Update keycloak

Signed-off-by: Renovate Bot <tech+renovate@vshn.ch>
projectsyn · Sep 7, 2023 · 3d0f7da · 3d0f7da
1 parent 90fdd98
commit 3d0f7da
Show file tree

Hide file tree

Showing 38 changed files with 77 additions and 57 deletions.
diff --git a/class/defaults.yml b/class/defaults.yml
@@ -59,10 +59,10 @@ parameters:
     charts:
       keycloakx:
         source: https://codecentric.github.io/helm-charts
-        version: v2.2.1
+        version: 2.2.2
       postgresql:
         source: https://charts.bitnami.com/bitnami
-        version: v12.5.6
+        version: 12.11.0
     # FQDN should be overwritten on the cluster level
     fqdn: keycloak.example.com
     # Disables dynamically resolving the hostname from request headers.

diff --git a/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/keycloakx/templates/ingress.yaml b/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/keycloakx/templates/ingress.yaml
@@ -11,7 +11,7 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: keycloak
     app.kubernetes.io/version: 20.0.3
-    helm.sh/chart: keycloakx-2.2.1
+    helm.sh/chart: keycloakx-2.2.2
   name: keycloakx
   namespace: syn-builtin
 spec:

diff --git a/...lden/builtin/builtin/builtin/01_keycloak_helmchart/keycloakx/templates/networkpolicy.yaml b/...lden/builtin/builtin/builtin/01_keycloak_helmchart/keycloakx/templates/networkpolicy.yaml
@@ -6,7 +6,7 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: keycloakx
     app.kubernetes.io/version: 20.0.3
-    helm.sh/chart: keycloakx-2.2.1
+    helm.sh/chart: keycloakx-2.2.2
   name: keycloakx
   namespace: syn-builtin
 spec:

diff --git a/...den/builtin/builtin/builtin/01_keycloak_helmchart/keycloakx/templates/prometheusrule.yaml b/...den/builtin/builtin/builtin/01_keycloak_helmchart/keycloakx/templates/prometheusrule.yaml
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: keycloak
     app.kubernetes.io/version: 20.0.3
-    helm.sh/chart: keycloakx-2.2.1
+    helm.sh/chart: keycloakx-2.2.2
   name: keycloakx
   namespace: syn-builtin
 spec:

diff --git a/...n/builtin/builtin/builtin/01_keycloak_helmchart/keycloakx/templates/service-headless.yaml b/...n/builtin/builtin/builtin/01_keycloak_helmchart/keycloakx/templates/service-headless.yaml
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: keycloakx
     app.kubernetes.io/version: 20.0.3
-    helm.sh/chart: keycloakx-2.2.1
+    helm.sh/chart: keycloakx-2.2.2
   name: keycloakx-headless
   namespace: syn-builtin
 spec:

diff --git a/...olden/builtin/builtin/builtin/01_keycloak_helmchart/keycloakx/templates/service-http.yaml b/...olden/builtin/builtin/builtin/01_keycloak_helmchart/keycloakx/templates/service-http.yaml
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: keycloak
     app.kubernetes.io/version: 20.0.3
-    helm.sh/chart: keycloakx-2.2.1
+    helm.sh/chart: keycloakx-2.2.2
   name: keycloakx-http
   namespace: syn-builtin
 spec:

diff --git a/...den/builtin/builtin/builtin/01_keycloak_helmchart/keycloakx/templates/serviceaccount.yaml b/...den/builtin/builtin/builtin/01_keycloak_helmchart/keycloakx/templates/serviceaccount.yaml
@@ -9,6 +9,6 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: keycloak
     app.kubernetes.io/version: 20.0.3
-    helm.sh/chart: keycloakx-2.2.1
+    helm.sh/chart: keycloakx-2.2.2
   name: keycloakx
   namespace: syn-builtin
diff --git a/...den/builtin/builtin/builtin/01_keycloak_helmchart/keycloakx/templates/servicemonitor.yaml b/...den/builtin/builtin/builtin/01_keycloak_helmchart/keycloakx/templates/servicemonitor.yaml
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: keycloak
     app.kubernetes.io/version: 20.0.3
-    helm.sh/chart: keycloakx-2.2.1
+    helm.sh/chart: keycloakx-2.2.2
   name: keycloakx-keycloakx
   namespace: syn-builtin
 spec:

diff --git a/...golden/builtin/builtin/builtin/01_keycloak_helmchart/keycloakx/templates/statefulset.yaml b/...golden/builtin/builtin/builtin/01_keycloak_helmchart/keycloakx/templates/statefulset.yaml
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: keycloak
     app.kubernetes.io/version: 20.0.3
-    helm.sh/chart: keycloakx-2.2.1
+    helm.sh/chart: keycloakx-2.2.2
   name: keycloakx
   namespace: syn-builtin
 spec:

diff --git a/...tin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/networkpolicy.yaml b/...tin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/networkpolicy.yaml
@@ -6,7 +6,7 @@ metadata:
     app.kubernetes.io/instance: keycloak
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: postgresql
-    helm.sh/chart: postgresql-12.5.6
+    helm.sh/chart: postgresql-12.11.0
   name: keycloak-postgresql-ingress
   namespace: syn-builtin
 spec:

diff --git a/...iltin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/statefulset.yaml b/...iltin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/statefulset.yaml
@@ -2,11 +2,11 @@ apiVersion: apps/v1
 kind: StatefulSet
 metadata:
   labels:
-    app.kubernetes.io/component: keycloak
+    app.kubernetes.io/component: primary
     app.kubernetes.io/instance: builtin
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: keycloak
-    helm.sh/chart: postgresql-12.5.6
+    helm.sh/chart: postgresql-12.11.0
   name: keycloak-postgresql
   namespace: syn-builtin
 spec:
@@ -28,7 +28,7 @@ spec:
         app.kubernetes.io/instance: keycloak
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: postgresql
-        helm.sh/chart: postgresql-12.5.6
+        helm.sh/chart: postgresql-12.11.0
       name: keycloak-postgresql
     spec:
       affinity:
@@ -56,17 +56,17 @@ spec:
               value: /bitnami/postgresql/data
             - name: POSTGRES_USER
               value: keycloak
-            - name: POSTGRES_POSTGRES_PASSWORD
+            - name: POSTGRES_PASSWORD
               valueFrom:
                 secretKeyRef:
-                  key: postgres-password
+                  key: password
                   name: keycloak-postgresql
-            - name: POSTGRES_PASSWORD
+            - name: POSTGRES_POSTGRES_PASSWORD
               valueFrom:
                 secretKeyRef:
-                  key: password
+                  key: postgres-password
                   name: keycloak-postgresql
-            - name: POSTGRES_DB
+            - name: POSTGRES_DATABASE
               value: keycloak
             - name: POSTGRESQL_ENABLE_LDAP
               value: 'no'
@@ -128,7 +128,15 @@ spec:
               cpu: 250m
               memory: 256Mi
           securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            runAsGroup: 0
+            runAsNonRoot: true
             runAsUser: 1001
+            seccompProfile:
+              type: RuntimeDefault
           volumeMounts:
             - mountPath: /opt/bitnami/postgresql/certs
               name: postgresql-certificates
@@ -160,7 +168,11 @@ spec:
             limits: {}
             requests: {}
           securityContext:
+            runAsGroup: 0
+            runAsNonRoot: false
             runAsUser: 0
+            seccompProfile:
+              type: RuntimeDefault
           volumeMounts:
             - mountPath: /bitnami/postgresql
               name: data
@@ -186,7 +198,9 @@ spec:
     rollingUpdate: {}
     type: RollingUpdate
   volumeClaimTemplates:
-    - metadata:
+    - apiVersion: v1
+      kind: PersistentVolumeClaim
+      metadata:
         name: data
       spec:
         accessModes:

diff --git a/...ltin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/svc-headless.yaml b/...ltin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/svc-headless.yaml
@@ -1,13 +1,14 @@
 apiVersion: v1
 kind: Service
 metadata:
+  annotations:
+    service.alpha.kubernetes.io/tolerate-unready-endpoints: 'true'
   labels:
     app.kubernetes.io/component: primary
     app.kubernetes.io/instance: keycloak
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: postgresql
-    helm.sh/chart: postgresql-12.5.6
-    service.alpha.kubernetes.io/tolerate-unready-endpoints: 'true'
+    helm.sh/chart: postgresql-12.11.0
   name: keycloak-postgresql-hl
   namespace: syn-builtin
 spec:

diff --git a/...olden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/svc.yaml b/...olden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/svc.yaml
@@ -6,7 +6,7 @@ metadata:
     app.kubernetes.io/instance: keycloak
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: postgresql
-    helm.sh/chart: postgresql-12.5.6
+    helm.sh/chart: postgresql-12.11.0
   name: keycloak-postgresql
   namespace: syn-builtin
 spec:

diff --git a/.../golden/external/external/external/01_keycloak_helmchart/keycloakx/templates/ingress.yaml b/.../golden/external/external/external/01_keycloak_helmchart/keycloakx/templates/ingress.yaml
@@ -10,7 +10,7 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: keycloak
     app.kubernetes.io/version: 20.0.3
-    helm.sh/chart: keycloakx-2.2.1
+    helm.sh/chart: keycloakx-2.2.2
   name: keycloakx
   namespace: syn-external
 spec:

diff --git a/.../external/external/external/01_keycloak_helmchart/keycloakx/templates/prometheusrule.yaml b/.../external/external/external/01_keycloak_helmchart/keycloakx/templates/prometheusrule.yaml
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: keycloak
     app.kubernetes.io/version: 20.0.3
-    helm.sh/chart: keycloakx-2.2.1
+    helm.sh/chart: keycloakx-2.2.2
   name: keycloakx
   namespace: syn-external
 spec:

diff --git a/...xternal/external/external/01_keycloak_helmchart/keycloakx/templates/service-headless.yaml b/...xternal/external/external/01_keycloak_helmchart/keycloakx/templates/service-headless.yaml
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: keycloakx
     app.kubernetes.io/version: 20.0.3
-    helm.sh/chart: keycloakx-2.2.1
+    helm.sh/chart: keycloakx-2.2.2
   name: keycloakx-headless
   namespace: syn-external
 spec:

diff --git a/...en/external/external/external/01_keycloak_helmchart/keycloakx/templates/service-http.yaml b/...en/external/external/external/01_keycloak_helmchart/keycloakx/templates/service-http.yaml
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: keycloak
     app.kubernetes.io/version: 20.0.3
-    helm.sh/chart: keycloakx-2.2.1
+    helm.sh/chart: keycloakx-2.2.2
   name: keycloakx-http
   namespace: syn-external
 spec:

diff --git a/.../external/external/external/01_keycloak_helmchart/keycloakx/templates/serviceaccount.yaml b/.../external/external/external/01_keycloak_helmchart/keycloakx/templates/serviceaccount.yaml
@@ -9,6 +9,6 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: keycloak
     app.kubernetes.io/version: 20.0.3
-    helm.sh/chart: keycloakx-2.2.1
+    helm.sh/chart: keycloakx-2.2.2
   name: keycloakx
   namespace: syn-external
diff --git a/.../external/external/external/01_keycloak_helmchart/keycloakx/templates/servicemonitor.yaml b/.../external/external/external/01_keycloak_helmchart/keycloakx/templates/servicemonitor.yaml
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: keycloak
     app.kubernetes.io/version: 20.0.3
-    helm.sh/chart: keycloakx-2.2.1
+    helm.sh/chart: keycloakx-2.2.2
   name: keycloakx-keycloakx
   namespace: syn-external
 spec:

diff --git a/...den/external/external/external/01_keycloak_helmchart/keycloakx/templates/statefulset.yaml b/...den/external/external/external/01_keycloak_helmchart/keycloakx/templates/statefulset.yaml
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: keycloak
     app.kubernetes.io/version: 20.0.3
-    helm.sh/chart: keycloakx-2.2.1
+    helm.sh/chart: keycloakx-2.2.2
   name: keycloakx
   namespace: syn-external
 spec:

diff --git a/...nshift-postgres/openshift-postgres/01_keycloak_helmchart/keycloakx/templates/ingress.yaml b/...nshift-postgres/openshift-postgres/01_keycloak_helmchart/keycloakx/templates/ingress.yaml
@@ -11,7 +11,7 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: keycloak
     app.kubernetes.io/version: 20.0.3
-    helm.sh/chart: keycloakx-2.2.1
+    helm.sh/chart: keycloakx-2.2.2
   name: keycloakx
   namespace: syn-openshift-postgres
 spec:

diff --git a/...postgres/openshift-postgres/01_keycloak_helmchart/keycloakx/templates/prometheusrule.yaml b/...postgres/openshift-postgres/01_keycloak_helmchart/keycloakx/templates/prometheusrule.yaml
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: keycloak
     app.kubernetes.io/version: 20.0.3
-    helm.sh/chart: keycloakx-2.2.1
+    helm.sh/chart: keycloakx-2.2.2
   name: keycloakx
   namespace: syn-openshift-postgres
 spec:

diff --git a/...stgres/openshift-postgres/01_keycloak_helmchart/keycloakx/templates/service-headless.yaml b/...stgres/openshift-postgres/01_keycloak_helmchart/keycloakx/templates/service-headless.yaml
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: keycloakx
     app.kubernetes.io/version: 20.0.3
-    helm.sh/chart: keycloakx-2.2.1
+    helm.sh/chart: keycloakx-2.2.2
   name: keycloakx-headless
   namespace: syn-openshift-postgres
 spec:

diff --git a/...t-postgres/openshift-postgres/01_keycloak_helmchart/keycloakx/templates/service-http.yaml b/...t-postgres/openshift-postgres/01_keycloak_helmchart/keycloakx/templates/service-http.yaml
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: keycloak
     app.kubernetes.io/version: 20.0.3
-    helm.sh/chart: keycloakx-2.2.1
+    helm.sh/chart: keycloakx-2.2.2
   name: keycloakx-http
   namespace: syn-openshift-postgres
 spec:

diff --git a/...postgres/openshift-postgres/01_keycloak_helmchart/keycloakx/templates/serviceaccount.yaml b/...postgres/openshift-postgres/01_keycloak_helmchart/keycloakx/templates/serviceaccount.yaml
@@ -9,6 +9,6 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: keycloak
     app.kubernetes.io/version: 20.0.3
-    helm.sh/chart: keycloakx-2.2.1
+    helm.sh/chart: keycloakx-2.2.2
   name: keycloakx
   namespace: syn-openshift-postgres
diff --git a/...postgres/openshift-postgres/01_keycloak_helmchart/keycloakx/templates/servicemonitor.yaml b/...postgres/openshift-postgres/01_keycloak_helmchart/keycloakx/templates/servicemonitor.yaml
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: keycloak
     app.kubernetes.io/version: 20.0.3
-    helm.sh/chart: keycloakx-2.2.1
+    helm.sh/chart: keycloakx-2.2.2
   name: keycloakx-keycloakx
   namespace: syn-openshift-postgres
 spec:

diff --git a/...ft-postgres/openshift-postgres/01_keycloak_helmchart/keycloakx/templates/statefulset.yaml b/...ft-postgres/openshift-postgres/01_keycloak_helmchart/keycloakx/templates/statefulset.yaml
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/managed-by: commodore
     app.kubernetes.io/name: keycloak
     app.kubernetes.io/version: 20.0.3
-    helm.sh/chart: keycloakx-2.2.1
+    helm.sh/chart: keycloakx-2.2.2
   name: keycloakx
   namespace: syn-openshift-postgres
 spec:

diff --git a/.../openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/networkpolicy.yaml b/.../openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/networkpolicy.yaml
@@ -6,7 +6,7 @@ metadata:
     app.kubernetes.io/instance: keycloak
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: postgresql
-    helm.sh/chart: postgresql-12.5.6
+    helm.sh/chart: postgresql-12.11.0
   name: keycloak-postgresql-ingress
   namespace: syn-openshift-postgres
 spec: