charts/kubezero-auth/README.md

@@ -26,6 +26,7 @@ Kubernetes: `>= 1.20.0`
 ## Operator
 
 https://github.com/keycloak/keycloak/tree/main/operator
+https://github.com/aerogear/keycloak-metrics-spi
 https://github.com/keycloak/keycloak-benchmark/tree/main/provision/minikube/keycloak/templates
 
 ## Resources

charts/kubezero-auth/README.md.gotmpl

@@ -18,6 +18,7 @@
 ## Operator
 
 https://github.com/keycloak/keycloak/tree/main/operator
+https://github.com/aerogear/keycloak-metrics-spi
 https://github.com/keycloak/keycloak-benchmark/tree/main/provision/minikube/keycloak/templates
 
 ## Resources

charts/kubezero-auth/dashboards-keycloak.yaml

@@ -4,5 +4,5 @@ gzip: true
 # folder: 
 dashboards:
 - name: keycloak
-  url: https://grafana.com/api/dashboards/13106/revisions/3/download
+  url: https://grafana.com/api/dashboards/10441/revisions/2/download
   tags: ['Keycloak', 'Auth']

charts/kubezero-auth/templates/keycloak/istio-authorization-policy.yaml

@@ -15,7 +15,7 @@ spec:
   - to:
     - operation:
         hosts: ["{{ .Values.keycloak.istio.url }}"]
-        paths: ["/metrics*"]
+        paths: ["/auth/realms/master/metrics"]
     when:
     - key: connection.sni
       values:

charts/kubezero-auth/templates/keycloak/keycloak.yaml

@@ -31,8 +31,6 @@ spec:
     - name: db
       value: dev-file
     {{- end }}
-    - name: metrics-enabled
-      value: {{ .Values.keycloak.metrics.enabled | quote }}
     - name: hostname-strict-https
       value: "false"
     - name: proxy