DongHyeonkaandClaude Opus 5 4177fb6a48 docs: A-2 — losing the database takes every node down while up stays 1 ...

Both pods go NotReady, the Service endpoint list empties and the front door returns 503, so adding Keycloak replicas buys nothing against database loss. The node holding the session in cache fails too, because a refresh writes LAST_SESSION_REFRESH. Recovery was automatic in about fifteen seconds with no restart, which is what readiness rather than liveness buys.

The observability finding matters as much: up stayed at 1 through a total outage, so alerting on it would have caught nothing. kube-state-metrics is missing and pod readiness is therefore not recorded as a metric.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

2026-09-04 11:57:55 +09:00

..

evidence

docs: A-2 — losing the database takes every node down while up stays 1

2026-09-04 11:57:55 +09:00

account-linking-sub-vs-email.md

test: verify broker identity uses subject not email

2026-07-25 16:28:00 +09:00

experiment-00-session-replication.md

docs: add the prerequisite knowledge this lab assumes

2026-09-04 10:24:21 +09:00

experiment-a1-jgroups-transport-block.md

docs: A-1 — sessions survive a JGroups partition but logout invalidation does not

2026-09-04 11:52:49 +09:00

experiment-a2-database-loss.md

docs: A-2 — losing the database takes every node down while up stays 1

2026-09-04 11:57:55 +09:00

experiment-plan.md

docs: close nine gaps found by re-reading every open question in full

2026-09-04 11:16:59 +09:00

first-broker-login-security.md

test: reproduce and block unsafe broker auto-link

2026-07-25 16:17:54 +09:00

four-pattern-tradeoff-matrix.md

docs: compare four authentication patterns

2026-07-25 16:31:44 +09:00

google-claim-mapping.md

feat: map upstream Google identity claims

2026-07-25 16:24:24 +09:00

google-claim-to-role.md

feat: map broker claims to realm roles

2026-07-25 16:26:59 +09:00

google-idp-brokering.md

feat: add Google broker configuration profiles

2026-07-25 15:30:47 +09:00

google-redirect-uri-policy.md

docs: define exact Google redirect URI policy

2026-07-25 16:28:53 +09:00

https-termination.md

feat: add validated HTTPS termination profiles

2026-07-25 16:30:25 +09:00

keycloak-branch-index.md

docs: add 39-branch Keycloak governance index

2026-07-25 15:26:26 +09:00

keycloak-branch-manifest.tsv

docs: add 39-branch Keycloak governance index

2026-07-25 15:26:26 +09:00

keycloak-multinode-cluster.md

docs: record multi-node cluster setup, rationale and formation evidence

2026-09-03 17:26:45 +09:00

lab-observability.md

docs: record observability setup and add concept layers 10-13

2026-09-04 09:21:45 +09:00

open-questions-coverage.md

docs: close nine gaps found by re-reading every open question in full

2026-09-04 11:16:59 +09:00

public-domain-tunneling.md

feat: add validated named tunnel profile

2026-07-25 16:31:13 +09:00

reverse-proxy-headers.md

feat: define trusted reverse proxy header contract

2026-07-25 16:29:32 +09:00

session-lab-concepts.md

docs: capture the SQL the other node actually runs, and correct the replication claim

2026-09-04 10:14:45 +09:00

session-lab-operations.md

docs: correct the memory analysis to distinguish host and guest headroom

2026-09-03 17:02:11 +09:00

session-lab-prerequisites.md

docs: add the prerequisite knowledge this lab assumes

2026-09-04 10:24:21 +09:00

session-store-lab-roadmap.md

docs: plan all remaining experiments with architecture, injection points and predictions

2026-09-04 10:50:23 +09:00

two-hop-proxy-header-contract.md

docs: record proxy-bypass closure with before and after evidence

2026-09-03 16:17:24 +09:00