Andrei Kvapil 4c8c53610a feat(keycloak): expose zone placement for the keycloak-db instances ...

The Keycloak StatefulSet and the database proxy can already be spread
across failure domains, but the CloudNativePG Cluster behind them could
only follow the cluster-wide topology constraint, with no way to pick
zones for this database alone. With both instances in one zone, losing
that zone loses the database and every login with it.

Add database.affinity (CloudNativePG shape) and
database.topologySpreadConstraints, with empty defaults so nothing
changes unless an installation opts in. The cnpg.io/cluster label
selector is added to constraints that carry none, and the constraints
replace the cluster-wide ones for this database when set.

Assisted-by: LLM
Signed-off-by: Andrei Kvapil <kvapss@gmail.com>
(cherry picked from commit dde75d6cf5)

2026-10-10 23:50:31 +00:00

..

apps

Prepare release v1.6.4 (promoted from v1.6.4-rc.1)

2026-09-28 05:35:26 +00:00

core

fix(e2e-sandbox): install mc from its GitHub release

2026-09-28 14:14:20 +05:00

extra

Prepare release v1.6.4 (promoted from v1.6.4-rc.1)

2026-09-28 05:35:26 +00:00

library

fix(backups): give the sidecar sizing its reason per caller

2026-09-18 18:45:00 +00:00

system

feat(keycloak): expose zone placement for the keycloak-db instances

2026-10-10 23:50:31 +00:00

tests/cozy-lib-tests

feat(cozy-lib): add CA-only TLS trust-anchor helper for tenants

2026-06-23 03:12:17 +03:00