chore(cassandra): park migration oneoffs

services/cassandra-auth/bootstrap-jobs/cassandra-ldap-federation-job.yaml

@@ -1,15 +1,15 @@
 # services/cassandra-auth/bootstrap-jobs/cassandra-ldap-federation-job.yaml
-# One-off job for sso/cassandra-ldap-federation-2.
+# One-off job for sso/cassandra-ldap-federation-3.
 # Purpose: attach the Cassandra Keycloak realm to the shared OpenLDAP directory.
 # Run unsuspended for migration, then suspend/replace with a new job name for future runs.
 apiVersion: batch/v1
 kind: Job
 metadata:
-  name: cassandra-ldap-federation-2
+  name: cassandra-ldap-federation-3
   namespace: sso
 spec:
   ttlSecondsAfterFinished: 3600
-  suspend: false
+  suspend: true
   backoffLimit: 2
   template:
     metadata:

services/cassandra-auth/bootstrap-jobs/cassandra-realm-ensure-job.yaml

@@ -1,14 +1,14 @@
 # services/keycloak/bootstrap-jobs/cassandra-realm-ensure-job.yaml
-# One-off job for sso/cassandra-realm-ensure-3.
+# One-off job for sso/cassandra-realm-ensure-4.
 # Purpose: create the Cassandra realm, groups, OIDC client, SMTP settings, and Vault client secret.
 # Keep suspended until Cassandra Vault paths/policies have reconciled, then unsuspend once.
 apiVersion: batch/v1
 kind: Job
 metadata:
-  name: cassandra-realm-ensure-3
+  name: cassandra-realm-ensure-4
   namespace: sso
 spec:
-  suspend: false
+  suspend: true
   backoffLimit: 0
   ttlSecondsAfterFinished: 3600
   template:

services/cassandra/migration-jobs/artifact-permissions-job.yaml

@@ -3,10 +3,10 @@
 apiVersion: batch/v1
 kind: Job
 metadata:
-  name: cassandra-artifact-permissions-1
+  name: cassandra-artifact-permissions-2
   namespace: cassandra
 spec:
-  suspend: false
+  suspend: true
   backoffLimit: 0
   ttlSecondsAfterFinished: 86400
   template: