From b9fd5a94610e98f3ff265a3c7c6ec90784be0ded Mon Sep 17 00:00:00 2001 From: Scooby Husky Date: Sun, 15 Mar 2026 14:47:25 -0500 Subject: [PATCH] Add session affinity to Guacamole service for OIDC flow With 2 replicas, OIDC callbacks can hit a different pod than the one that generated the state/nonce, causing auth failures. Session affinity ensures the same client always reaches the same pod. Co-Authored-By: Claude Opus 4.6 --- apps/guacamole/manifests/deployment-complete.yaml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/apps/guacamole/manifests/deployment-complete.yaml b/apps/guacamole/manifests/deployment-complete.yaml index ec2f8b0..666df43 100644 --- a/apps/guacamole/manifests/deployment-complete.yaml +++ b/apps/guacamole/manifests/deployment-complete.yaml @@ -227,6 +227,10 @@ metadata: component: client spec: type: ClusterIP + sessionAffinity: ClientIP + sessionAffinityConfig: + clientIP: + timeoutSeconds: 3600 ports: - port: 8080 targetPort: http