keycloak-operator: Rolling updates not working as expected. #40354

kneufeld-pbp · 2025-06-09T22:56:43Z

kneufeld-pbp
Jun 9, 2025

I am seeing the following issues with the keycloak-operator:
When spec.update.strategy=Auto pods are not refreshed, and the operator fails with the following:

Caused by: io.fabric8.kubernetes.client.KubernetesClientException: Failure executing: PATCH at: https://172.20.0.1:443/apis/batch/v1/namespaces/identity/jobs/keycloak-update-job?fieldManager=keycloakcontroller&force=true. Message: Job.batch "keycloak-update-job" is invalid: │
│  spec.template.spec.initContainers[0].lifecycle: Forbidden: may not be set for init containers without restartPolicy=Always. Received status: Status(apiVersion=v1, code=422, details=StatusDetails(causes=[StatusCause(field=spec.template.spec.initContainers[0].lifecycle, mess │
│ age=Forbidden: may not be set for init containers without restartPolicy=Always, reason=FieldValueForbidden, additionalProperties={})], group=batch, kind=Job, name=keycloak-update-job, retryAfterSeconds=null, uid=null, additionalProperties={}), kind=Status, message=Job.batch │
│  "keycloak-update-job" is invalid: spec.template.spec.initContainers[0].lifecycle: Forbidden: may not be set for init containers without restartPolicy=Always, metadata=ListMeta(_continue=null, remainingItemCount=null, resourceVersion=null, selfLink=null, additionalPropertie │
│ s={}), reason=Invalid, status=Failure, additionalProperties={}).

Is this a permissions issue, and to what?

When spec.update={ strategy=Explicit; revision=26.2.5 } and pods are refreshed, but are replaced, rolling deployment is never executed. It is expected always to use rolling when Explicit is set.

Details

keyclaok-operator version: 26.2.5
RedHat Build of Keycloak version 26.2.5
keycloak-k8s-resources 26.2.5
AWS EKS Automode: Kubernetes v1.32`

Has anyone else had similar issues with the deployments?

Any insights would be greatly appreciated.

shawkins · 2025-06-10T00:19:57Z

shawkins
Jun 10, 2025
Collaborator

Please create an issue instead. This is a bug with the update logic handling of initContainers.

0 replies

kneufeld-pbp · 2025-06-10T02:15:16Z

kneufeld-pbp
Jun 10, 2025
Author

Closing the discussion, moved to issue #40360

0 replies

Navigation Menu

Repository navigation

keycloak-operator: Rolling updates not working as expected. #40354

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Replies: 2 comments

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

keycloak-operator: Rolling updates not working as expected. #40354

Uh oh!

Uh oh!

kneufeld-pbp Jun 9, 2025

Details

Replies: 2 comments

Uh oh!

shawkins Jun 10, 2025 Collaborator

Uh oh!

kneufeld-pbp Jun 10, 2025 Author

kneufeld-pbp
Jun 9, 2025

shawkins
Jun 10, 2025
Collaborator

kneufeld-pbp
Jun 10, 2025
Author