From 666f3d055c3cc2e5804f9a7746a6a904aa206810 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Tue, 2 Jun 2026 21:17:51 +1000
Subject: [PATCH] feat: add sessionaffinity to kanidm service (#184)

- required as traefik is in passthrough mode

Reviewed-on: https://git.unkin.net/unkin/argocd-apps/pulls/184
---
 apps/base/kanidm/service.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/apps/base/kanidm/service.yaml b/apps/base/kanidm/service.yaml
index 8de5884..3467ef8 100644
--- a/apps/base/kanidm/service.yaml
+++ b/apps/base/kanidm/service.yaml
@@ -9,6 +9,10 @@ metadata:
     app.kubernetes.io/instance: kanidm
 spec:
   type: ClusterIP
+  sessionAffinity: ClientIP
+  sessionAffinityConfig:
+    clientIP:
+      timeoutSeconds: 10800
   ports:
     - name: https
       port: 8443