keycloak: coverage tests + dashboard + reword cross-cutting tags

conformance/tests/l2-behavioral/keycloak-dashboard/chainsaw-test.yaml

@@ -0,0 +1,49 @@
+# =============================================================================
+# L2 BEHAVIORAL — IdP health is visible on a dashboard  (R-OBS-03)      [RUNNABLE]
+# Spec: docs/10 observability. Impl: platform/keycloak/grafana-dashboard.yaml (a grafana_dashboard
+# ConfigMap auto-provisioned into Grafana by the sidecar).
+#
+# GIVEN a Keycloak health dashboard is declared as a grafana_dashboard ConfigMap,
+# WHEN  Grafana's sidecar discovers it (searchNamespace: ALL)
+#   ->  THEN the dashboard is provisioned and Grafana is up — Keycloak health is visible on a dashboard
+#       (R-OBS-03). The presence of the labelled ConfigMap + a ready Grafana is the reconciliation proof.
+# =============================================================================
+apiVersion: chainsaw.kyverno.io/v1alpha1
+kind: Test
+metadata:
+  name: keycloak-dashboard
+  labels:
+    conformance.home.k3s/R-OBS-03: "true"
+  annotations:
+    conformance.home.k3s/requirements: "R-OBS-03"
+    conformance.home.k3s/layer: "L2"
+    conformance.home.k3s/safety-critical: "false"
+    conformance.home.k3s/executable: "true"
+    conformance.home.k3s/intent: >-
+      A grafana_dashboard ConfigMap for Keycloak health exists and Grafana is up to render it.
+spec:
+  timeouts:
+    assert: 3m
+  steps:
+    - name: keycloak-dashboard-configmap-provisioned
+      try:
+        - assert:
+            resource:
+              apiVersion: v1
+              kind: ConfigMap
+              metadata:
+                name: keycloak-dashboard
+                namespace: keycloak
+                labels:
+                  grafana_dashboard: "1"
+    - name: grafana-is-up-to-render-it
+      try:
+        - assert:
+            resource:
+              apiVersion: apps/v1
+              kind: Deployment
+              metadata:
+                name: kube-prometheus-stack-grafana
+                namespace: monitoring
+              status:
+                availableReplicas: 1