chore: expire webhook cert generation Jobs

Kong · Jun 18, 2024 · 3657575 · 3657575
1 parent 61bc151
commit 3657575
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -52,6 +52,7 @@
   [#259](https://github.com/Kong/gateway-operator/pull/259)
 - Default version of `ControlPlane` is bumped to 3.2.0
   [#327](https://github.com/Kong/gateway-operator/pull/327)
+- Webhook certificate Jobs now set `TTLSecondsAfterFinished=60` to clean up after they have finished.
 
 ### Fixes
 

diff --git a/pkg/utils/kubernetes/resources/jobs.go b/pkg/utils/kubernetes/resources/jobs.go
@@ -75,6 +75,7 @@ func newWebhookCertificateConfigJobCommon(namespace, serviceAccountName string,
 			Namespace: namespace,
 		},
 		Spec: batchv1.JobSpec{
+			TTLSecondsAfterFinished: lo.ToPtr(int32(60)),
 			Template: corev1.PodTemplateSpec{
 				Spec: corev1.PodSpec{
 					RestartPolicy:      corev1.RestartPolicyOnFailure,