From 95bc3953d147d0eb2d13d6b69ba0bc15a9e9cc41 Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Sun, 12 Apr 2026 11:00:50 -0300
Subject: [PATCH] maintenance: wire jenkins cleanup permissions

---
 services/maintenance/ariadne-deployment.yaml |  8 ++++++++
 services/maintenance/ariadne-rbac.yaml       | 10 ++++++++++
 2 files changed, 18 insertions(+)

diff --git a/services/maintenance/ariadne-deployment.yaml b/services/maintenance/ariadne-deployment.yaml
index 348d15f1..e73a5d39 100644
--- a/services/maintenance/ariadne-deployment.yaml
+++ b/services/maintenance/ariadne-deployment.yaml
@@ -349,6 +349,14 @@ spec:
               value: "11 */6 * * *"
             - name: ARIADNE_SCHEDULE_PLATFORM_QUALITY_SUITE_PROBE
               value: "*/15 * * * *"
+            - name: JENKINS_WORKSPACE_NAMESPACE
+              value: jenkins
+            - name: JENKINS_WORKSPACE_PVC_PREFIX
+              value: pvc-workspace-
+            - name: JENKINS_WORKSPACE_CLEANUP_MIN_AGE_HOURS
+              value: "24"
+            - name: JENKINS_WORKSPACE_CLEANUP_DRY_RUN
+              value: "false"
             - name: METRICS_PATH
               value: "/metrics"
           resources:
diff --git a/services/maintenance/ariadne-rbac.yaml b/services/maintenance/ariadne-rbac.yaml
index 33620d05..cfd4e60f 100644
--- a/services/maintenance/ariadne-rbac.yaml
+++ b/services/maintenance/ariadne-rbac.yaml
@@ -16,6 +16,16 @@ rules:
   - apiGroups: [""]
     resources:
       - pods
+      - persistentvolumeclaims
+      - persistentvolumes
+    verbs:
+      - get
+      - list
+      - watch
+      - delete
+  - apiGroups: ["longhorn.io"]
+    resources:
+      - volumes
     verbs:
       - get
       - list