sandbox-cleanup-cj.yml

apiVersion: batch/v1
kind: CronJob
metadata:
  name: sandbox-cleanup
spec:
  schedule: "0 12 * * 6"
  successfulJobsHistoryLimit: 3  # Remove after successful completion
  failedJobsHistoryLimit: 1  # Retain failed so that we see it
  concurrencyPolicy: Forbid
  jobTemplate:
    spec:
      template:
        spec:
          restartPolicy: OnFailure
          serviceAccountName: sandbox-cleanup
          containers:
          - name: sandbox-cleanup
            image: image-registry.openshift-image-registry.svc:5000/openshift/cli
            env:
              - name: OBJECTS
                value: all,cm,secrets,pvc
            command:
              - bash
              - -c
              - |
                #!/bin/sh

                get_most_api_resources() {
                  oc api-resources \
                    --verbs=list \
                    --namespaced \
                    -o name | \
                      grep -v "events.events.k8s.io" | \
                      grep -v "events" | \
                      grep -v "packagemanifests" | \
                      grep -v "operator.openshift.io" | \
                      grep -v "operators.coreos.com" | \
                      grep -v "authorization.openshift.io" | \
                      grep -v "serviceaccount" | \
                      grep -v "rbac" | \
                      sort | uniq
                }

                oc_delete_most() {
                NAMESPACE=${1:-sandbox}
                echo ${NAMESPACE}
                sleep 3

                for i in $(get_most_api_resources)
                do
                  echo "Resource:" $i
                  oc -n ${NAMESPACE} \
                    delete ${i} \
                    --all
                done
                }
                oc_delete_most sandbox