From 9112153e8ac05300bf92d241a45e4f363c0428fa Mon Sep 17 00:00:00 2001
From: Felix Wolf <felix.wolf@blueworld-gmbh.de>
Date: Fri, 24 Apr 2026 20:12:24 +0200
Subject: [PATCH] fix(ocis): resolve large file upload timeouts and enable
 stale upload cleanup

Increase Traefik readTimeout from 600s to 3600s to prevent connection drops during large uploads, and enable the suspended cleanUpExpiredUploads CronJob so stale TUS sessions are automatically purged.
---
 prototypes/ocis/helm/ocis.yaml                                | 3 +++
 prototypes/traefik/helm/traefik.yaml                          | 4 ++--
 rendered/envs/production/ocis/configmap-auth-service.yaml     | 2 +-
 rendered/envs/production/ocis/configmap-graph.yaml            | 2 +-
 rendered/envs/production/ocis/configmap-storage-users.yaml    | 2 +-
 .../ocis/cronjob-storage-users-clean-expired-uploads.yaml     | 2 +-
 rendered/envs/production/traefik/daemonset-traefik.yaml       | 4 ++--
 7 files changed, 11 insertions(+), 8 deletions(-)

diff --git a/prototypes/ocis/helm/ocis.yaml b/prototypes/ocis/helm/ocis.yaml
index 08268a2..85f633c 100644
--- a/prototypes/ocis/helm/ocis.yaml
+++ b/prototypes/ocis/helm/ocis.yaml
@@ -38,6 +38,9 @@ secretRefs:
 
 services:
   storageusers:
+    maintenance:
+      cleanUpExpiredUploads:
+        enabled: true
     resources:
       requests:
         memory: 512Mi
diff --git a/prototypes/traefik/helm/traefik.yaml b/prototypes/traefik/helm/traefik.yaml
index 35d87e9..333c834 100644
--- a/prototypes/traefik/helm/traefik.yaml
+++ b/prototypes/traefik/helm/traefik.yaml
@@ -13,12 +13,12 @@ ports:
     hostPort: 80
     transport:
       respondingTimeouts:
-        readTimeout: 600s
+        readTimeout: 3600s
   websecure:
     hostPort: 443
     transport:
       respondingTimeouts:
-        readTimeout: 600s
+        readTimeout: 3600s
   metrics:
     expose:
       default: true
diff --git a/rendered/envs/production/ocis/configmap-auth-service.yaml b/rendered/envs/production/ocis/configmap-auth-service.yaml
index 27cb5be..2dabc67 100644
--- a/rendered/envs/production/ocis/configmap-auth-service.yaml
+++ b/rendered/envs/production/ocis/configmap-auth-service.yaml
@@ -1,6 +1,6 @@
 apiVersion: v1
 data:
-  service-account-id: fb99941b-834f-4274-b9f3-d8cc98056a9a
+  service-account-id: dc1bcd59-afe8-432c-b2c6-bd56fff10cbb
 kind: ConfigMap
 metadata:
   annotations:
diff --git a/rendered/envs/production/ocis/configmap-graph.yaml b/rendered/envs/production/ocis/configmap-graph.yaml
index 3b5829a..4eda9ed 100644
--- a/rendered/envs/production/ocis/configmap-graph.yaml
+++ b/rendered/envs/production/ocis/configmap-graph.yaml
@@ -1,6 +1,6 @@
 apiVersion: v1
 data:
-  application-id: fcb580ce-fc13-462b-b46f-e22fa7444b35
+  application-id: 91d502c3-d090-49a2-989e-7c8e690751d1
 kind: ConfigMap
 metadata:
   annotations:
diff --git a/rendered/envs/production/ocis/configmap-storage-users.yaml b/rendered/envs/production/ocis/configmap-storage-users.yaml
index 33a5882..9982b37 100644
--- a/rendered/envs/production/ocis/configmap-storage-users.yaml
+++ b/rendered/envs/production/ocis/configmap-storage-users.yaml
@@ -1,6 +1,6 @@
 apiVersion: v1
 data:
-  storage-uuid: fb802673-0d78-4b7d-afa5-4b4538693c85
+  storage-uuid: cf2b3372-ac52-4654-99ae-cf6518b7a75b
 kind: ConfigMap
 metadata:
   annotations:
diff --git a/rendered/envs/production/ocis/cronjob-storage-users-clean-expired-uploads.yaml b/rendered/envs/production/ocis/cronjob-storage-users-clean-expired-uploads.yaml
index 97bcfe7..5808db6 100644
--- a/rendered/envs/production/ocis/cronjob-storage-users-clean-expired-uploads.yaml
+++ b/rendered/envs/production/ocis/cronjob-storage-users-clean-expired-uploads.yaml
@@ -120,4 +120,4 @@ spec:
   schedule: 0 * * * *
   startingDeadlineSeconds: 600
   successfulJobsHistoryLimit: 3
-  suspend: true
+  suspend: false
diff --git a/rendered/envs/production/traefik/daemonset-traefik.yaml b/rendered/envs/production/traefik/daemonset-traefik.yaml
index 76685e9..9df9a8d 100644
--- a/rendered/envs/production/traefik/daemonset-traefik.yaml
+++ b/rendered/envs/production/traefik/daemonset-traefik.yaml
@@ -44,9 +44,9 @@ spec:
             - --providers.kubernetesingress
             - --providers.kubernetesingress.allowEmptyServices=true
             - --providers.kubernetesingress.ingressendpoint.publishedservice=traefik/traefik
-            - --entryPoints.web.transport.respondingTimeouts.readTimeout=600s
+            - --entryPoints.web.transport.respondingTimeouts.readTimeout=3600s
             - --entryPoints.websecure.http.tls=true
-            - --entryPoints.websecure.transport.respondingTimeouts.readTimeout=600s
+            - --entryPoints.websecure.transport.respondingTimeouts.readTimeout=3600s
             - --log.level=INFO
           env:
             - name: POD_NAME