coder
diff --git a/‎cli/testdata/server-config.yaml.golden
+4 b/‎cli/testdata/server-config.yaml.golden
+4
diff --git a/‎coderd/apidoc/docs.go
+4 b/‎coderd/apidoc/docs.go
+4
diff --git a/‎coderd/apidoc/swagger.json
+4 b/‎coderd/apidoc/swagger.json
+4
diff --git a/‎coderd/database/dbauthz/dbauthz.go
+9 b/‎coderd/database/dbauthz/dbauthz.go
+9
diff --git a/‎coderd/database/dbauthz/dbauthz_test.go
+5 b/‎coderd/database/dbauthz/dbauthz_test.go
+5
diff --git a/‎coderd/database/dbmem/dbmem.go
+4 b/‎coderd/database/dbmem/dbmem.go
+4
diff --git a/‎coderd/database/dbmetrics/querymetrics.go
+7 b/‎coderd/database/dbmetrics/querymetrics.go
+7
diff --git a/‎coderd/database/dbmock/dbmock.go
+15 b/‎coderd/database/dbmock/dbmock.go
+15
diff --git a/‎coderd/database/querier.go
+9 b/‎coderd/database/querier.go
+9
@@ -704,3 +704,7 @@ workspace_prebuilds:
   # backoff.
   # (default: 1h0m0s, type: duration)
   reconciliation_backoff_lookback_period: 1h0m0s
+  # Maximum number of consecutive failed prebuilds before a preset hits the hard
+  # limit. FailureHardLimit is disabled when set to zero.
+  # (default: 3, type: int)
+  failure_hard_limit: 3
@@ -2234,6 +2234,15 @@ func (q *querier) GetPresetParametersByTemplateVersionID(ctx context.Context, ar
 	return q.db.GetPresetParametersByTemplateVersionID(ctx, args)
 }
 
+func (q *querier) GetPresetsAtFailureLimit(ctx context.Context, hardLimit int64) ([]database.GetPresetsAtFailureLimitRow, error) {
+	// GetPresetsAtFailureLimit returns a list of template version presets that have reached the hard failure limit.
+	// Request the same authorization permissions as GetPresetsBackoff, since the methods are similar.
+	if err := q.authorizeContext(ctx, policy.ActionViewInsights, rbac.ResourceTemplate.All()); err != nil {
+		return nil, err
+	}
+	return q.db.GetPresetsAtFailureLimit(ctx, hardLimit)
+}
+
 func (q *querier) GetPresetsBackoff(ctx context.Context, lookback time.Time) ([]database.GetPresetsBackoffRow, error) {
 	// GetPresetsBackoff returns a list of template version presets along with metadata such as the number of failed prebuilds.
 	if err := q.authorizeContext(ctx, policy.ActionViewInsights, rbac.ResourceTemplate.All()); err != nil {
 
@@ -4857,6 +4857,11 @@ func (s *MethodTestSuite) TestPrebuilds() {
 			Asserts(rbac.ResourceWorkspace.All(), policy.ActionRead).
 			ErrorsWithInMemDB(dbmem.ErrUnimplemented)
 	}))
+	s.Run("GetPresetsAtFailureLimit", s.Subtest(func(_ database.Store, check *expects) {
+		check.Args(int64(0)).
+			Asserts(rbac.ResourceTemplate.All(), policy.ActionViewInsights).
+			ErrorsWithInMemDB(dbmem.ErrUnimplemented)
+	}))
 	s.Run("GetPresetsBackoff", s.Subtest(func(_ database.Store, check *expects) {
 		check.Args(time.Time{}).
 			Asserts(rbac.ResourceTemplate.All(), policy.ActionViewInsights).
 
@@ -4362,6 +4362,10 @@ func (q *FakeQuerier) GetPresetParametersByTemplateVersionID(_ context.Context,
 	return parameters, nil
 }
 
+func (q *FakeQuerier) GetPresetsAtFailureLimit(ctx context.Context, hardLimit int64) ([]database.GetPresetsAtFailureLimitRow, error) {
+	return nil, ErrUnimplemented
+}
+
 func (*FakeQuerier) GetPresetsBackoff(_ context.Context, _ time.Time) ([]database.GetPresetsBackoffRow, error) {
 	return nil, ErrUnimplemented
 }
Original file line number	Diff line number	Diff line change
`@@ -4362,6 +4362,10 @@ func (q *FakeQuerier) GetPresetParametersByTemplateVersionID(_ context.Context,`
`4362`	`4362`	`return parameters, nil`
`4363`	`4363`	`}`
`4364`	`4364`
	`4365`	`+func (q *FakeQuerier) GetPresetsAtFailureLimit(ctx context.Context, hardLimit int64) ([]database.GetPresetsAtFailureLimitRow, error) {`
	`4366`	`+ return nil, ErrUnimplemented`
	`4367`	`+}`
	`4368`	`+`
`4365`	`4369`	`func (*FakeQuerier) GetPresetsBackoff(_ context.Context, _ time.Time) ([]database.GetPresetsBackoffRow, error) {`
`4366`	`4370`	`return nil, ErrUnimplemented`
`4367`	`4371`	`}`