fix: add resources limit and quote schedule

Author: HeloiseJoffe

diracx/templates/diracx/cleanup-authdb/_cleanup-authdb.sh.tpl

@@ -2,4 +2,4 @@
 set -euo pipefail
 IFS=$'\n\t'
 
-python -m diracx.logic cleanup-authdb --db-url "${DIRACX_DB_URL_AUTHDB}"
+python -m diracx.logic cleanup-authdb

diracx/templates/diracx/cleanup-authdb/cronjob.yaml

@@ -20,7 +20,7 @@ metadata:
   name: {{ template "cleanupAuthDB.fullname" . }}
   namespace: {{ .Release.Namespace }}
 spec:
-  schedule: {{ $.Values.cleanupAuthDB.schedule }}
+  schedule: {{ $.Values.cleanupAuthDB.schedule | quote }}
   jobTemplate:
     spec:
       template:
@@ -45,6 +45,8 @@ spec:
                   subPath: jwks.json
                 - name: scripts
                   mountPath: /scripts
+              resources:
+                {{- toYaml .Values.cleanupAuthDB.resources | nindent 16 }}
           volumes:
           - name: keystore
             secret:

diracx/values.yaml

@@ -155,7 +155,7 @@ diracx:
     DIRACX_SERVICE_AUTH_ALLOWED_REDIRECTS: '["http://anything:8000/docs/oauth2-redirect"]'
 
     # -- Tune the AuthDB cleanup cronjob retention periods
-    # -- DIRACX_SERVICE_AUTH_REVOKED_REFRESH_TOKEN_RETENTION_DAYS: <days>
+    # -- DIRACX_SERVICE_AUTH_REVOKED_REFRESH_TOKEN_RETENTION_MINUTES: <minutes>
     # -- DIRACX_SERVICE_AUTH_COMPLETED_FLOW_RETENTION_MINUTES: <minutes>
 
     # -- legacy exchange key for DIRAC legacy (see https://github.com/DIRACGrid/diracx/blob/7f766158a674fde0eed011cd2745d359e507f846/diracx-routers/src/diracx/routers/auth/token.py#L264)

k3s/README.md

@@ -263,7 +263,6 @@ git add default.yml
 git commit -m 'Initial config'
 ```
 
-
 ## Post-install tips
 
 In case you would like to make us of the services installed (e.g. MySQL or OpenSearch) from outisde the kubernetes cluster, there are different solutions and configurations to make. LoadBalancer, NodePort, or Ingress are the options. One of these would need to be set out.