[dashboard] Add secret-hash annotation to KeycloakClient for secret sync by sircthulhu · Pull Request #2231 · cozystack/cozystack

@sircthulhu

Add secret-hash annotation to the dashboard KeycloakClient CRD resource
so that when the Kubernetes Secret value changes, the operator detects
the CRD update and reconciles the client secret in Keycloak.

Without this annotation, if the dashboard-client Secret is recreated
with a new value (e.g. after upgrade), the KeycloakClient spec remains
unchanged, the operator skips reconciliation, and Keycloak retains the
stale secret — causing authentication failures for the dashboard.

Assisted-By: Claude AI
Signed-off-by: Kirill Ilin <stitch14@yandex.ru>

@dosubot dosubot bot added the size:XS

This PR changes 0-9 lines, ignoring generated files.

label

Mar 17, 2026

gemini-code-assist[bot]

@kvaps kvaps deleted the fix/dashboard-keycloak-secret-sync branch

March 18, 2026 10:23

kvaps added a commit that referenced this pull request

Mar 18, 2026
…loakClient for secret sync (#2240)

# Description
Backport of #2231 to `release-1.0`.

kvaps added a commit that referenced this pull request

Mar 18, 2026
…loakClient for secret sync (#2241)

# Description
Backport of #2231 to `release-1.1`.