diff --git a/services/keycloak/bootstrap-jobs/metis-ssh-keys-secret-ensure-job.yaml b/services/keycloak/bootstrap-jobs/metis-ssh-keys-secret-ensure-job.yaml
index b56da25f..326c32d5 100644
--- a/services/keycloak/bootstrap-jobs/metis-ssh-keys-secret-ensure-job.yaml
+++ b/services/keycloak/bootstrap-jobs/metis-ssh-keys-secret-ensure-job.yaml
@@ -10,7 +10,7 @@ metadata:
   namespace: sso
 spec:
   backoffLimit: 0
-  ttlSecondsAfterFinished: 3600
+  # Retain completion so Flux does not repeat bootstrap every hour.
   template:
     metadata:
       annotations: