ZeroDownTime
/
kubezero
3
0
Fork 0
Code Issues 1 Pull Requests 24 Releases Wiki Activity

feat: version bump of kubezero-auth / keycloak

This commit is contained in:
Stefan Reimer 2022-09-02 11:46:53 +02:00
parent dcc584f737
commit 7727729038
5 changed files with 47 additions and 34 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
charts/kubezero-auth/Chart.yaml
View File

@ -2,8 +2,8 @@ apiVersion: v2
name: kubezero-auth name: kubezero-auth
description: KubeZero umbrella chart for all things Authentication and Identity management description: KubeZero umbrella chart for all things Authentication and Identity management
type: application type: application
version: 0.2.2 version: 0.2.4
appVersion: 18.0.1 appVersion: 19.0.1
home: https://kubezero.com home: https://kubezero.com
icon: https://cdn.zero-downtime.net/assets/kubezero/logo-small-64.png icon: https://cdn.zero-downtime.net/assets/kubezero/logo-small-64.png
keywords: keywords:
@ -14,10 +14,10 @@ maintainers:
email: stefan@zero-downtime.net email: stefan@zero-downtime.net
dependencies: dependencies:
- name: kubezero-lib - name: kubezero-lib
version: ">= 0.1.4" version: ">= 0.1.5"
repository: https://cdn.zero-downtime.net/charts/ repository: https://cdn.zero-downtime.net/charts/
- name: postgresql - name: postgresql
version: 11.6.7 version: 11.8.1
repository: https://charts.bitnami.com/bitnami repository: https://charts.bitnami.com/bitnami
condition: postgresql.enabled condition: postgresql.enabled
kubeVersion: ">= 1.20.0" kubeVersion: ">= 1.20.0"

12
charts/kubezero-auth/crds/keycloak-realmimports.yaml
View File

@ -704,6 +704,7 @@ spec:
decisionStrategy: decisionStrategy:
enum: enum:
- AFFIRMATIVE - AFFIRMATIVE
- stableIndex
- CONSENSUS - CONSENSUS
- UNANIMOUS - UNANIMOUS
type: string type: string
@ -711,6 +712,7 @@ spec:
type: string type: string
policyEnforcementMode: policyEnforcementMode:
enum: enum:
- stableIndex
- PERMISSIVE - PERMISSIVE
- ENFORCING - ENFORCING
- DISABLED - DISABLED
@ -750,11 +752,13 @@ spec:
decisionStrategy: decisionStrategy:
enum: enum:
- AFFIRMATIVE - AFFIRMATIVE
- stableIndex
- CONSENSUS - CONSENSUS
- UNANIMOUS - UNANIMOUS
type: string type: string
logic: logic:
enum: enum:
- stableIndex
- POSITIVE - POSITIVE
- NEGATIVE - NEGATIVE
type: string type: string
@ -1558,6 +1562,7 @@ spec:
decisionStrategy: decisionStrategy:
enum: enum:
- AFFIRMATIVE - AFFIRMATIVE
- stableIndex
- CONSENSUS - CONSENSUS
- UNANIMOUS - UNANIMOUS
type: string type: string
@ -1565,6 +1570,7 @@ spec:
type: string type: string
policyEnforcementMode: policyEnforcementMode:
enum: enum:
- stableIndex
- PERMISSIVE - PERMISSIVE
- ENFORCING - ENFORCING
- DISABLED - DISABLED
@ -1604,11 +1610,13 @@ spec:
decisionStrategy: decisionStrategy:
enum: enum:
- AFFIRMATIVE - AFFIRMATIVE
- stableIndex
- CONSENSUS - CONSENSUS
- UNANIMOUS - UNANIMOUS
type: string type: string
logic: logic:
enum: enum:
- stableIndex
- POSITIVE - POSITIVE
- NEGATIVE - NEGATIVE
type: string type: string
@ -1930,6 +1938,7 @@ spec:
decisionStrategy: decisionStrategy:
enum: enum:
- AFFIRMATIVE - AFFIRMATIVE
- stableIndex
- CONSENSUS - CONSENSUS
- UNANIMOUS - UNANIMOUS
type: string type: string
@ -1937,6 +1946,7 @@ spec:
type: string type: string
policyEnforcementMode: policyEnforcementMode:
enum: enum:
- stableIndex
- PERMISSIVE - PERMISSIVE
- ENFORCING - ENFORCING
- DISABLED - DISABLED
@ -1976,11 +1986,13 @@ spec:
decisionStrategy: decisionStrategy:
enum: enum:
- AFFIRMATIVE - AFFIRMATIVE
- stableIndex
- CONSENSUS - CONSENSUS
- UNANIMOUS - UNANIMOUS
type: string type: string
logic: logic:
enum: enum:
- stableIndex
- POSITIVE - POSITIVE
- NEGATIVE - NEGATIVE
type: string type: string

34
charts/kubezero-auth/crds/keycloak.yaml
View File

@ -19,6 +19,14 @@ spec:
properties: properties:
spec: spec:
properties: properties:
hostname:
description: |-
Hostname for the Keycloak server.
The special value `INSECURE-DISABLE` disables the hostname strict resolution.
type: string
instances:
description: Number of Keycloak instances in HA mode. Default is 1.
type: integer
serverConfiguration: serverConfiguration:
description: |- description: |-
Configuration of the Keycloak server. Configuration of the Keycloak server.
@ -40,14 +48,17 @@ spec:
type: string type: string
type: object type: object
type: array type: array
hostname: tlsSecret:
description: |- description: |-
Hostname for the Keycloak server. A secret containing the TLS configuration for HTTPS. Reference: https://kubernetes.io/docs/concepts/configuration/secret/#tls-secrets.
The special value `INSECURE-DISABLE` disables the hostname strict resolution. The special value `INSECURE-DISABLE` disables https.
type: string
disableDefaultIngress:
description: Disable the default ingress.
type: boolean
image:
description: Custom Keycloak image to be used.
type: string type: string
instances:
description: Number of Keycloak instances in HA mode. Default is 1.
type: integer
unsupported: unsupported:
description: |- description: |-
In this section you can configure podTemplate advanced features, not production-ready, and not supported settings. In this section you can configure podTemplate advanced features, not production-ready, and not supported settings.
@ -2754,17 +2765,6 @@ spec:
type: object type: object
type: object type: object
type: object type: object
tlsSecret:
description: |-
A secret containing the TLS configuration for HTTPS. Reference: https://kubernetes.io/docs/concepts/configuration/secret/#tls-secrets.
The special value `INSECURE-DISABLE` disables https.
type: string
disableDefaultIngress:
description: Disable the default ingress.
type: boolean
image:
description: Custom Keycloak image to be used.
type: string
required: required:
- hostname - hostname
- tlsSecret - tlsSecret

26
charts/kubezero-auth/templates/keycloak/operator.yaml
View File

@ -4,9 +4,9 @@ apiVersion: v1
kind: ServiceAccount kind: ServiceAccount
metadata: metadata:
annotations: annotations:
app.quarkus.io/build-timestamp: 2022-06-17 - 10:24:55 +0000 app.quarkus.io/build-timestamp: 2022-07-29 - 11:21:21 +0000
labels: labels:
app.kubernetes.io/version: 18.0.1 app.kubernetes.io/version: 19.0.1
app.kubernetes.io/name: keycloak-operator app.kubernetes.io/name: keycloak-operator
name: keycloak-operator name: keycloak-operator
--- ---
@ -14,10 +14,10 @@ apiVersion: v1
kind: Service kind: Service
metadata: metadata:
annotations: annotations:
app.quarkus.io/build-timestamp: 2022-06-17 - 10:24:55 +0000 app.quarkus.io/build-timestamp: 2022-07-29 - 11:21:21 +0000
labels: labels:
app.kubernetes.io/name: keycloak-operator app.kubernetes.io/name: keycloak-operator
app.kubernetes.io/version: 18.0.1 app.kubernetes.io/version: 19.0.1
name: keycloak-operator name: keycloak-operator
spec: spec:
ports: ports:
@ -26,7 +26,7 @@ spec:
targetPort: 8080 targetPort: 8080
selector: selector:
app.kubernetes.io/name: keycloak-operator app.kubernetes.io/name: keycloak-operator
app.kubernetes.io/version: 18.0.1 app.kubernetes.io/version: 19.0.1
type: ClusterIP type: ClusterIP
--- ---
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
@ -38,7 +38,7 @@ rules:
- apps - apps
- extensions - extensions
resources: resources:
- deployments - statefulsets
verbs: verbs:
- get - get
- list - list
@ -179,23 +179,23 @@ apiVersion: apps/v1
kind: Deployment kind: Deployment
metadata: metadata:
annotations: annotations:
app.quarkus.io/build-timestamp: 2022-06-17 - 10:24:55 +0000 app.quarkus.io/build-timestamp: 2022-07-29 - 11:21:21 +0000
labels: labels:
app.kubernetes.io/version: 18.0.1 app.kubernetes.io/version: 19.0.1
app.kubernetes.io/name: keycloak-operator app.kubernetes.io/name: keycloak-operator
name: keycloak-operator name: keycloak-operator
spec: spec:
replicas: 1 replicas: 1
selector: selector:
matchLabels: matchLabels:
app.kubernetes.io/version: 18.0.1 app.kubernetes.io/version: 19.0.1
app.kubernetes.io/name: keycloak-operator app.kubernetes.io/name: keycloak-operator
template: template:
metadata: metadata:
annotations: annotations:
app.quarkus.io/build-timestamp: 2022-06-17 - 10:24:55 +0000 app.quarkus.io/build-timestamp: 2022-07-29 - 11:21:21 +0000
labels: labels:
app.kubernetes.io/version: 18.0.1 app.kubernetes.io/version: 19.0.1
app.kubernetes.io/name: keycloak-operator app.kubernetes.io/name: keycloak-operator
spec: spec:
containers: containers:
@ -205,8 +205,8 @@ spec:
fieldRef: fieldRef:
fieldPath: metadata.namespace fieldPath: metadata.namespace
- name: OPERATOR_KEYCLOAK_IMAGE - name: OPERATOR_KEYCLOAK_IMAGE
value: quay.io/keycloak/keycloak:18.0.1 value: quay.io/keycloak/keycloak:19.0.1
image: quay.io/keycloak/keycloak-operator:18.0.1 image: quay.io/keycloak/keycloak-operator:19.0.1
imagePullPolicy: Always imagePullPolicy: Always
livenessProbe: livenessProbe:
failureThreshold: 3 failureThreshold: 3

1
charts/kubezero-auth/values.yaml
View File

@ -13,6 +13,7 @@ postgresql:
enabled: false enabled: false
auth: auth:
existingSecret: kubezero-auth-postgresql
username: keycloak username: keycloak
database: keycloak database: keycloak