From 4212d88e458b4c5adc2eeb9ea54539d70d8b0350 Mon Sep 17 00:00:00 2001
From: Marek Stastny <mstastny@redhat.com>
Date: Fri, 10 Apr 2026 10:13:52 +0200
Subject: [PATCH] add client CA to sso-keycloak

---
 base/rhbk/sso-keycloak.yaml.tpl | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/base/rhbk/sso-keycloak.yaml.tpl b/base/rhbk/sso-keycloak.yaml.tpl
index 7d4c01a..339fa6a 100644
--- a/base/rhbk/sso-keycloak.yaml.tpl
+++ b/base/rhbk/sso-keycloak.yaml.tpl
@@ -35,3 +35,11 @@ spec:
           - args:
               - start-dev
   instances: 1
+  additionalOptions:
+    - name: https-client-auth
+      value: request
+  truststores:
+    shared-certs-ca:
+      secret:
+        name: rhbk-client-ca
+        optional: true