Skip to content

[Backport release-1.1] [dashboard] Add secret-hash annotation to KeycloakClient for secret sync#2241

Merged
kvaps merged 1 commit intorelease-1.1from
backport-2231-to-release-1.1
Mar 18, 2026
Merged

[Backport release-1.1] [dashboard] Add secret-hash annotation to KeycloakClient for secret sync#2241
kvaps merged 1 commit intorelease-1.1from
backport-2231-to-release-1.1

Conversation

@github-actions
Copy link

Description

Backport of #2231 to release-1.1.

Add secret-hash annotation to the dashboard KeycloakClient CRD resource
so that when the Kubernetes Secret value changes, the operator detects
the CRD update and reconciles the client secret in Keycloak.

Without this annotation, if the dashboard-client Secret is recreated
with a new value (e.g. after upgrade), the KeycloakClient spec remains
unchanged, the operator skips reconciliation, and Keycloak retains the
stale secret — causing authentication failures for the dashboard.

Assisted-By: Claude AI
Signed-off-by: Kirill Ilin <stitch14@yandex.ru>
(cherry picked from commit bb5ee3e)
@dosubot dosubot bot added the size:XS This PR changes 0-9 lines, ignoring generated files. label Mar 18, 2026
@kvaps kvaps merged commit 01ef9f1 into release-1.1 Mar 18, 2026
3 checks passed
@kvaps kvaps deleted the backport-2231-to-release-1.1 branch March 18, 2026 11:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size:XS This PR changes 0-9 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants