From 7272358746b883ff9d7a12c71f5b7cbc80a082db Mon Sep 17 00:00:00 2001
From: WorkClub Automation <automation@workclub.local>
Date: Tue, 10 Mar 2026 22:22:36 +0100
Subject: [PATCH] fix(k8s): extreme probe timeouts for RPi and final Keycloak
 26 admin fix

---
 infra/k8s/base/backend-deployment.yaml  |  8 ++++----
 infra/k8s/base/keycloak-deployment.yaml | 17 ++++++++++-------
 2 files changed, 14 insertions(+), 11 deletions(-)

diff --git a/infra/k8s/base/backend-deployment.yaml b/infra/k8s/base/backend-deployment.yaml
index 0adac2f..1e70c78 100644
--- a/infra/k8s/base/backend-deployment.yaml
+++ b/infra/k8s/base/backend-deployment.yaml
@@ -28,10 +28,10 @@ spec:
           httpGet:
             path: /health/startup
             port: http
-          initialDelaySeconds: 5
+          initialDelaySeconds: 10
           periodSeconds: 10
           timeoutSeconds: 5
-          failureThreshold: 30
+          failureThreshold: 60
         livenessProbe:
           httpGet:
             path: /health/live
@@ -44,10 +44,10 @@ spec:
           httpGet:
             path: /health/ready
             port: http
-          initialDelaySeconds: 30
+          initialDelaySeconds: 60
           periodSeconds: 15
           timeoutSeconds: 5
-          failureThreshold: 5
+          failureThreshold: 10
         
         resources:
           requests:
diff --git a/infra/k8s/base/keycloak-deployment.yaml b/infra/k8s/base/keycloak-deployment.yaml
index 2e905e1..4e29140 100644
--- a/infra/k8s/base/keycloak-deployment.yaml
+++ b/infra/k8s/base/keycloak-deployment.yaml
@@ -30,19 +30,19 @@ spec:
           httpGet:
             path: /health/ready
             port: http
-          initialDelaySeconds: 120
+          initialDelaySeconds: 150
           periodSeconds: 15
           timeoutSeconds: 5
-          failureThreshold: 5
+          failureThreshold: 10
         
         livenessProbe:
           httpGet:
             path: /health/live
             port: http
-          initialDelaySeconds: 180
+          initialDelaySeconds: 240
           periodSeconds: 20
           timeoutSeconds: 5
-          failureThreshold: 3
+          failureThreshold: 5
         resources:
           requests:
             cpu: 100m
@@ -66,9 +66,12 @@ spec:
             secretKeyRef:
               name: workclub-secrets
               key: keycloak-db-password
-        - name: KEYCLOAK_ADMIN
-          value: admin
-        - name: KEYCLOAK_ADMIN_PASSWORD
+        - name: KC_BOOTSTRAP_ADMIN_USERNAME
+          valueFrom:
+            secretKeyRef:
+              name: workclub-secrets
+              key: keycloak-admin-username
+        - name: KC_BOOTSTRAP_ADMIN_PASSWORD
           valueFrom:
             secretKeyRef:
               name: workclub-secrets