Andrei KvapilandClaude 956759388f docs(keycloak): document encryption operational caveats and cap proxy memory ...

Address review feedback on the encryption values block:

- Spell out the operational caveats an operator must understand before
  flipping encryption on: the single-replica proxy turns HA Keycloak into a
  single point of failure; existing data is not migrated automatically so
  enabling (or later disabling) on a populated database breaks logins until
  the offline backfill runs; and a lost static KEK is permanent data loss, so
  the KEK Secret must be backed up.
- Add a memory limit to the proxy resources per the repository style guide.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Andrei Kvapil <andrei.kvapil@aenix.io>

2026-07-01 13:46:31 +02:00

..

apps

fix(tenant): gate VM-CR-creating HelmReleases on victoria-metrics-operator

2026-07-01 12:05:23 +03:00

core

fix(flux): tune source-watcher concurrency and CPU under load

2026-07-01 07:42:33 +03:00

extra

feat(network): mechanism-agnostic LoadBalancer exposure (ExposureClass + ServiceExposure) (#3081)

2026-06-30 12:29:48 +03:00

library

feat(cozy-lib): add CA-only TLS trust-anchor helper for tenants

2026-06-23 03:12:17 +03:00

system

docs(keycloak): document encryption operational caveats and cap proxy memory

2026-07-01 13:46:31 +02:00

tests/cozy-lib-tests

feat(cozy-lib): add CA-only TLS trust-anchor helper for tenants

2026-06-23 03:12:17 +03:00