2026-06-13 13:42:02 +00:00
1 changed files with 7 additions and 0 deletions
@@ -5,6 +5,13 @@ metadata:
  namespace: authentik
 spec:
  instances: 2
+  # Cap graceful-drain on demotion: on failover/switchover the old primary is
+  # removed from the -rw service immediately, but the new primary is only
+  # promoted once the old one is down. The default smart-shutdown waits 180s
+  # for client connections to drain (Authentik holds persistent conns), leaving
+  # -rw backendless that whole time. Capping at 10s bounds failover downtime to
+  # ~10-15s (fast shutdown + promotion).
+  smartShutdownTimeout: 10
  imageName: ghcr.io/cloudnative-pg/postgresql:16
  enableSuperuserAccess: true
  storage: