From 956070215f99b8f111035e765624c4c7276a0258 Mon Sep 17 00:00:00 2001
From: rodrodsilo <inaki.rodriguez@silo.ai>
Date: Mon, 9 Feb 2026 14:23:48 +0200
Subject: [PATCH] Adding DB check

---
 .../templates/keycloak-deployment.yaml        | 30 +++++++++++++++++++
 1 file changed, 30 insertions(+)

diff --git a/sources/keycloak-old/templates/keycloak-deployment.yaml b/sources/keycloak-old/templates/keycloak-deployment.yaml
index d26e0115..125ecd46 100644
--- a/sources/keycloak-old/templates/keycloak-deployment.yaml
+++ b/sources/keycloak-old/templates/keycloak-deployment.yaml
@@ -95,6 +95,36 @@ spec:
               name: keycloak-package-volume
             - mountPath: /opt/scripts
               name: keycloak-script-volume
+        - name: check-db-is-ready
+          command:
+            [
+              "/bin/sh",
+              "-c",
+              "while ! nc -z \"$ENDPOINT_URL_TO_CHECK\" \"$ENDPOINT_PORT_TO_CHECK\"; do echo \"Waiting for Keycloak DB at ${ENDPOINT_URL_TO_CHECK}:${ENDPOINT_PORT_TO_CHECK}...\"; sleep 3; done; echo \"Keycloak DB is accepting connections at ${ENDPOINT_URL_TO_CHECK}:${ENDPOINT_PORT_TO_CHECK}.\"; sleep 3; exit 0"
+            ]
+          image: "busybox:1.37.0"
+          imagePullPolicy: "IfNotPresent"
+          env:
+            - name: ENDPOINT_URL_TO_CHECK
+              value: "keycloak-cnpg-rw.keycloak.svc.cluster.local"
+            - name: ENDPOINT_PORT_TO_CHECK
+              value: "5432"
+          securityContext:
+            allowPrivilegeEscalation: false
+            runAsNonRoot: false
+            runAsUser: 0
+            capabilities:
+              drop:
+                - ALL
+              add:
+                - SETUID
+                - SETGID
+                - CHOWN
+                - DAC_OVERRIDE
+                - FOWNER
+                - FSETID
+            seccompProfile:
+              type: RuntimeDefault
         - command:
             - /bin/sh
             - -c