missing anti-affinity on keycloak
We have a mgmt-kube-score CI job failing on Keycloak not having any podAntiAffinity
e.g. here (for this pipeline: https://gitlab.com/sylva-projects/sylva-core/-/pipelines/2174785363)
apps/v1/StatefulSet keycloak in keycloak
[WARNING] StatefulSet has host PodAntiAffinity
· StatefulSet does not have a host podAntiAffinity set
It's recommended to set a podAntiAffinity that stops multiple pods
from a statefulset from being scheduled on the same node. This
increases availability in case the node becomes unavailable.
Having anti-affinity would be a good practice