CronJob schedule calculator

Enter a schedule and time zone, or paste a CronJob. The next runs are listed in both the job’s zone and UTC.

Schema pack 2026.10.0, self-authored. What it covers

CronJob

Opening local draft…

Schedule

Runs at 02:30 on Mon, Tue, Wed, Thu, Fri

What the other fields do

concurrencyPolicy
Forbid
startingDeadlineSeconds
300
suspend
false
history (ok / failed)
3 / 1
backoffLimit
2
activeDeadlineSeconds
1800
  • Forbid: a run is skipped while the previous Job is still running.
  • A run that cannot start within 300s of its schedule is counted as missed.
  • A failed pod is retried up to backoffLimit times with exponential back-off before the Job fails. That planning is arithmetic. Wall-clock completion is not guaranteed.
Passes pack schema4 warning(s)Kubernetes 1.31, pack 2026.10.0

container "report" does not set allowPrivilegeEscalation: false.

container "report": runAsNonRoot is not true at container or pod level.

container "report" does not drop ALL capabilities.

container "report": seccompProfile is unset at container and pod level.

Schedule semantics

CronJob uses five fields: minute, hour, day of month, month, day of week. When both day fields are restricted, a run happens if either matches, which is standard cron behaviour. Without spec.timeZone (GA since 1.27), the controller uses the kube-controller-manager’s zone, which is usually UTC but cannot be known from the manifest.

The preview is arithmetic. Missed schedules, startingDeadlineSeconds, concurrencyPolicy and controller downtime decide whether a Job actually starts.

Questions

Can I put TZ= in the schedule?

No. CronJob validation rejects TZ= and CRON_TZ= in spec.schedule. Use spec.timeZone.

What happens across daylight saving changes?

Runs whose wall-clock time is skipped do not appear in the preview, and repeated times can appear twice. Check the controller’s behaviour for your version before relying on runs near the transition.

Other tools

Manifest editorEdit multi-document Kubernetes YAML with per-document identity, duplicate detection, a relationship graph with an accessible table, and findings tied to source lines.YAML validatorValidate Kubernetes YAML against a versioned schema pack with separate YAML, schema, cross-object and policy findings.Deployment generatorGenerate a Deployment with Service, Ingress, PodDisruptionBudget and HPA: named ports, probes, requests and a hardened security context, validated as you type.Service generatorBuild ClusterIP, NodePort, LoadBalancer, headless and ExternalName Services, and check selector and targetPort mapping against a pasted workload.Resource calculatorExact Kubernetes quantity parsing (100m vs 100Mi), unit conversion, and requests/limits totals that account for init containers, native sidecars, replicas, rollout surge and overhead.RBAC analyzerInspect Roles, ClusterRoles and bindings offline: subject-to-permission matrix, aggregated-role handling, risky verbs, and "can this subject do X" checks scoped to the supplied rules.NetworkPolicy explainerExplain which pods each NetworkPolicy isolates and test traffic scenarios between pods, namespaces and IPs with additive allow-list reasoning.Probe builderBuild liveness, readiness and startup probes and see their timing: when the first check runs, how long until a failure triggers action, and what that action is.Manifest diffCompare two Kubernetes bundles by text or by object: objects matched by identity, list items matched by name, and status or server fields ignored only when you choose.API deprecationsFind Kubernetes APIs removed or deprecated for your target version, using a dated pack, and preview field-aware migrations with the semantic changes you need to review.Secret encoderEncode and decode Kubernetes Secret values locally, build Secret YAML with data or stringData, and inspect an existing Secret with values masked by default.Redact exportFind Secret data, tokens, credential-bearing env values and last-applied annotations in Kubernetes YAML, review each one, and export a redacted copy.TemplatesSynthetic Kubernetes templates with safe defaults — web app, StatefulSet, CronJob, NetworkPolicy, RBAC, HPA, sidecar — each tested against the schema pack for every supported version.