Andrei Kvapil dde75d6cf5 feat(keycloak): expose zone placement for the keycloak-db instances ...

The Keycloak StatefulSet and the database proxy can already be spread
across failure domains, but the CloudNativePG Cluster behind them could
only follow the cluster-wide topology constraint, with no way to pick
zones for this database alone. With both instances in one zone, losing
that zone loses the database and every login with it.

Add database.affinity (CloudNativePG shape) and
database.topologySpreadConstraints, with empty defaults so nothing
changes unless an installation opts in. The cnpg.io/cluster label
selector is added to constraints that carry none, and the constraints
replace the cluster-wide ones for this database when set.

Assisted-by: LLM
Signed-off-by: Andrei Kvapil <kvapss@gmail.com>

2026-10-11 00:32:54 +02:00

..

admin_hostname_test.yaml

fix(keycloak): always publish the platform realm and never master

2026-09-22 10:24:58 +05:00

db_backup_test.yaml

fix(backups): give the barman-cloud sidecar its own resources

2026-09-18 17:30:20 +04:00

db_placement_test.yaml

feat(keycloak): expose zone placement for the keycloak-db instances

2026-10-11 00:32:54 +02:00

encryption_test.yaml

fix(keycloak): pin the Vault leg to the configured CA and roll on rotation

2026-08-25 18:11:40 +05:00

exposed_realms_test.yaml

fix(keycloak): validate the realm list wherever it is set

2026-09-22 10:54:28 +05:00

ingress_wildcard_test.yaml

feat(platform): add opt-in shared wildcard issuance for ingress path

2026-06-22 20:01:40 +03:00

login_theme_test.yaml

feat(keycloak): ship a login theme image via branding

2026-06-28 05:08:38 +03:00

placement_test.yaml

feat(keycloak): let Keycloak and its database proxy spread across zones

2026-09-30 14:07:22 +05:00

standalone_render_test.yaml

fix(platform): declare the injected _cluster values in system charts

2026-09-07 02:23:47 +03:00