Skip to content
Draft
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion apps.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -97,7 +97,7 @@ appsInfo:
integration: App Platform has security best practices built in, and is designed for intrusion. Istio is used by App Platform as a service mesh to deliver mTLS enforcement for all traffic that is deemed compromisable, egress control to force teams to choose explicit egress endpoints, and advanced routing capabilities such as weight based load balancing (A/B or blue/green testing). Istio is part of the core of App Platform and can not be disabled.
keycloak:
title: Keycloak
appVersion: 26.6.2
appVersion: 26.6.4
repo: https://github.com/keycloak/keycloak
maintainers: Keycloak
relatedLinks:
Expand Down
2 changes: 1 addition & 1 deletion chart/chart-index/Chart.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -60,7 +60,7 @@ dependencies:
repository: https://istio-release.storage.googleapis.com/charts
- name: keycloakx
alias: keycloak
version: 7.2.0
version: 7.2.2
repository: https://codecentric.github.io/helm-charts
- name: knative-operator
version: v1.22.2
Expand Down
4 changes: 2 additions & 2 deletions charts/keycloak/Chart.yaml
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
apiVersion: v2
appVersion: 26.6.3
appVersion: 26.6.4
description: Keycloak.X - Open Source Identity and Access Management for Modern Applications
and Services
home: https://www.keycloak.org/
Expand All @@ -21,4 +21,4 @@ name: keycloakx
sources:
- https://github.com/codecentric/helm-charts
- https://github.com/keycloak/keycloak/tree/main/quarkus/container
version: 7.2.0
version: 7.2.2
2 changes: 2 additions & 0 deletions charts/keycloak/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -66,6 +66,7 @@ The following table lists the configurable parameters of the Keycloak-X chart an
|-----------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| `fullnameOverride` | Optionally override the fully qualified name | `""` |
| `nameOverride` | Optionally override the name | `""` |
| `namespaceOverride` | Optionally override the namespace for all resources. Useful for umbrella charts that deploy multiple aliased keycloak instances each into their own namespace. | `""` |
| `replicas` | The number of replicas to create | `1` |
| `image.repository` | The Keycloak image repository | `quay.io/keycloak/keycloak` |
| `image.tag` | Overrides the Keycloak image tag whose default is the chart version | `""` |
Expand Down Expand Up @@ -124,6 +125,7 @@ The following table lists the configurable parameters of the Keycloak-X chart an
| `service.loadBalancerIP` | Optional IP for the load balancer. Used for services of type LoadBalancer only | `""` |
| `loadBalancerSourceRanges` | Optional List of allowed source ranges (CIDRs). Used for service of type LoadBalancer only | `[]` |
| `service.externalTrafficPolicy` | Optional external traffic policy. Used for services of type LoadBalancer & NodePort only | `"Cluster"` |
| `service.internalTrafficPolicy` | Optional internal traffic policy. Valid values: `Cluster`, `Local`. | `""` |
| `service.httpPort` | The http Service port | `80` |
| `service.httpNodePort` | The HTTP Service node port if type is NodePort | `""` |
| `service.httpsPort` | The HTTPS Service port | `8443` |
Expand Down
18 changes: 9 additions & 9 deletions charts/keycloak/templates/NOTES.txt
Original file line number Diff line number Diff line change
Expand Up @@ -19,15 +19,15 @@ Keycloak was installed with a Service of type NodePort.
{{ if .Values.service.httpNodePort }}
Get its HTTP URL with the following commands:

export NODE_PORT=$(kubectl get --namespace {{ .Release.Namespace }} service {{ include "keycloak.fullname" . }}-http --template='{{"{{ range .spec.ports }}{{ if eq .name \"http\" }}{{ .nodePort }}{{ end }}{{ end }}"}}')
export NODE_IP=$(kubectl get nodes --namespace {{ .Release.Namespace }} -o jsonpath="{.items[0].status.addresses[0].address}")
export NODE_PORT=$(kubectl get --namespace {{ include "keycloak.namespace" . }} service {{ include "keycloak.fullname" . }}-http --template='{{"{{ range .spec.ports }}{{ if eq .name \"http\" }}{{ .nodePort }}{{ end }}{{ end }}"}}')
export NODE_IP=$(kubectl get nodes --namespace {{ include "keycloak.namespace" . }} -o jsonpath="{.items[0].status.addresses[0].address}")
echo "http://$NODE_IP:$NODE_PORT"
{{- end }}
{{ if .Values.service.httpsNodePort }}
Get its HTTPS URL with the following commands:

export NODE_PORT=$(kubectl get --namespace {{ .Release.Namespace }} service {{ include "keycloak.fullname" . }}-http --template='{{"{{ range .spec.ports }}{{ if eq .name \"https\" }}{{ .nodePort }}{{ end }}{{ end }}"}}')
export NODE_IP=$(kubectl get nodes --namespace {{ .Release.Namespace }} -o jsonpath="{.items[0].status.addresses[0].address}")
export NODE_PORT=$(kubectl get --namespace {{ include "keycloak.namespace" . }} service {{ include "keycloak.fullname" . }}-http --template='{{"{{ range .spec.ports }}{{ if eq .name \"https\" }}{{ .nodePort }}{{ end }}{{ end }}"}}')
export NODE_IP=$(kubectl get nodes --namespace {{ include "keycloak.namespace" . }} -o jsonpath="{.items[0].status.addresses[0].address}")
echo "http://$NODE_IP:$NODE_PORT"
{{- end }}

Expand All @@ -36,16 +36,16 @@ echo "http://$NODE_IP:$NODE_PORT"
Keycloak was installed with a Service of type LoadBalancer

NOTE: It may take a few minutes for the LoadBalancer IP to be available.
You can watch the status of by running 'kubectl get --namespace {{ .Release.Namespace }} service -w {{ include "keycloak.fullname" . }}'
You can watch the status of by running 'kubectl get --namespace {{ include "keycloak.namespace" . }} service -w {{ include "keycloak.fullname" . }}'

Get its HTTP URL with the following commands:

export SERVICE_IP=$(kubectl get service --namespace {{ .Release.Namespace }} {{ include "keycloak.fullname" . }}-http --template "{{"{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}"}}")
export SERVICE_IP=$(kubectl get service --namespace {{ include "keycloak.namespace" . }} {{ include "keycloak.fullname" . }}-http --template "{{"{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}"}}")
echo "http://$SERVICE_IP:{{ .Values.service.httpPort }}"

Get its HTTPS URL with the following commands:

export SERVICE_IP=$(kubectl get service --namespace {{ .Release.Namespace }} {{ include "keycloak.fullname" . }}-http --template "{{"{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}"}}")
export SERVICE_IP=$(kubectl get service --namespace {{ include "keycloak.namespace" . }} {{ include "keycloak.fullname" . }}-http --template "{{"{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}"}}")
echo "http://$SERVICE_IP:{{ .Values.service.httpsPort }}"

{{- else if eq "ClusterIP" .Values.service.type }}
Expand All @@ -54,8 +54,8 @@ Keycloak was installed with a Service of type ClusterIP

Create a port-forwarding with the following commands:

export POD_NAME=$(kubectl get pods --namespace {{ .Release.Namespace }} -l "app.kubernetes.io/name={{ include "keycloak.name" . }},app.kubernetes.io/instance={{ .Release.Name }}" -o name)
export POD_NAME=$(kubectl get pods --namespace {{ include "keycloak.namespace" . }} -l "app.kubernetes.io/name={{ include "keycloak.name" . }},app.kubernetes.io/instance={{ .Release.Name }}" -o name)
echo "Visit http://127.0.0.1:8080 to use your application"
kubectl --namespace {{ .Release.Namespace }} port-forward "$POD_NAME" 8080
kubectl --namespace {{ include "keycloak.namespace" . }} port-forward "$POD_NAME" 8080

{{- end }}
9 changes: 8 additions & 1 deletion charts/keycloak/templates/_helpers.tpl
Original file line number Diff line number Diff line change
Expand Up @@ -62,7 +62,14 @@ Create the name of the service account to use
Create the service DNS name.
*/}}
{{- define "keycloak.serviceDnsName" -}}
{{ include "keycloak.fullname" . }}-headless.{{ .Release.Namespace }}.svc.{{ .Values.clusterDomain }}
{{ include "keycloak.fullname" . }}-headless.{{ include "keycloak.namespace" . }}.svc.{{ .Values.clusterDomain }}
{{- end }}

{{/*
Namespace for all resources. Callers can override via .Values.namespaceOverride.
*/}}
{{- define "keycloak.namespace" -}}
{{- default .Release.Namespace .Values.namespaceOverride -}}
{{- end }}

{{- define "keycloak.databasePasswordEnv" -}}
Expand Down
2 changes: 1 addition & 1 deletion charts/keycloak/templates/configmap-startup.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ apiVersion: v1
kind: ConfigMap
metadata:
name: {{ include "keycloak.fullname" . }}-startup
namespace: {{ .Release.Namespace }}
namespace: {{ include "keycloak.namespace" . }}
labels:
{{- include "keycloak.labels" . | nindent 4 }}
data:
Expand Down
2 changes: 1 addition & 1 deletion charts/keycloak/templates/database-secret.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ apiVersion: v1
kind: Secret
metadata:
name: {{ include "keycloak.fullname" $ }}-database
namespace: {{ .Release.Namespace }}
namespace: {{ include "keycloak.namespace" . }}
labels:
{{- include "keycloak.labels" $ | nindent 4 }}
type: Opaque
Expand Down
2 changes: 1 addition & 1 deletion charts/keycloak/templates/hpa.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ apiVersion: autoscaling/v2
kind: HorizontalPodAutoscaler
metadata:
name: {{ include "keycloak.fullname" . }}
namespace: {{ .Release.Namespace }}
namespace: {{ include "keycloak.namespace" . }}
labels:
{{- include "keycloak.labels" . | nindent 4 }}
{{- range $key, $value := .Values.autoscaling.labels }}
Expand Down
6 changes: 3 additions & 3 deletions charts/keycloak/templates/httproute.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: {{ include "keycloak.fullname" . }}
namespace: {{ .Release.Namespace }}
namespace: {{ include "keycloak.namespace" . }}
labels:
{{- include "keycloak.labels" . | nindent 4 }}
{{- range $key, $value := $httpRoute.labels }}
Expand Down Expand Up @@ -47,12 +47,12 @@ spec:
{{- end }}
{{- end }}
---
{{- if $httpRoute.console.enabled -}}
{{- if $httpRoute.console.enabled }}
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: {{ include "keycloak.fullname" . }}-console
namespace: {{ .Release.Namespace }}
namespace: {{ include "keycloak.namespace" . }}
labels:
{{- include "keycloak.labels" . | nindent 4 }}
{{- range $key, $value := $httpRoute.labels }}
Expand Down
4 changes: 2 additions & 2 deletions charts/keycloak/templates/ingress.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ apiVersion: {{ $apiVersion }}
kind: Ingress
metadata:
name: {{ $fullName }}
namespace: {{ .Release.Namespace }}
namespace: {{ include "keycloak.namespace" . }}
{{- with $ingress.annotations }}
annotations:
{{- range $key, $value := . }}
Expand Down Expand Up @@ -55,7 +55,7 @@ apiVersion: {{ $apiVersion }}
kind: Ingress
metadata:
name: {{ $fullName }}-console
namespace: {{ .Release.Namespace }}
namespace: {{ include "keycloak.namespace" . }}
{{- with $ingress.console.annotations }}
annotations:
{{- range $key, $value := . }}
Expand Down
2 changes: 1 addition & 1 deletion charts/keycloak/templates/networkpolicy.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: {{ include "keycloak.fullname" . | quote }}
namespace: {{ .Release.Namespace }}
namespace: {{ include "keycloak.namespace" . }}
labels:
{{- include "keycloak.labels" . | nindent 4 }}
{{- range $key, $value := .Values.networkPolicy.labels }}
Expand Down
2 changes: 1 addition & 1 deletion charts/keycloak/templates/poddisruptionbudget.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ apiVersion: {{ ternary "policy/v1" "policy/v1beta1" (semverCompare ">=1.21.0-0"
kind: PodDisruptionBudget
metadata:
name: {{ include "keycloak.fullname" . }}
namespace: {{ .Release.Namespace }}
namespace: {{ include "keycloak.namespace" . }}
labels:
{{- include "keycloak.labels" . | nindent 4 }}
spec:
Expand Down
2 changes: 1 addition & 1 deletion charts/keycloak/templates/prometheusrule.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ metadata:
{{- with .namespace }}
namespace: {{ . }}
{{- else }}
namespace: {{ $.Release.Namespace }}
namespace: {{ include "keycloak.namespace" $ }}
{{- end }}
{{- with .annotations }}
annotations:
Expand Down
6 changes: 3 additions & 3 deletions charts/keycloak/templates/rbac.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: {{ include "keycloak.fullname" . }}
namespace: {{ .Release.Namespace }}
namespace: {{ include "keycloak.namespace" . }}
labels:
{{- include "keycloak.labels" . | nindent 4 }}
rules:
Expand All @@ -13,7 +13,7 @@ apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: {{ include "keycloak.fullname" . }}
namespace: {{ .Release.Namespace }}
namespace: {{ include "keycloak.namespace" . }}
labels:
{{- include "keycloak.labels" . | nindent 4 }}
roleRef:
Expand All @@ -23,5 +23,5 @@ roleRef:
subjects:
- kind: ServiceAccount
name: {{ include "keycloak.serviceAccountName" . }}
namespace: {{ .Release.Namespace | quote }}
namespace: {{ include "keycloak.namespace" . | quote }}
{{- end }}
2 changes: 1 addition & 1 deletion charts/keycloak/templates/route.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ apiVersion: route.openshift.io/v1
kind: Route
metadata:
name: {{ include "keycloak.fullname" . }}
namespace: {{ .Release.Namespace }}
namespace: {{ include "keycloak.namespace" . }}
{{- with $route.annotations }}
annotations:
{{- range $key, $value := . }}
Expand Down
2 changes: 1 addition & 1 deletion charts/keycloak/templates/secrets.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ apiVersion: v1
kind: Secret
metadata:
name: {{ include "keycloak.fullname" $ }}-{{ $nameSuffix }}
namespace: {{ $.Release.Namespace }}
namespace: {{ include "keycloak.namespace" $ }}
{{- with $values.annotations }}
annotations:
{{- range $key, $value := . }}
Expand Down
2 changes: 1 addition & 1 deletion charts/keycloak/templates/service-headless.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@ apiVersion: v1
kind: Service
metadata:
name: {{ include "keycloak.fullname" . }}-headless
namespace: {{ .Release.Namespace }}
namespace: {{ include "keycloak.namespace" . }}
{{- with .Values.serviceHeadless.annotations }}
annotations:
{{- range $key, $value := . }}
Expand Down
5 changes: 4 additions & 1 deletion charts/keycloak/templates/service-http.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@ apiVersion: v1
kind: Service
metadata:
name: {{ include "keycloak.fullname" . }}-http
namespace: {{ .Release.Namespace }}
namespace: {{ include "keycloak.namespace" . }}
{{- with .Values.service.annotations }}
annotations:
{{- range $key, $value := . }}
Expand All @@ -27,6 +27,9 @@ spec:
{{- if or (eq "LoadBalancer" .Values.service.type) (eq "NodePort" .Values.service.type) }}
externalTrafficPolicy: {{ .Values.service.externalTrafficPolicy }}
{{- end }}
{{- if .Values.service.internalTrafficPolicy }}
internalTrafficPolicy: {{ .Values.service.internalTrafficPolicy }}
{{- end }}
{{- if .Values.service.sessionAffinity }}
sessionAffinity: {{ .Values.service.sessionAffinity }}
{{- with .Values.service.sessionAffinityConfig }}
Expand Down
Loading
Loading