fix: unblock keycloak and refresh glue checks

ci/tests/glue/config.yaml

@@ -1,7 +1,16 @@
 max_success_age_hours: 48
 allow_suspended:
+  - bstein-dev-home/vaultwarden-cred-sync
   - comms/othrys-room-reset
   - comms/pin-othrys-invite
   - comms/seed-othrys-room
   - finance/firefly-user-sync
+  - health/wger-admin-ensure
   - health/wger-user-sync
+  - mailu-mailserver/mailu-sync-nightly
+  - nextcloud/nextcloud-mail-sync
+ariadne_schedule_tasks:
+  - schedule.mailu_sync
+  - schedule.nextcloud_sync
+  - schedule.vaultwarden_sync
+  - schedule.wger_admin

ci/tests/glue/test_glue_metrics.py

@@ -1,11 +1,19 @@
 from __future__ import annotations
 
 import os
+from pathlib import Path
 
 import requests
+import yaml
 
 
 VM_URL = os.environ.get("VM_URL", "http://victoria-metrics-single-server:8428").rstrip("/")
+CONFIG_PATH = Path(__file__).with_name("config.yaml")
+
+
+def _load_config() -> dict:
+    with CONFIG_PATH.open("r", encoding="utf-8") as handle:
+        return yaml.safe_load(handle) or {}
 
 
 def _query(promql: str) -> list[dict]:
@@ -27,3 +35,14 @@ def test_glue_metrics_success_join():
     )
     series = _query(query)
     assert series, "No glue cronjob last success series found"
+
+
+def test_ariadne_schedule_metrics_present():
+    cfg = _load_config()
+    expected = cfg.get("ariadne_schedule_tasks", [])
+    if not expected:
+        return
+    series = _query("ariadne_schedule_next_run_timestamp_seconds")
+    tasks = {item.get("metric", {}).get("task") for item in series}
+    missing = [task for task in expected if task not in tasks]
+    assert not missing, f"Missing Ariadne schedule metrics for: {', '.join(missing)}"

services/jenkins/configmap-jcasc.yaml

@@ -151,7 +151,7 @@ data:
                       url('https://scm.bstein.dev/bstein/titan-iac.git')
                       credentials('gitea-pat')
                     }
-                    branches('*/feature/vault-consumption')
+                    branches('*/main')
                   }
                 }
                 scriptPath('ci/Jenkinsfile.titan-iac')

services/keycloak/realm-settings-job.yaml

@@ -2,7 +2,7 @@
 apiVersion: batch/v1
 kind: Job
 metadata:
-  name: keycloak-realm-settings-32
+  name: keycloak-realm-settings-33
   namespace: sso
 spec:
   backoffLimit: 0