[keycloak] add support for extra env vars from an existing secret (CloudPirates-io#158)

Co-authored-by: Manuel Schrag <[email protected]>

Author: schragmanuel

charts/keycloak/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.0.0
 - name: postgres
   repository: oci://registry-1.docker.io/cloudpirates
-  version: 0.3.0
+  version: 0.5.2
 - name: mariadb
   repository: oci://registry-1.docker.io/cloudpirates
   version: 0.2.7
-digest: sha256:bccee500d13542983b6457429aaf672ad1459d3dfd0dd5638ce5a1e126f19de6
-generated: "2025-09-16T14:57:21.446014+02:00"
+digest: sha256:58c0f4427699c161ee51d1b1f92323b1ec6ac3f9bcf29ab4df842e12a614c7da
+generated: "2025-09-25T11:46:09.5087928+02:00"

charts/keycloak/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: keycloak
 description: Open Source Identity and Access Management Solution
 type: application
-version: 0.1.4
+version: 0.1.5
 appVersion: "26.3.4"
 keywords:
   - keycloak

charts/keycloak/README.md

@@ -240,9 +240,10 @@ The following table lists the configurable parameters of the Keycloak chart and
 
 ### Extra Environment
 
-| Parameter  | Description                                           | Default |
-| ---------- | ----------------------------------------------------- | ------- |
-| `extraEnv` | Additional environment variables from key-value pairs | `{}`    |
+| Parameter  | Description                                                            | Default |
+| ---------- |------------------------------------------------------------------------| ----- |
+| `extraEnv` | Additional environment variables from key-value pairs                  | `{}`  |
+| `extraEnvVarsSecret` | Name of an existing secret containing additional environment variables | ``    |
 
 ### Extra Configuration Parameters
 

charts/keycloak/templates/deployment.yaml

@@ -141,6 +141,11 @@ spec:
             - name: {{ $key }}
               value: {{ $value | quote }}
             {{- end }}
+          {{- if .Values.extraEnvVarsSecret }}
+          envFrom:
+            - secretRef:
+                name: {{ .Values.extraEnvVarsSecret }}
+          {{- end }}
           ports:
             - name: http
               containerPort: {{ .Values.keycloak.httpPort }}
@@ -233,4 +238,4 @@ spec:
       {{- with .Values.tolerations }}
       tolerations:
         {{- toYaml . | nindent 8 }}
-      {{- end }}
+      {{- end }}

charts/keycloak/values.schema.json

@@ -544,6 +544,11 @@
       "type": "object",
       "description": "Additional environment variables from key-value pairs"
     },
+    "extraEnvVarsSecret": {
+      "type": "string",
+      "title": "Extra Environment Secret",
+      "description": "Name of an existing Secret containing additional environment variables"
+    },
     "extraObjects": {
       "type": "array",
       "title": "Extra Objects",
@@ -633,4 +638,4 @@
       }
     }
   }
-}
+}

charts/keycloak/values.yaml

@@ -266,6 +266,9 @@ extraEnv: {}
 # VARNAME1: value1
 # VARNAME2: value2
 
+## @param extraEnvVarsSecret Name of a secret containing additional environment variables
+extraEnvVarsSecret: ""
+
 ## @param extraObjects Array of extra objects to deploy with the release
 extraObjects: []