---
apiVersion: batch/v1
items:
- apiVersion: batch/v1
  kind: CronJob
  metadata:
    creationTimestamp: "2026-10-30T23:43:36Z"
    generation: 1
    labels:
      app.kubernetes.io/component: api
      app.kubernetes.io/name: maas-api
      app.kubernetes.io/part-of: models-as-a-service
      app.opendatahub.io/modelsasservice: "true"
      maas.opendatahub.io/tenant-name: models-as-a-service
      maas.opendatahub.io/tenant-namespace: models-as-a-service
    managedFields:
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:labels:
            f:app.kubernetes.io/component: {}
            f:app.kubernetes.io/name: {}
            f:app.kubernetes.io/part-of: {}
            f:app.opendatahub.io/modelsasservice: {}
            f:maas.opendatahub.io/tenant-name: {}
            f:maas.opendatahub.io/tenant-namespace: {}
          f:ownerReferences:
            k:{"uid":"8a730140-60af-4b45-b161-d7e97b2207a4"}: {}
        f:spec:
          f:concurrencyPolicy: {}
          f:failedJobsHistoryLimit: {}
          f:jobTemplate:
            f:metadata:
              f:labels:
                f:app.kubernetes.io/component: {}
                f:app.kubernetes.io/name: {}
                f:app.kubernetes.io/part-of: {}
            f:spec:
              f:activeDeadlineSeconds: {}
              f:backoffLimit: {}
              f:template:
                f:metadata:
                  f:labels:
                    f:app: {}
                    f:app.kubernetes.io/component: {}
                    f:app.kubernetes.io/name: {}
                    f:app.kubernetes.io/part-of: {}
                f:spec:
                  f:automountServiceAccountToken: {}
                  f:containers:
                    k:{"name":"cleanup"}:
                      .: {}
                      f:command: {}
                      f:image: {}
                      f:name: {}
                      f:resources:
                        f:limits:
                          f:cpu: {}
                          f:memory: {}
                        f:requests:
                          f:cpu: {}
                          f:memory: {}
                      f:securityContext:
                        f:allowPrivilegeEscalation: {}
                        f:capabilities:
                          f:drop: {}
                        f:readOnlyRootFilesystem: {}
                        f:runAsNonRoot: {}
                        f:seccompProfile:
                          f:type: {}
                      f:volumeMounts:
                        k:{"mountPath":"/etc/pki/maas-api"}:
                          .: {}
                          f:mountPath: {}
                          f:name: {}
                          f:readOnly: {}
                  f:restartPolicy: {}
                  f:securityContext:
                    f:runAsNonRoot: {}
                  f:serviceAccountName: {}
                  f:volumes:
                    k:{"name":"maas-api-service-ca"}:
                      .: {}
                      f:configMap:
                        f:name: {}
                      f:name: {}
          f:schedule: {}
          f:successfulJobsHistoryLimit: {}
      manager: maas-controller
      operation: Apply
      time: "2026-10-30T23:43:36Z"
    - apiVersion: batch/v1
      fieldsType: FieldsV1
      fieldsV1:
        f:status:
          f:lastScheduleTime: {}
      manager: kube-controller-manager
      operation: Update
      subresource: status
      time: "2026-10-31T00:15:00Z"
    name: maas-api-key-cleanup
    namespace: odh-ai-gateway-infra
    ownerReferences:
    - apiVersion: maas.opendatahub.io/v1alpha1
      blockOwnerDeletion: true
      controller: true
      kind: Config
      name: default
      uid: 8a730140-60af-4b45-b161-d7e97b2207a4
    resourceVersion: "45232"
    uid: f6bb297e-865f-47a5-99bf-5eef0112a97e
  spec:
    concurrencyPolicy: Forbid
    failedJobsHistoryLimit: 3
    jobTemplate:
      metadata:
        labels:
          app.kubernetes.io/component: api
          app.kubernetes.io/name: maas-api
          app.kubernetes.io/part-of: models-as-a-service
      spec:
        activeDeadlineSeconds: 60
        backoffLimit: 2
        template:
          metadata:
            labels:
              app: maas-api-cleanup
              app.kubernetes.io/component: api
              app.kubernetes.io/name: maas-api
              app.kubernetes.io/part-of: models-as-a-service
          spec:
            automountServiceAccountToken: true
            containers:
            - command:
              - /bin/sh
              - -c
              - |
                TOKEN="$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)" && \
                curl -sf --cacert /etc/pki/maas-api/service-ca.crt -X POST -H "Authorization: Bearer ${TOKEN}" https://maas-api:8443/internal/v1/api-keys/cleanup
              image: registry.redhat.io/ubi9/ubi-minimal:9.7
              imagePullPolicy: IfNotPresent
              name: cleanup
              resources:
                limits:
                  cpu: 50m
                  memory: 32Mi
                requests:
                  cpu: 10m
                  memory: 16Mi
              securityContext:
                allowPrivilegeEscalation: false
                capabilities:
                  drop:
                  - ALL
                readOnlyRootFilesystem: true
                runAsNonRoot: true
                seccompProfile:
                  type: RuntimeDefault
              terminationMessagePath: /dev/termination-log
              terminationMessagePolicy: File
              volumeMounts:
              - mountPath: /etc/pki/maas-api
                name: maas-api-service-ca
                readOnly: true
            dnsPolicy: ClusterFirst
            restartPolicy: OnFailure
            schedulerName: default-scheduler
            securityContext:
              runAsNonRoot: true
            serviceAccount: maas-api-cleanup
            serviceAccountName: maas-api-cleanup
            terminationGracePeriodSeconds: 30
            volumes:
            - configMap:
                defaultMode: 420
                name: openshift-service-ca.crt
              name: maas-api-service-ca
    schedule: '*/15 * * * *'
    successfulJobsHistoryLimit: 3
    suspend: false
  status:
    lastScheduleTime: "2026-10-31T00:15:00Z"
kind: CronJobList
metadata:
  resourceVersion: "48477"