From 293b029fda1b65d91e8e9ba021322b1329ff4ec6 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Tue, 2 Jun 2026 21:15:26 +1000
Subject: [PATCH] feat: add sessionaffinity to kanidm service

- required as traefik is in passthrough mode
---
 apps/base/kanidm/service.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/apps/base/kanidm/service.yaml b/apps/base/kanidm/service.yaml
index 8de5884..3467ef8 100644
--- a/apps/base/kanidm/service.yaml
+++ b/apps/base/kanidm/service.yaml
@@ -9,6 +9,10 @@ metadata:
     app.kubernetes.io/instance: kanidm
 spec:
   type: ClusterIP
+  sessionAffinity: ClientIP
+  sessionAffinityConfig:
+    clientIP:
+      timeoutSeconds: 10800
   ports:
     - name: https
       port: 8443