diff --git a/services/bstein-dev-home/oneoffs/portal-onboarding-e2e-test-job.yaml b/services/bstein-dev-home/oneoffs/portal-onboarding-e2e-test-job.yaml index 9923499b..5c800385 100644 --- a/services/bstein-dev-home/oneoffs/portal-onboarding-e2e-test-job.yaml +++ b/services/bstein-dev-home/oneoffs/portal-onboarding-e2e-test-job.yaml @@ -9,6 +9,7 @@ metadata: name: portal-onboarding-e2e-test-27 namespace: bstein-dev-home spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 0 template: diff --git a/services/comms/oneoffs/bstein-force-leave-job.yaml b/services/comms/oneoffs/bstein-force-leave-job.yaml index 7efe826e..0caf6883 100644 --- a/services/comms/oneoffs/bstein-force-leave-job.yaml +++ b/services/comms/oneoffs/bstein-force-leave-job.yaml @@ -9,6 +9,7 @@ metadata: name: bstein-leave-rooms-12 namespace: comms spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 0 template: diff --git a/services/comms/oneoffs/mas-admin-client-secret-ensure-job.yaml b/services/comms/oneoffs/mas-admin-client-secret-ensure-job.yaml index e1d54589..7c7d0c87 100644 --- a/services/comms/oneoffs/mas-admin-client-secret-ensure-job.yaml +++ b/services/comms/oneoffs/mas-admin-client-secret-ensure-job.yaml @@ -45,6 +45,7 @@ metadata: name: mas-admin-client-secret-ensure-11 namespace: comms spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 2 template: diff --git a/services/comms/oneoffs/othrys-kick-numeric-job.yaml b/services/comms/oneoffs/othrys-kick-numeric-job.yaml index e38a6bb6..da9c69ce 100644 --- a/services/comms/oneoffs/othrys-kick-numeric-job.yaml +++ b/services/comms/oneoffs/othrys-kick-numeric-job.yaml @@ -9,6 +9,7 @@ metadata: name: othrys-kick-numeric-8 namespace: comms spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 0 template: diff --git a/services/comms/oneoffs/synapse-seeder-admin-ensure-job.yaml b/services/comms/oneoffs/synapse-seeder-admin-ensure-job.yaml index 1d8972e8..29c6ec52 100644 --- a/services/comms/oneoffs/synapse-seeder-admin-ensure-job.yaml +++ b/services/comms/oneoffs/synapse-seeder-admin-ensure-job.yaml @@ -9,6 +9,7 @@ metadata: name: synapse-seeder-admin-ensure-9 namespace: comms spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 2 template: diff --git a/services/comms/oneoffs/synapse-signingkey-ensure-job.yaml b/services/comms/oneoffs/synapse-signingkey-ensure-job.yaml index bbc4595b..d97c5987 100644 --- a/services/comms/oneoffs/synapse-signingkey-ensure-job.yaml +++ b/services/comms/oneoffs/synapse-signingkey-ensure-job.yaml @@ -9,6 +9,7 @@ metadata: name: othrys-synapse-signingkey-ensure-7 namespace: comms spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 2 template: diff --git a/services/gitea/oneoffs/veles-feedback-acl-ensure-job.yaml b/services/gitea/oneoffs/veles-feedback-acl-ensure-job.yaml index feb8d50d..53d946f4 100644 --- a/services/gitea/oneoffs/veles-feedback-acl-ensure-job.yaml +++ b/services/gitea/oneoffs/veles-feedback-acl-ensure-job.yaml @@ -8,7 +8,8 @@ metadata: name: veles-feedback-acl-ensure-4 namespace: gitea spec: - suspend: false + ttlSecondsAfterFinished: 3600 + suspend: true backoffLimit: 0 template: metadata: diff --git a/services/keycloak/oneoffs/agent-oidc-secret-ensure-job.yaml b/services/keycloak/oneoffs/agent-oidc-secret-ensure-job.yaml index 2edb4b18..9c0fead9 100644 --- a/services/keycloak/oneoffs/agent-oidc-secret-ensure-job.yaml +++ b/services/keycloak/oneoffs/agent-oidc-secret-ensure-job.yaml @@ -1,13 +1,15 @@ # services/keycloak/oneoffs/agent-oidc-secret-ensure-job.yaml # One-off job for sso/agent-oidc-secret-ensure-1. # Purpose: ensure the agent UI oauth2-proxy OIDC client and Vault secret exist. -# Keep this completed Job around; bump the suffix if it ever needs to be rerun. +# Keep this manifest around; set suspend false and bump the suffix to rerun. apiVersion: batch/v1 kind: Job metadata: name: agent-oidc-secret-ensure-1 namespace: sso spec: + ttlSecondsAfterFinished: 3600 + suspend: true backoffLimit: 0 template: metadata: diff --git a/services/keycloak/oneoffs/ldap-federation-job.yaml b/services/keycloak/oneoffs/ldap-federation-job.yaml index 9e9a5f9b..5cba1e76 100644 --- a/services/keycloak/oneoffs/ldap-federation-job.yaml +++ b/services/keycloak/oneoffs/ldap-federation-job.yaml @@ -9,6 +9,7 @@ metadata: name: keycloak-ldap-federation-12 namespace: sso spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 2 template: diff --git a/services/keycloak/oneoffs/metis-oidc-secret-ensure-job.yaml b/services/keycloak/oneoffs/metis-oidc-secret-ensure-job.yaml index b1f195fa..e74f629c 100644 --- a/services/keycloak/oneoffs/metis-oidc-secret-ensure-job.yaml +++ b/services/keycloak/oneoffs/metis-oidc-secret-ensure-job.yaml @@ -1,13 +1,15 @@ # services/keycloak/oneoffs/metis-oidc-secret-ensure-job.yaml # One-off job for sso/metis-oidc-secret-ensure-2. # Purpose: ensure the Metis oauth2-proxy OIDC client and Vault secret exist. -# Keep this completed Job around; bump the suffix if it ever needs to be rerun. +# Keep this manifest around; set suspend false and bump the suffix to rerun. apiVersion: batch/v1 kind: Job metadata: name: metis-oidc-secret-ensure-3 namespace: sso spec: + ttlSecondsAfterFinished: 3600 + suspend: true backoffLimit: 0 template: metadata: diff --git a/services/keycloak/oneoffs/portal-admin-client-secret-ensure-job.yaml b/services/keycloak/oneoffs/portal-admin-client-secret-ensure-job.yaml index b820eab4..e8a87dc6 100644 --- a/services/keycloak/oneoffs/portal-admin-client-secret-ensure-job.yaml +++ b/services/keycloak/oneoffs/portal-admin-client-secret-ensure-job.yaml @@ -9,6 +9,7 @@ metadata: name: keycloak-portal-admin-secret-ensure-5 namespace: sso spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 0 template: diff --git a/services/keycloak/oneoffs/portal-e2e-client-job.yaml b/services/keycloak/oneoffs/portal-e2e-client-job.yaml index 274dd27b..74f55872 100644 --- a/services/keycloak/oneoffs/portal-e2e-client-job.yaml +++ b/services/keycloak/oneoffs/portal-e2e-client-job.yaml @@ -9,6 +9,7 @@ metadata: name: keycloak-portal-e2e-client-8 namespace: sso spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 0 template: diff --git a/services/keycloak/oneoffs/portal-e2e-execute-actions-email-test-job.yaml b/services/keycloak/oneoffs/portal-e2e-execute-actions-email-test-job.yaml index 518d839c..836414f1 100644 --- a/services/keycloak/oneoffs/portal-e2e-execute-actions-email-test-job.yaml +++ b/services/keycloak/oneoffs/portal-e2e-execute-actions-email-test-job.yaml @@ -9,6 +9,7 @@ metadata: name: keycloak-portal-e2e-execute-actions-email-14 namespace: sso spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 3 template: diff --git a/services/keycloak/oneoffs/portal-e2e-target-client-job.yaml b/services/keycloak/oneoffs/portal-e2e-target-client-job.yaml index 900d0290..31769244 100644 --- a/services/keycloak/oneoffs/portal-e2e-target-client-job.yaml +++ b/services/keycloak/oneoffs/portal-e2e-target-client-job.yaml @@ -9,6 +9,7 @@ metadata: name: keycloak-portal-e2e-target-7 namespace: sso spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 0 template: diff --git a/services/keycloak/oneoffs/portal-e2e-token-exchange-permissions-job.yaml b/services/keycloak/oneoffs/portal-e2e-token-exchange-permissions-job.yaml index 0d41b476..d01f5701 100644 --- a/services/keycloak/oneoffs/portal-e2e-token-exchange-permissions-job.yaml +++ b/services/keycloak/oneoffs/portal-e2e-token-exchange-permissions-job.yaml @@ -9,6 +9,7 @@ metadata: name: keycloak-portal-e2e-token-exchange-permissions-11 namespace: sso spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 6 template: diff --git a/services/keycloak/oneoffs/portal-groups-scope-ensure-job.yaml b/services/keycloak/oneoffs/portal-groups-scope-ensure-job.yaml index 2372c28b..3f8ee54d 100644 --- a/services/keycloak/oneoffs/portal-groups-scope-ensure-job.yaml +++ b/services/keycloak/oneoffs/portal-groups-scope-ensure-job.yaml @@ -1,13 +1,15 @@ # services/keycloak/oneoffs/portal-groups-scope-ensure-job.yaml # One-off job for sso/portal-groups-scope-ensure-1. # Purpose: allow bstein-dev-home to request the groups OIDC scope. -# Keep this completed Job around; bump the suffix if it ever needs to be rerun. +# Keep this manifest around; set suspend false and bump the suffix to rerun. apiVersion: batch/v1 kind: Job metadata: name: portal-groups-scope-ensure-1 namespace: sso spec: + ttlSecondsAfterFinished: 3600 + suspend: true backoffLimit: 0 template: metadata: diff --git a/services/keycloak/oneoffs/quality-oidc-secret-ensure-job.yaml b/services/keycloak/oneoffs/quality-oidc-secret-ensure-job.yaml index e0a0919c..3c859ecf 100644 --- a/services/keycloak/oneoffs/quality-oidc-secret-ensure-job.yaml +++ b/services/keycloak/oneoffs/quality-oidc-secret-ensure-job.yaml @@ -1,13 +1,15 @@ # services/keycloak/oneoffs/quality-oidc-secret-ensure-job.yaml # One-off job for sso/quality-oidc-secret-ensure-1. # Purpose: ensure the SonarQube oauth2-proxy OIDC client and Vault secret exist. -# Keep this completed Job around; bump the suffix if it ever needs to be rerun. +# Keep this manifest around; set suspend false and bump the suffix to rerun. apiVersion: batch/v1 kind: Job metadata: name: quality-oidc-secret-ensure-1 namespace: sso spec: + ttlSecondsAfterFinished: 3600 + suspend: true backoffLimit: 0 template: metadata: diff --git a/services/keycloak/oneoffs/realm-settings-job.yaml b/services/keycloak/oneoffs/realm-settings-job.yaml index bb8d8608..2c79eec6 100644 --- a/services/keycloak/oneoffs/realm-settings-job.yaml +++ b/services/keycloak/oneoffs/realm-settings-job.yaml @@ -9,7 +9,8 @@ metadata: name: keycloak-realm-settings-37 namespace: sso spec: - suspend: false + ttlSecondsAfterFinished: 3600 + suspend: true backoffLimit: 0 template: metadata: diff --git a/services/keycloak/oneoffs/soteria-oidc-secret-ensure-job.yaml b/services/keycloak/oneoffs/soteria-oidc-secret-ensure-job.yaml index d0616e29..d5ee0d7c 100644 --- a/services/keycloak/oneoffs/soteria-oidc-secret-ensure-job.yaml +++ b/services/keycloak/oneoffs/soteria-oidc-secret-ensure-job.yaml @@ -1,13 +1,15 @@ # services/keycloak/oneoffs/soteria-oidc-secret-ensure-job.yaml # One-off job for sso/soteria-oidc-secret-ensure-1. # Purpose: ensure the Soteria oauth2-proxy OIDC client and Vault secret exist. -# Keep this completed Job around; bump the suffix if it ever needs to be rerun. +# Keep this manifest around; set suspend false and bump the suffix to rerun. apiVersion: batch/v1 kind: Job metadata: name: soteria-oidc-secret-ensure-1 namespace: sso spec: + ttlSecondsAfterFinished: 3600 + suspend: true backoffLimit: 0 template: metadata: diff --git a/services/keycloak/oneoffs/user-overrides-job.yaml b/services/keycloak/oneoffs/user-overrides-job.yaml index 0d52d6d3..2d366937 100644 --- a/services/keycloak/oneoffs/user-overrides-job.yaml +++ b/services/keycloak/oneoffs/user-overrides-job.yaml @@ -9,6 +9,7 @@ metadata: name: keycloak-user-overrides-9 namespace: sso spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 0 template: diff --git a/services/mailu/oneoffs/mailu-sync-job.yaml b/services/mailu/oneoffs/mailu-sync-job.yaml index 38648acc..f25b6eab 100644 --- a/services/mailu/oneoffs/mailu-sync-job.yaml +++ b/services/mailu/oneoffs/mailu-sync-job.yaml @@ -9,6 +9,7 @@ metadata: name: mailu-sync-9 namespace: mailu-mailserver spec: + ttlSecondsAfterFinished: 3600 suspend: true template: metadata: diff --git a/services/maintenance/oneoffs/k3s-traefik-cleanup-job.yaml b/services/maintenance/oneoffs/k3s-traefik-cleanup-job.yaml index 2c365a95..1649ce32 100644 --- a/services/maintenance/oneoffs/k3s-traefik-cleanup-job.yaml +++ b/services/maintenance/oneoffs/k3s-traefik-cleanup-job.yaml @@ -9,6 +9,7 @@ metadata: name: k3s-traefik-cleanup-2 namespace: maintenance spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 1 template: diff --git a/services/monitoring/oneoffs/grafana-org-bootstrap.yaml b/services/monitoring/oneoffs/grafana-org-bootstrap.yaml index 6f824cc5..b420ce94 100644 --- a/services/monitoring/oneoffs/grafana-org-bootstrap.yaml +++ b/services/monitoring/oneoffs/grafana-org-bootstrap.yaml @@ -9,6 +9,7 @@ metadata: name: grafana-org-bootstrap-3 namespace: monitoring spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 2 template: diff --git a/services/monitoring/oneoffs/grafana-user-dedupe-job.yaml b/services/monitoring/oneoffs/grafana-user-dedupe-job.yaml index 676dec21..6bcd69ad 100644 --- a/services/monitoring/oneoffs/grafana-user-dedupe-job.yaml +++ b/services/monitoring/oneoffs/grafana-user-dedupe-job.yaml @@ -9,6 +9,7 @@ metadata: name: grafana-user-dedupe-api-v8 namespace: monitoring spec: + ttlSecondsAfterFinished: 3600 suspend: true backoffLimit: 1 template: