From 5f92884182e7b90c432672a642b6b30b0629b7bc Mon Sep 17 00:00:00 2001
From: William Petit <wpetit@cadoles.com>
Date: Mon, 11 Dec 2023 10:45:22 +0100
Subject: [PATCH] feat(hydra): add janitor cronjob

---
 resources/hydra/kustomization.yaml            |  1 +
 .../resources/hydra-janitor-cronjob.yaml      | 37 +++++++++++++++++++
 2 files changed, 38 insertions(+)
 create mode 100644 resources/hydra/resources/hydra-janitor-cronjob.yaml

diff --git a/resources/hydra/kustomization.yaml b/resources/hydra/kustomization.yaml
index 779cd22..34b8a16 100644
--- a/resources/hydra/kustomization.yaml
+++ b/resources/hydra/kustomization.yaml
@@ -9,6 +9,7 @@ resources:
   - ./resources/hydra-serviceaccount.yaml
   - ./resources/hydra-migrate-job.yaml
   - ./resources/hydra-maester
+  - ./resources/hydra-janitor-cronjob.yaml
 
 secretGenerator:
   - name: hydra-secret
diff --git a/resources/hydra/resources/hydra-janitor-cronjob.yaml b/resources/hydra/resources/hydra-janitor-cronjob.yaml
new file mode 100644
index 0000000..ec5195e
--- /dev/null
+++ b/resources/hydra/resources/hydra-janitor-cronjob.yaml
@@ -0,0 +1,37 @@
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: hydra-janitor
+  labels:
+    app.kubernetes.io/name: hydra-janitor
+spec:
+  concurrencyPolicy: Forbid
+  schedule: "* * * * *"
+  jobTemplate:
+    spec:
+      template:
+        metadata:
+          labels:
+            app.kubernetes.io/name: hydra-janitor
+        spec:
+          restartPolicy: OnFailure
+          serviceAccountName: hydra-sa
+          containers:
+            - name: janitor
+              image: reg.cadoles.com/proxy_cache/oryd/hydra:v2.0.3
+              envFrom:
+              - configMapRef:
+                  name: hydra-env
+              imagePullPolicy: IfNotPresent
+              command: ["hydra"]
+              args:
+                - --read-from-env
+                - janitor
+                - --grants
+                - --requests
+                - --tokens
+                - --batch-size
+                - "100"
+                - --limit
+                - "10000"
+              resources: {}
\ No newline at end of file