bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

maintenance: expire completed one-off jobs

Browse Source
This commit is contained in:
jenkins 2026-07-14 17:10:18 -03:00
parent 5aeae4f056
commit 15eb7cdba8
24 changed files with 36 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
services/bstein-dev-home/oneoffs/portal-onboarding-e2e-test-job.yaml
View File

@ -9,6 +9,7 @@ metadata:
name: portal-onboarding-e2e-test-27
namespace: bstein-dev-home
spec:
ttlSecondsAfterFinished: 3600
suspend: true
backoffLimit: 0
template:

1
services/comms/oneoffs/bstein-force-leave-job.yaml
View File

@ -9,6 +9,7 @@ metadata:
name: bstein-leave-rooms-12
namespace: comms
spec:
ttlSecondsAfterFinished: 3600
suspend: true
backoffLimit: 0
template:

1
services/comms/oneoffs/mas-admin-client-secret-ensure-job.yaml
View File

@ -45,6 +45,7 @@ metadata:
name: mas-admin-client-secret-ensure-11
namespace: comms
spec:
ttlSecondsAfterFinished: 3600
suspend: true
backoffLimit: 2
template:

1
services/comms/oneoffs/othrys-kick-numeric-job.yaml
View File

@ -9,6 +9,7 @@ metadata:
name: othrys-kick-numeric-8
namespace: comms
spec:
ttlSecondsAfterFinished: 3600
suspend: true
backoffLimit: 0
template:

1
services/comms/oneoffs/synapse-seeder-admin-ensure-job.yaml
View File

@ -9,6 +9,7 @@ metadata:
name: synapse-seeder-admin-ensure-9
namespace: comms
spec:
ttlSecondsAfterFinished: 3600
suspend: true
backoffLimit: 2
template:

1
services/comms/oneoffs/synapse-signingkey-ensure-job.yaml
View File

@ -9,6 +9,7 @@ metadata:
name: othrys-synapse-signingkey-ensure-7
namespace: comms
spec:
ttlSecondsAfterFinished: 3600
suspend: true
backoffLimit: 2
template:

3
services/gitea/oneoffs/veles-feedback-acl-ensure-job.yaml
View File

@ -8,7 +8,8 @@ metadata:
name: veles-feedback-acl-ensure-4
namespace: gitea
spec:
suspend: false
ttlSecondsAfterFinished: 3600
suspend: true
backoffLimit: 0
template:
metadata:

4
services/keycloak/oneoffs/agent-oidc-secret-ensure-job.yaml
View File

@ -1,13 +1,15 @@
# services/keycloak/oneoffs/agent-oidc-secret-ensure-job.yaml
# One-off job for sso/agent-oidc-secret-ensure-1.
# Purpose: ensure the agent UI oauth2-proxy OIDC client and Vault secret exist.
# Keep this completed Job around; bump the suffix if it ever needs to be rerun.
# Keep this manifest around; set suspend false and bump the suffix to rerun.
apiVersion: batch/v1
kind: Job
metadata:
name: agent-oidc-secret-ensure-1
namespace: sso
spec:
ttlSecondsAfterFinished: 3600
suspend: true
backoffLimit: 0
template:
metadata:

1
services/keycloak/oneoffs/ldap-federation-job.yaml
View File

@ -9,6 +9,7 @@ metadata:
name: keycloak-ldap-federation-12
namespace: sso
spec:
ttlSecondsAfterFinished: 3600
suspend: true
backoffLimit: 2
template:

4
services/keycloak/oneoffs/metis-oidc-secret-ensure-job.yaml
View File

@ -1,13 +1,15 @@
# services/keycloak/oneoffs/metis-oidc-secret-ensure-job.yaml
# One-off job for sso/metis-oidc-secret-ensure-2.
# Purpose: ensure the Metis oauth2-proxy OIDC client and Vault secret exist.
# Keep this completed Job around; bump the suffix if it ever needs to be rerun.
# Keep this manifest around; set suspend false and bump the suffix to rerun.
apiVersion: batch/v1
kind: Job
metadata:
name: metis-oidc-secret-ensure-3
namespace: sso
spec:
ttlSecondsAfterFinished: 3600
suspend: true
backoffLimit: 0
template:
metadata:

1
services/keycloak/oneoffs/portal-admin-client-secret-ensure-job.yaml
View File

@ -9,6 +9,7 @@ metadata:
name: keycloak-portal-admin-secret-ensure-5
namespace: sso
spec:
ttlSecondsAfterFinished: 3600
suspend: true
backoffLimit: 0
template:

1
services/keycloak/oneoffs/portal-e2e-client-job.yaml
View File

@ -9,6 +9,7 @@ metadata:
name: keycloak-portal-e2e-client-8
namespace: sso
spec:
ttlSecondsAfterFinished: 3600
suspend: true
backoffLimit: 0
template:

1
services/keycloak/oneoffs/portal-e2e-execute-actions-email-test-job.yaml
View File

@ -9,6 +9,7 @@ metadata:
name: keycloak-portal-e2e-execute-actions-email-14
namespace: sso
spec:
ttlSecondsAfterFinished: 3600
suspend: true
backoffLimit: 3
template:

1
services/keycloak/oneoffs/portal-e2e-target-client-job.yaml
View File

@ -9,6 +9,7 @@ metadata:
name: keycloak-portal-e2e-target-7
namespace: sso
spec:
ttlSecondsAfterFinished: 3600
suspend: true
backoffLimit: 0
template:

1
services/keycloak/oneoffs/portal-e2e-token-exchange-permissions-job.yaml
View File

@ -9,6 +9,7 @@ metadata:
name: keycloak-portal-e2e-token-exchange-permissions-11
namespace: sso
spec:
ttlSecondsAfterFinished: 3600
suspend: true
backoffLimit: 6
template:

4
services/keycloak/oneoffs/portal-groups-scope-ensure-job.yaml
View File

@ -1,13 +1,15 @@
# services/keycloak/oneoffs/portal-groups-scope-ensure-job.yaml
# One-off job for sso/portal-groups-scope-ensure-1.
# Purpose: allow bstein-dev-home to request the groups OIDC scope.
# Keep this completed Job around; bump the suffix if it ever needs to be rerun.
# Keep this manifest around; set suspend false and bump the suffix to rerun.
apiVersion: batch/v1
kind: Job
metadata:
name: portal-groups-scope-ensure-1
namespace: sso
spec:
ttlSecondsAfterFinished: 3600
suspend: true
backoffLimit: 0
template:
metadata:

4
services/keycloak/oneoffs/quality-oidc-secret-ensure-job.yaml
View File

@ -1,13 +1,15 @@
# services/keycloak/oneoffs/quality-oidc-secret-ensure-job.yaml
# One-off job for sso/quality-oidc-secret-ensure-1.
# Purpose: ensure the SonarQube oauth2-proxy OIDC client and Vault secret exist.
# Keep this completed Job around; bump the suffix if it ever needs to be rerun.
# Keep this manifest around; set suspend false and bump the suffix to rerun.
apiVersion: batch/v1
kind: Job
metadata:
name: quality-oidc-secret-ensure-1
namespace: sso
spec:
ttlSecondsAfterFinished: 3600
suspend: true
backoffLimit: 0
template:
metadata:

3
services/keycloak/oneoffs/realm-settings-job.yaml
View File

@ -9,7 +9,8 @@ metadata:
name: keycloak-realm-settings-37
namespace: sso
spec:
suspend: false
ttlSecondsAfterFinished: 3600
suspend: true
backoffLimit: 0
template:
metadata:

4
services/keycloak/oneoffs/soteria-oidc-secret-ensure-job.yaml
View File

@ -1,13 +1,15 @@
# services/keycloak/oneoffs/soteria-oidc-secret-ensure-job.yaml
# One-off job for sso/soteria-oidc-secret-ensure-1.
# Purpose: ensure the Soteria oauth2-proxy OIDC client and Vault secret exist.
# Keep this completed Job around; bump the suffix if it ever needs to be rerun.
# Keep this manifest around; set suspend false and bump the suffix to rerun.
apiVersion: batch/v1
kind: Job
metadata:
name: soteria-oidc-secret-ensure-1
namespace: sso
spec:
ttlSecondsAfterFinished: 3600
suspend: true
backoffLimit: 0
template:
metadata:

1
services/keycloak/oneoffs/user-overrides-job.yaml
View File

@ -9,6 +9,7 @@ metadata:
name: keycloak-user-overrides-9
namespace: sso
spec:
ttlSecondsAfterFinished: 3600
suspend: true
backoffLimit: 0
template:

1
services/mailu/oneoffs/mailu-sync-job.yaml
View File

@ -9,6 +9,7 @@ metadata:
name: mailu-sync-9
namespace: mailu-mailserver
spec:
ttlSecondsAfterFinished: 3600
suspend: true
template:
metadata:

1
services/maintenance/oneoffs/k3s-traefik-cleanup-job.yaml
View File

@ -9,6 +9,7 @@ metadata:
name: k3s-traefik-cleanup-2
namespace: maintenance
spec:
ttlSecondsAfterFinished: 3600
suspend: true
backoffLimit: 1
template:

1
services/monitoring/oneoffs/grafana-org-bootstrap.yaml
View File

@ -9,6 +9,7 @@ metadata:
name: grafana-org-bootstrap-3
namespace: monitoring
spec:
ttlSecondsAfterFinished: 3600
suspend: true
backoffLimit: 2
template:

1
services/monitoring/oneoffs/grafana-user-dedupe-job.yaml
View File

@ -9,6 +9,7 @@ metadata:
name: grafana-user-dedupe-api-v8
namespace: monitoring
spec:
ttlSecondsAfterFinished: 3600
suspend: true
backoffLimit: 1
template: