Bitnami/charts
2
0
Fork 0
mirror of https://github.com/bitnami/charts.git synced 2026-04-06 17:27:09 +08:00
Code Issues Packages Projects Releases Wiki Activity

[bitnami/keycloak] Add support for PEM certificates (#9039)

Browse Source 
Signed-off-by: Miguel Ruiz <miruiz@vmware.com>
This commit is contained in:
Miguel Ruiz
2022-02-23 16:32:21 +01:00
committed by GitHub
parent ca663edb43
commit 4591aba672
5 changed files with 9 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
bitnami/keycloak/Chart.yaml
View File

@@ -26,4 +26,4 @@ name: keycloak
sources:
- https://github.com/bitnami/bitnami-docker-keycloak
- https://github.com/keycloak/keycloak
version: 6.1.6
version: 6.2.0

6
bitnami/keycloak/templates/configmap-env-vars.yaml
View File

@@ -34,10 +34,4 @@ data:
KEYCLOAK_HTTPS_PORT: {{ .Values.containerPorts.https | quote }}
KEYCLOAK_TLS_KEYSTORE_FILE: "/opt/bitnami/keycloak/certs/keycloak.keystore.jks"
KEYCLOAK_TLS_TRUSTSTORE_FILE: "/opt/bitnami/keycloak/certs/keycloak.truststore.jks"
KEYCLOAK_TLS_CREATE_KEYSTORE: {{ ternary "true" "false" .Values.auth.tls.autoGenerated | quote }}
{{- if .Values.auth.tls.autoGenerated }}
KEYCLOAK_TLS_NODE_CERT_FILE: "/opt/bitnami/keycloak/certs/keycloak.crt"
KEYCLOAK_TLS_NODE_KEY_FILE: "/opt/bitnami/keycloak/certs/keycloak.key"
KEYCLOAK_TLS_CA_CERT_FILE: "/opt/bitnami/keycloak/certs/ca.crt"
{{- end }}
{{- end }}

4
bitnami/keycloak/templates/secrets.yaml
View File

@@ -28,10 +28,10 @@ data:
postgresql-password: {{ .Values.externalDatabase.password | b64enc | quote }}
{{- end }}
{{- if .Values.auth.tls.enabled }}
{{- if or .Values.auth.tls.keystorePassword .Values.auth.tls.autoGenerated }}
{{- if or .Values.auth.tls.keystorePassword .Values.auth.tls.autoGenerated .Values.auth.tls.usePem }}
tls-keystore-password: {{ (.Values.auth.tls.keystorePassword | default (randAlphaNum 10)) | b64enc | quote }}
{{- end }}
{{- if or .Values.auth.tls.truststorePassword .Values.auth.tls.autoGenerated }}
{{- if or .Values.auth.tls.truststorePassword .Values.auth.tls.autoGenerated .Values.auth.tls.usePem }}
tls-truestore-password: {{ (.Values.auth.tls.truststorePassword | default (randAlphaNum 10)) | b64enc | quote }}
{{- end }}
{{- end }}

2
bitnami/keycloak/templates/statefulset.yaml
View File

@@ -80,7 +80,7 @@ spec:
- -ec
- |-
ID="${MY_POD_NAME#"{{ $fullname }}-"}"
{{- if .Values.auth.tls.autoGenerated }}
{{- if or .Values.auth.tls.autoGenerated .Values.auth.tls.usePem }}
if [[ -f "/certs/keycloak-${ID}.key" ]] && [[ -f "/certs/keycloak-${ID}.crt" ]] && [[ -f "/certs/ca.crt" ]]; then
openssl pkcs12 -export -in "/certs/keycloak-${ID}.crt" \
-passout pass:"${KEYCLOAK_TLS_KEYSTORE_PASSWORD}" \

5
bitnami/keycloak/values.yaml
View File

@@ -146,6 +146,11 @@ auth:
## kubectl create secret generic SECRET_NAME --from-file=./keycloak.truststore.jks --from-file=./keycloak-0.keystore.jks --from-file=./keycloak-1.keystore.jks ...
##
existingSecret: ""
## @param auth.tls.usePem Use PEM certificates as input instead of PKS12/JKS stores
## If "true", the Keycloak chart will look for the files ca.crt, keycloak-X.key and keycloak-X.crt inside the secret provided with 'existingSecret'.
## If keystorePassword and truststorePassword are not provided, they will be autogenerated.
##
usePem: false
## @param auth.tls.truststoreFilename Truststore specific filename inside the existing secret
## Note: Setting up this value, you will use the same trustore file in all the replicas
##