From 67dd348705cc32d647967c649ae098467b287a53 Mon Sep 17 00:00:00 2001
From: Masaki Yatsu <yatsu@yatsu.info>
Date: Wed, 3 Sep 2025 10:34:13 +0900
Subject: [PATCH] feat(jupyterhub): set cull timeout

---
 jupyterhub/jupyterhub-values.gomplate.yaml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/jupyterhub/jupyterhub-values.gomplate.yaml b/jupyterhub/jupyterhub-values.gomplate.yaml
index c5092f9..aaeb3a5 100644
--- a/jupyterhub/jupyterhub-values.gomplate.yaml
+++ b/jupyterhub/jupyterhub-values.gomplate.yaml
@@ -34,6 +34,8 @@ hub:
       login_service: keycloak
       # username_claim: email
       username_claim: preferred_username
+      auth_refresh_age: 300  # Refresh auth token every 5 minutes
+      refresh_pre_spawn: true  # Refresh token before spawning server
 
     OAuthenticator:
       scope:
@@ -268,3 +270,10 @@ ingress:
   tls:
     - hosts:
         - {{ .Env.JUPYTERHUB_HOST }}
+
+cull:
+  enabled: true
+  timeout: 7200      # 2 hours idle timeout
+  every: 600         # Check every 10 minutes
+  adminUsers: true   # Also cull admin users' server pods
+  users: false       # Don't delete user accounts, only stop server pods