From e7b1256d1467c5bfbc939b8a3217580bf2d6d5c2 Mon Sep 17 00:00:00 2001 From: Kirill Ilin Date: Tue, 17 Mar 2026 12:35:39 +0500 Subject: [PATCH] [dashboard] Add secret-hash annotation to KeycloakClient for secret sync MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Add secret-hash annotation to the dashboard KeycloakClient CRD resource so that when the Kubernetes Secret value changes, the operator detects the CRD update and reconciles the client secret in Keycloak. Without this annotation, if the dashboard-client Secret is recreated with a new value (e.g. after upgrade), the KeycloakClient spec remains unchanged, the operator skips reconciliation, and Keycloak retains the stale secret — causing authentication failures for the dashboard. Assisted-By: Claude AI Signed-off-by: Kirill Ilin (cherry picked from commit bb5ee3ea4a67a6bfbb4f5a5ca92ace9e1a43472a) --- packages/system/dashboard/templates/keycloakclient.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/packages/system/dashboard/templates/keycloakclient.yaml b/packages/system/dashboard/templates/keycloakclient.yaml index d8e47e8a1..1e0b5feb7 100644 --- a/packages/system/dashboard/templates/keycloakclient.yaml +++ b/packages/system/dashboard/templates/keycloakclient.yaml @@ -49,6 +49,8 @@ apiVersion: v1.edp.epam.com/v1 kind: KeycloakClient metadata: name: dashboard-client + annotations: + secret-hash: {{ $dashboardClient | sha256sum }} spec: serviceAccount: enabled: true