sandbox-cleanup-cj.yml

apiVersion: batch/v1
kind: CronJob
metadata:
  name: sandbox-cleanup
spec:
  schedule: "0 12 * * 6"
  successfulJobsHistoryLimit: 3  # Remove after successful completion
  failedJobsHistoryLimit: 1  # Retain failed so that we see it
  concurrencyPolicy: Forbid
  jobTemplate:
    spec:
      template:
        spec:
          restartPolicy: OnFailure
          serviceAccountName: sandbox-cleanup
          containers:
          - name: sandbox-cleanup
            image: image-registry.openshift-image-registry.svc:5000/openshift/cli
            env:
              - name: OBJECTS
                value: all,cm,secret,pvc,dw,pipeline,el
            command:
              - bash
              - -c
              - |
                #!/bin/sh

                get_most_api_resources() {
                  oc api-resources \
                    --verbs=list \
                    --namespaced \
                    -o name | \
                      grep -v "events.events.k8s.io" | \
                      grep -v "events" | \
                      grep -v "packagemanifests" | \
                      grep -v "operator.openshift.io" | \
                      grep -v "operators.coreos.com" | \
                      grep -v "authorization.openshift.io" | \
                      grep -v "serviceaccount" | \
                      grep -v "rbac" | \
                      sort | uniq
                }

                oc_delete_most() {
                  NAMESPACE=${1:-sandbox}
                  echo ${NAMESPACE}
                  sleep 3

                  for i in $(get_most_api_resources)
                  do
                    echo "Resource:" $i
                    oc -n ${NAMESPACE} \
                      delete ${i} \
                      --all
                  done
                }

                oc_delete_most sandbox