Compare commits

...

2 Commits

Author SHA1 Message Date
Andrei Kvapil
01ef9f1223 [Backport release-1.1] [dashboard] Add secret-hash annotation to KeycloakClient for secret sync (#2241)
# Description
Backport of #2231 to `release-1.1`.
2026-03-18 12:53:33 +01:00
Kirill Ilin
e4fadb50dc [dashboard] Add secret-hash annotation to KeycloakClient for secret sync
Add secret-hash annotation to the dashboard KeycloakClient CRD resource
so that when the Kubernetes Secret value changes, the operator detects
the CRD update and reconciles the client secret in Keycloak.

Without this annotation, if the dashboard-client Secret is recreated
with a new value (e.g. after upgrade), the KeycloakClient spec remains
unchanged, the operator skips reconciliation, and Keycloak retains the
stale secret — causing authentication failures for the dashboard.

Assisted-By: Claude AI
Signed-off-by: Kirill Ilin <stitch14@yandex.ru>
(cherry picked from commit bb5ee3ea4a)
2026-03-18 10:23:43 +00:00

View File

@@ -49,6 +49,8 @@ apiVersion: v1.edp.epam.com/v1
kind: KeycloakClient
metadata:
name: dashboard-client
annotations:
secret-hash: {{ $dashboardClient | sha256sum }}
spec:
serviceAccount:
enabled: true