Chef Declarative State Management (DSM) Bifrost Cleanup service

The Declarative State Management (DSM) Bifrost Cleanup service is an automated utility for cleaning up orphaned authorization objects in DSM Bifrost. It runs as a scheduled Kubernetes cron job within Chef 360 Platform to maintain database consistency and optimal performance.

Purpose

Over time, the Bifrost authorization database can accumulate orphaned records when Chef objects (nodes, clients, users, organizations) are deleted from the Erchef database, but corresponding authorization records remain in Bifrost.

The DSM Bifrost Cleanup service identifies and safely removes these orphaned records to:

• Improve database performance by reducing unnecessary data
• Maintain consistency between Erchef and Bifrost databases
• Prevent authorization conflicts from stale permissions
• Optimize storage usage by removing unused authorization data

Bifrost cleanup schedule

When enabled, the Bifrost cleanup runs every day at 2 AM local time. There’s no mechanism to modify this schedule.

Performance impact

Bifrost cleanup runs every day and the number of rows eligible for deletion will be very less so won’t cause much impact on performance.

Get operation logs

Prerequisites

The DSM Bifrost Cleanup service requires an install administrative token, which you can configure when installing Chef 360 Platform. To get the install admin token or check if it’s already set, see the Install Admin Token in the Admin Console.

Retrieve service logs

You can retrieve Bifrost cleanup logs using the chef-platform-auth-cli. For example:

chef-platform-auth-cli log-service general get-service-logs \
  --profile installAdminProfile \
  --services dsm-services-cleanup \
  --from "<FROM_TIMESTAMP>" \
  --to "<TO_TIMESTAMP>"

Replace <FROM_TIMESTAMP> and <TO_TIMESTAMP> with timestamps in ISO 8601 format, for example 2026-02-17T02:00:00+05:30.