diff --git a/services/bstein-dev-home/oneoffs/portal-onboarding-e2e-test-job.yaml b/services/bstein-dev-home/oneoffs/portal-onboarding-e2e-test-job.yaml index 9923499b6..5c800385b 100644 --- a/services/bstein-dev-home/oneoffs/portal-onboarding-e2e-test-job.yaml +++ b/services/bstein-dev-home/oneoffs/portal-onboarding-e2e-test-job.yaml @@ -9,6 +9,7 @@ metadata: name: portal-onboarding-e2e-test-27 namespace: bstein-dev-home spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 0 template: diff --git a/services/comms/oneoffs/bstein-force-leave-job.yaml b/services/comms/oneoffs/bstein-force-leave-job.yaml index 7efe826e4..0caf6883d 100644 --- a/services/comms/oneoffs/bstein-force-leave-job.yaml +++ b/services/comms/oneoffs/bstein-force-leave-job.yaml @@ -9,6 +9,7 @@ metadata: name: bstein-leave-rooms-12 namespace: comms spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 0 template: diff --git a/services/comms/oneoffs/mas-admin-client-secret-ensure-job.yaml b/services/comms/oneoffs/mas-admin-client-secret-ensure-job.yaml index e1d54589c..7c7d0c87a 100644 --- a/services/comms/oneoffs/mas-admin-client-secret-ensure-job.yaml +++ b/services/comms/oneoffs/mas-admin-client-secret-ensure-job.yaml @@ -45,6 +45,7 @@ metadata: name: mas-admin-client-secret-ensure-11 namespace: comms spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 2 template: diff --git a/services/comms/oneoffs/othrys-kick-numeric-job.yaml b/services/comms/oneoffs/othrys-kick-numeric-job.yaml index e38a6bb69..da9c69ce6 100644 --- a/services/comms/oneoffs/othrys-kick-numeric-job.yaml +++ b/services/comms/oneoffs/othrys-kick-numeric-job.yaml @@ -9,6 +9,7 @@ metadata: name: othrys-kick-numeric-8 namespace: comms spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 0 template: diff --git a/services/comms/oneoffs/synapse-seeder-admin-ensure-job.yaml b/services/comms/oneoffs/synapse-seeder-admin-ensure-job.yaml index 1d8972e89..29c6ec52c 100644 --- a/services/comms/oneoffs/synapse-seeder-admin-ensure-job.yaml +++ b/services/comms/oneoffs/synapse-seeder-admin-ensure-job.yaml @@ -9,6 +9,7 @@ metadata: name: synapse-seeder-admin-ensure-9 namespace: comms spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 2 template: diff --git a/services/comms/oneoffs/synapse-signingkey-ensure-job.yaml b/services/comms/oneoffs/synapse-signingkey-ensure-job.yaml index bbc4595be..d97c59874 100644 --- a/services/comms/oneoffs/synapse-signingkey-ensure-job.yaml +++ b/services/comms/oneoffs/synapse-signingkey-ensure-job.yaml @@ -9,6 +9,7 @@ metadata: name: othrys-synapse-signingkey-ensure-7 namespace: comms spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 2 template: diff --git a/services/gitea/oneoffs/veles-feedback-acl-ensure-job.yaml b/services/gitea/oneoffs/veles-feedback-acl-ensure-job.yaml index feb8d50d0..53d946f4f 100644 --- a/services/gitea/oneoffs/veles-feedback-acl-ensure-job.yaml +++ b/services/gitea/oneoffs/veles-feedback-acl-ensure-job.yaml @@ -8,7 +8,8 @@ metadata: name: veles-feedback-acl-ensure-4 namespace: gitea spec: - suspend: false + ttlSecondsAfterFinished: 3600 + suspend: true backoffLimit: 0 template: metadata: diff --git a/services/keycloak/oneoffs/agent-oidc-secret-ensure-job.yaml b/services/keycloak/oneoffs/agent-oidc-secret-ensure-job.yaml index 2edb4b18e..9c0fead9c 100644 --- a/services/keycloak/oneoffs/agent-oidc-secret-ensure-job.yaml +++ b/services/keycloak/oneoffs/agent-oidc-secret-ensure-job.yaml @@ -1,13 +1,15 @@ # services/keycloak/oneoffs/agent-oidc-secret-ensure-job.yaml # One-off job for sso/agent-oidc-secret-ensure-1. # Purpose: ensure the agent UI oauth2-proxy OIDC client and Vault secret exist. -# Keep this completed Job around; bump the suffix if it ever needs to be rerun. +# Keep this manifest around; set suspend false and bump the suffix to rerun. apiVersion: batch/v1 kind: Job metadata: name: agent-oidc-secret-ensure-1 namespace: sso spec: + ttlSecondsAfterFinished: 3600 + suspend: true backoffLimit: 0 template: metadata: diff --git a/services/keycloak/oneoffs/ldap-federation-job.yaml b/services/keycloak/oneoffs/ldap-federation-job.yaml index 9e9a5f9b1..5cba1e764 100644 --- a/services/keycloak/oneoffs/ldap-federation-job.yaml +++ b/services/keycloak/oneoffs/ldap-federation-job.yaml @@ -9,6 +9,7 @@ metadata: name: keycloak-ldap-federation-12 namespace: sso spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 2 template: diff --git a/services/keycloak/oneoffs/metis-oidc-secret-ensure-job.yaml b/services/keycloak/oneoffs/metis-oidc-secret-ensure-job.yaml index b1f195fa7..e74f629cd 100644 --- a/services/keycloak/oneoffs/metis-oidc-secret-ensure-job.yaml +++ b/services/keycloak/oneoffs/metis-oidc-secret-ensure-job.yaml @@ -1,13 +1,15 @@ # services/keycloak/oneoffs/metis-oidc-secret-ensure-job.yaml # One-off job for sso/metis-oidc-secret-ensure-2. # Purpose: ensure the Metis oauth2-proxy OIDC client and Vault secret exist. -# Keep this completed Job around; bump the suffix if it ever needs to be rerun. +# Keep this manifest around; set suspend false and bump the suffix to rerun. apiVersion: batch/v1 kind: Job metadata: name: metis-oidc-secret-ensure-3 namespace: sso spec: + ttlSecondsAfterFinished: 3600 + suspend: true backoffLimit: 0 template: metadata: diff --git a/services/keycloak/oneoffs/portal-admin-client-secret-ensure-job.yaml b/services/keycloak/oneoffs/portal-admin-client-secret-ensure-job.yaml index b820eab4f..e8a87dc69 100644 --- a/services/keycloak/oneoffs/portal-admin-client-secret-ensure-job.yaml +++ b/services/keycloak/oneoffs/portal-admin-client-secret-ensure-job.yaml @@ -9,6 +9,7 @@ metadata: name: keycloak-portal-admin-secret-ensure-5 namespace: sso spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 0 template: diff --git a/services/keycloak/oneoffs/portal-e2e-client-job.yaml b/services/keycloak/oneoffs/portal-e2e-client-job.yaml index 274dd27b2..74f55872b 100644 --- a/services/keycloak/oneoffs/portal-e2e-client-job.yaml +++ b/services/keycloak/oneoffs/portal-e2e-client-job.yaml @@ -9,6 +9,7 @@ metadata: name: keycloak-portal-e2e-client-8 namespace: sso spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 0 template: diff --git a/services/keycloak/oneoffs/portal-e2e-execute-actions-email-test-job.yaml b/services/keycloak/oneoffs/portal-e2e-execute-actions-email-test-job.yaml index 518d839c7..836414f1f 100644 --- a/services/keycloak/oneoffs/portal-e2e-execute-actions-email-test-job.yaml +++ b/services/keycloak/oneoffs/portal-e2e-execute-actions-email-test-job.yaml @@ -9,6 +9,7 @@ metadata: name: keycloak-portal-e2e-execute-actions-email-14 namespace: sso spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 3 template: diff --git a/services/keycloak/oneoffs/portal-e2e-target-client-job.yaml b/services/keycloak/oneoffs/portal-e2e-target-client-job.yaml index 900d02905..317692448 100644 --- a/services/keycloak/oneoffs/portal-e2e-target-client-job.yaml +++ b/services/keycloak/oneoffs/portal-e2e-target-client-job.yaml @@ -9,6 +9,7 @@ metadata: name: keycloak-portal-e2e-target-7 namespace: sso spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 0 template: diff --git a/services/keycloak/oneoffs/portal-e2e-token-exchange-permissions-job.yaml b/services/keycloak/oneoffs/portal-e2e-token-exchange-permissions-job.yaml index 0d41b4761..d01f5701e 100644 --- a/services/keycloak/oneoffs/portal-e2e-token-exchange-permissions-job.yaml +++ b/services/keycloak/oneoffs/portal-e2e-token-exchange-permissions-job.yaml @@ -9,6 +9,7 @@ metadata: name: keycloak-portal-e2e-token-exchange-permissions-11 namespace: sso spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 6 template: diff --git a/services/keycloak/oneoffs/portal-groups-scope-ensure-job.yaml b/services/keycloak/oneoffs/portal-groups-scope-ensure-job.yaml index 2372c28ba..3f8ee54dd 100644 --- a/services/keycloak/oneoffs/portal-groups-scope-ensure-job.yaml +++ b/services/keycloak/oneoffs/portal-groups-scope-ensure-job.yaml @@ -1,13 +1,15 @@ # services/keycloak/oneoffs/portal-groups-scope-ensure-job.yaml # One-off job for sso/portal-groups-scope-ensure-1. # Purpose: allow bstein-dev-home to request the groups OIDC scope. -# Keep this completed Job around; bump the suffix if it ever needs to be rerun. +# Keep this manifest around; set suspend false and bump the suffix to rerun. apiVersion: batch/v1 kind: Job metadata: name: portal-groups-scope-ensure-1 namespace: sso spec: + ttlSecondsAfterFinished: 3600 + suspend: true backoffLimit: 0 template: metadata: diff --git a/services/keycloak/oneoffs/quality-oidc-secret-ensure-job.yaml b/services/keycloak/oneoffs/quality-oidc-secret-ensure-job.yaml index e0a0919c4..3c859ecf0 100644 --- a/services/keycloak/oneoffs/quality-oidc-secret-ensure-job.yaml +++ b/services/keycloak/oneoffs/quality-oidc-secret-ensure-job.yaml @@ -1,13 +1,15 @@ # services/keycloak/oneoffs/quality-oidc-secret-ensure-job.yaml # One-off job for sso/quality-oidc-secret-ensure-1. # Purpose: ensure the SonarQube oauth2-proxy OIDC client and Vault secret exist. -# Keep this completed Job around; bump the suffix if it ever needs to be rerun. +# Keep this manifest around; set suspend false and bump the suffix to rerun. apiVersion: batch/v1 kind: Job metadata: name: quality-oidc-secret-ensure-1 namespace: sso spec: + ttlSecondsAfterFinished: 3600 + suspend: true backoffLimit: 0 template: metadata: diff --git a/services/keycloak/oneoffs/realm-settings-job.yaml b/services/keycloak/oneoffs/realm-settings-job.yaml index bb8d86087..2c79eec60 100644 --- a/services/keycloak/oneoffs/realm-settings-job.yaml +++ b/services/keycloak/oneoffs/realm-settings-job.yaml @@ -9,7 +9,8 @@ metadata: name: keycloak-realm-settings-37 namespace: sso spec: - suspend: false + ttlSecondsAfterFinished: 3600 + suspend: true backoffLimit: 0 template: metadata: diff --git a/services/keycloak/oneoffs/soteria-oidc-secret-ensure-job.yaml b/services/keycloak/oneoffs/soteria-oidc-secret-ensure-job.yaml index d0616e299..d5ee0d7cc 100644 --- a/services/keycloak/oneoffs/soteria-oidc-secret-ensure-job.yaml +++ b/services/keycloak/oneoffs/soteria-oidc-secret-ensure-job.yaml @@ -1,13 +1,15 @@ # services/keycloak/oneoffs/soteria-oidc-secret-ensure-job.yaml # One-off job for sso/soteria-oidc-secret-ensure-1. # Purpose: ensure the Soteria oauth2-proxy OIDC client and Vault secret exist. -# Keep this completed Job around; bump the suffix if it ever needs to be rerun. +# Keep this manifest around; set suspend false and bump the suffix to rerun. apiVersion: batch/v1 kind: Job metadata: name: soteria-oidc-secret-ensure-1 namespace: sso spec: + ttlSecondsAfterFinished: 3600 + suspend: true backoffLimit: 0 template: metadata: diff --git a/services/keycloak/oneoffs/user-overrides-job.yaml b/services/keycloak/oneoffs/user-overrides-job.yaml index 0d52d6d31..2d366937e 100644 --- a/services/keycloak/oneoffs/user-overrides-job.yaml +++ b/services/keycloak/oneoffs/user-overrides-job.yaml @@ -9,6 +9,7 @@ metadata: name: keycloak-user-overrides-9 namespace: sso spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 0 template: diff --git a/services/mailu/oneoffs/mailu-sync-job.yaml b/services/mailu/oneoffs/mailu-sync-job.yaml index 38648acc0..f25b6eab1 100644 --- a/services/mailu/oneoffs/mailu-sync-job.yaml +++ b/services/mailu/oneoffs/mailu-sync-job.yaml @@ -9,6 +9,7 @@ metadata: name: mailu-sync-9 namespace: mailu-mailserver spec: + ttlSecondsAfterFinished: 3600 suspend: true template: metadata: diff --git a/services/maintenance/oneoffs/k3s-traefik-cleanup-job.yaml b/services/maintenance/oneoffs/k3s-traefik-cleanup-job.yaml index 2c365a950..1649ce32b 100644 --- a/services/maintenance/oneoffs/k3s-traefik-cleanup-job.yaml +++ b/services/maintenance/oneoffs/k3s-traefik-cleanup-job.yaml @@ -9,6 +9,7 @@ metadata: name: k3s-traefik-cleanup-2 namespace: maintenance spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 1 template: diff --git a/services/monitoring/oneoffs/grafana-org-bootstrap.yaml b/services/monitoring/oneoffs/grafana-org-bootstrap.yaml index 6f824cc55..b420ce94a 100644 --- a/services/monitoring/oneoffs/grafana-org-bootstrap.yaml +++ b/services/monitoring/oneoffs/grafana-org-bootstrap.yaml @@ -9,6 +9,7 @@ metadata: name: grafana-org-bootstrap-3 namespace: monitoring spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 2 template: diff --git a/services/monitoring/oneoffs/grafana-user-dedupe-job.yaml b/services/monitoring/oneoffs/grafana-user-dedupe-job.yaml index 676dec21d..6bcd69adb 100644 --- a/services/monitoring/oneoffs/grafana-user-dedupe-job.yaml +++ b/services/monitoring/oneoffs/grafana-user-dedupe-job.yaml @@ -9,6 +9,7 @@ metadata: name: grafana-user-dedupe-api-v8 namespace: monitoring spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 1 template: