keycloak: use correct keycloak health endpoints

Author: liouk

ci-operator/step-registry/idp/external-oidc/keycloak/server/idp-external-oidc-keycloak-server-commands.sh

@@ -44,6 +44,48 @@ spec:
 "
     fi
 
+    # Fix health probes to use proper Keycloak health endpoints instead of "/" which redirects
+    # This prevents pathological probe failures that trigger test invariant violations
+    oc patch dc/keycloak -n keycloak --type=json -p='[
+      {
+        "op": "replace",
+        "path": "/spec/template/spec/containers/0/readinessProbe",
+        "value": {
+          "httpGet": {
+            "path": "/health/ready",
+            "port": 8080,
+            "scheme": "HTTP"
+          },
+          "initialDelaySeconds": 10
+        }
+      },
+      {
+        "op": "replace",
+        "path": "/spec/template/spec/containers/0/livenessProbe",
+        "value": {
+          "httpGet": {
+            "path": "/health/live",
+            "port": 8080,
+            "scheme": "HTTP"
+          },
+          "initialDelaySeconds": 10
+        }
+      },
+      {
+        "op": "add",
+        "path": "/spec/template/spec/containers/0/startupProbe",
+        "value": {
+          "httpGet": {
+            "path": "/health/started",
+            "port": 8080,
+            "scheme": "HTTP"
+          },
+          "failureThreshold": 20,
+          "periodSeconds": 10
+        }
+      }
+    ]'
+
     prepare_keycloak_client_files
     prepare_keycloak_user_data
     prepare_keycloak_setup_script