:
+        spec:
+          serviceAccountName: kubearchive-cluster-vacuum
+          containers:
+            - name: vacuum
+              image: quay.io/kubearchive/vacuum:v1.3.0
+              command: [ "/ko-app/vacuum" ]
+              args:
+                - "--type"
+                - "cluster"
+                - "--config"
+                - "releases-vacuum-config"
+              env:
+                - name: KUBEARCHIVE_NAMESPACE
+                  valueFrom:
+                    fieldRef:
+                     fieldPath: metadata.namespace
+              securityContext:
+                readOnlyRootFilesystem: true
+                runAsNonRoot: true
+              resources:
+                requests:
+                  cpu: 100m
+                  memory: 256Mi
+                limits:
+                  cpu: 100m
+                  memory: 256Mi
+          restartPolicy: Never

components/release/staging/kubearchive-config-patch.yaml

@@ -7,14 +7,6 @@ resources:
   - https://github.com/konflux-ci/release-service/config/default?ref=26f6f47a8e09862c907f5ae1e820fc319e0c2866
   - release_service_config.yaml
 
-patches:
-  - path: kubearchive-config-patch.yaml
-    target:
-      name: kubearchive
-      group: kubearchive.org
-      version: v1
-      kind: KubeArchiveConfig
-
 components:
   - ../k-components/manager-resources-patch