[Backport release-1.0] [dashboard] Add secret-hash annotation to KeycloakClient for secret sync by github-actions[bot] · Pull Request #2240 · cozystack/cozystack

@sircthulhu @github-actions

Add secret-hash annotation to the dashboard KeycloakClient CRD resource
so that when the Kubernetes Secret value changes, the operator detects
the CRD update and reconciles the client secret in Keycloak.

Without this annotation, if the dashboard-client Secret is recreated
with a new value (e.g. after upgrade), the KeycloakClient spec remains
unchanged, the operator skips reconciliation, and Keycloak retains the
stale secret — causing authentication failures for the dashboard.

Assisted-By: Claude AI
Signed-off-by: Kirill Ilin <stitch14@yandex.ru>
(cherry picked from commit bb5ee3e)

@dosubot dosubot bot added the size:XS

This PR changes 0-9 lines, ignoring generated files.

label

Mar 18, 2026

@kvaps kvaps deleted the backport-2231-to-release-1.0 branch

March 18, 2026 11:53