Skip to content

Commit 8aaa3e8

Browse files
ixxeL2097ixxeL2097
authored
Merge branch 'CloudPirates-io:main' into main
2 parents c56ee26 + f4b12f4 commit 8aaa3e8

27 files changed

+124
-129
lines changed

‎charts/keycloak/CHANGELOG.md‎

Lines changed: 2 additions & 40 deletions
Original file line numberDiff line numberDiff line change
@@ -1,43 +1,5 @@
11
# Changelog
22

3-
## 0.1.7 (2025-09-29)
3+
## 0.1.9 (2025-10-02)
44

5-
* [keycloak] replace deprecated 'proxy' with new proxy parameters ([#183](https://github.com/CloudPirates-io/helm-charts/pull/183))
6-
7-
## <small>0.1.6 (2025-09-26)</small>
8-
9-
* [postgres] chore(deps): update postgres:17.6 Docker digest to 0b6428e (#162) ([6293612](https://github.com/CloudPirates-io/helm-charts/commit/6293612)), closes [#162](https://github.com/CloudPirates-io/helm-charts/issues/162)
10-
11-
## <small>0.1.5 (2025-09-25)</small>
12-
13-
* add namespaces to templates, change user/group-ids to 1001 ([31b203b](https://github.com/CloudPirates-io/helm-charts/commit/31b203b))
14-
* add readme documentation and values.schema.json ([369448b](https://github.com/CloudPirates-io/helm-charts/commit/369448b))
15-
* add support for extra env vars from an existing secret (#158) ([263604f](https://github.com/CloudPirates-io/helm-charts/commit/263604f)), closes [#158](https://github.com/CloudPirates-io/helm-charts/issues/158)
16-
* Fix resolving template expressions in extraobjects ([12a1cb5](https://github.com/CloudPirates-io/helm-charts/commit/12a1cb5))
17-
* [postgres] chore(deps): update postgres:17.6 Docker digest to 0f4f200 ([b4a6a30](https://github.com/CloudPirates-io/helm-charts/commit/b4a6a30))
18-
* Add keycloak logo ([bf1e1c2](https://github.com/CloudPirates-io/helm-charts/commit/bf1e1c2))
19-
* Add TODO ([8162d60](https://github.com/CloudPirates-io/helm-charts/commit/8162d60))
20-
* Artifact hub id ([02540ae](https://github.com/CloudPirates-io/helm-charts/commit/02540ae))
21-
* Bump the correct thing ([35e7901](https://github.com/CloudPirates-io/helm-charts/commit/35e7901))
22-
* Fix chart version bump ([aae07b1](https://github.com/CloudPirates-io/helm-charts/commit/aae07b1))
23-
* Fix deprecated env vars warning ([50d9fa0](https://github.com/CloudPirates-io/helm-charts/commit/50d9fa0))
24-
* Fix lint ([4bf9e77](https://github.com/CloudPirates-io/helm-charts/commit/4bf9e77))
25-
* Fix lint 2 ([a38fc35](https://github.com/CloudPirates-io/helm-charts/commit/a38fc35))
26-
* Fix lint 3 ([0875bfa](https://github.com/CloudPirates-io/helm-charts/commit/0875bfa))
27-
* Fix lint 4 ([7fcbd78](https://github.com/CloudPirates-io/helm-charts/commit/7fcbd78))
28-
* Improvements ([cea8f2c](https://github.com/CloudPirates-io/helm-charts/commit/cea8f2c))
29-
* Initial implementation ([c5d41ec](https://github.com/CloudPirates-io/helm-charts/commit/c5d41ec))
30-
* Rework keycloak ([2afb0fd](https://github.com/CloudPirates-io/helm-charts/commit/2afb0fd))
31-
* Update CHANGELOG.md ([b7572a8](https://github.com/CloudPirates-io/helm-charts/commit/b7572a8))
32-
* Update CHANGELOG.md ([245f9b6](https://github.com/CloudPirates-io/helm-charts/commit/245f9b6))
33-
* Update CHANGELOG.md ([0bf9f75](https://github.com/CloudPirates-io/helm-charts/commit/0bf9f75))
34-
* Update CHANGELOG.md ([03d476e](https://github.com/CloudPirates-io/helm-charts/commit/03d476e))
35-
* Update CHANGELOG.md ([20c19bb](https://github.com/CloudPirates-io/helm-charts/commit/20c19bb))
36-
* Update CHANGELOG.md ([68435aa](https://github.com/CloudPirates-io/helm-charts/commit/68435aa))
37-
* Update CHANGELOG.md ([b8adca8](https://github.com/CloudPirates-io/helm-charts/commit/b8adca8))
38-
* Update CHANGELOG.md ([62e51b9](https://github.com/CloudPirates-io/helm-charts/commit/62e51b9))
39-
* Update CHANGELOG.md ([54f725e](https://github.com/CloudPirates-io/helm-charts/commit/54f725e))
40-
* Update CHANGELOG.md ([2ed9b3f](https://github.com/CloudPirates-io/helm-charts/commit/2ed9b3f))
41-
* Update CHANGELOG.md ([2178148](https://github.com/CloudPirates-io/helm-charts/commit/2178148))
42-
* Update CHANGELOG.md ([8d6710f](https://github.com/CloudPirates-io/helm-charts/commit/8d6710f))
43-
* chore: fix changelog ([bd9f1a8](https://github.com/CloudPirates-io/helm-charts/commit/bd9f1a8))
5+
* [keycloak] add topologySpreadConstraints and trafficDistribution opti… ([#209](https://github.com/CloudPirates-io/helm-charts/pull/209))

‎charts/keycloak/Chart.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ apiVersion: v2
22
name: keycloak
33
description: Open Source Identity and Access Management Solution
44
type: application
5-
version: 0.1.8
5+
version: 0.1.9
66
appVersion: "26.3.4"
77
keywords:
88
- keycloak

‎charts/keycloak/README.md‎

Lines changed: 15 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -162,14 +162,15 @@ The following table lists the configurable parameters of the Keycloak chart and
162162

163163
### Service configuration
164164

165-
| Parameter | Description | Default |
166-
| ------------------------- | ----------------------------- | ----------- |
167-
| `service.type` | Keycloak service type | `ClusterIP` |
168-
| `service.httpPort` | Keycloak HTTP service port | `8080` |
169-
| `service.httpsPort` | Keycloak HTTPS service port | `8443` |
170-
| `service.httpTargetPort` | Keycloak HTTP container port | `8080` |
171-
| `service.httpsTargetPort` | Keycloak HTTPS container port | `8443` |
172-
| `service.annotations` | Service annotations | `{}` |
165+
| Parameter | Description | Default |
166+
| ----------------------------- | ----------------------------- | ----------- |
167+
| `service.type` | Keycloak service type | `ClusterIP` |
168+
| `service.httpPort` | Keycloak HTTP service port | `8080` |
169+
| `service.httpsPort` | Keycloak HTTPS service port | `8443` |
170+
| `service.httpTargetPort` | Keycloak HTTP container port | `8080` |
171+
| `service.httpsTargetPort` | Keycloak HTTPS container port | `8443` |
172+
| `service.annotations` | Service annotations | `{}` |
173+
| `service.trafficDistribution` | Service traffic distribution | `""` |
173174

174175
### Ingress configuration
175176

@@ -225,11 +226,12 @@ The following table lists the configurable parameters of the Keycloak chart and
225226

226227
### Node Selection
227228

228-
| Parameter | Description | Default |
229-
| -------------- | ------------------------------------ | ------- |
230-
| `nodeSelector` | Node labels for pod assignment | `{}` |
231-
| `tolerations` | Toleration labels for pod assignment | `[]` |
232-
| `affinity` | Affinity settings for pod assignment | `{}` |
229+
| Parameter | Description | Default |
230+
| --------------------------- | ---------------------------------------------- | ------- |
231+
| `nodeSelector` | Node labels for pod assignment | `{}` |
232+
| `tolerations` | Toleration labels for pod assignment | `[]` |
233+
| `affinity` | Affinity settings for pod assignment | `{}` |
234+
| `topologySpreadConstraints` | Topology Spread Constraints for pod assignment | `[]` |
233235

234236
### Service Account
235237

@@ -522,21 +524,18 @@ kubectl get secret my-keycloak -o jsonpath="{.data.admin-password}" | base64 --d
522524
### Common Issues
523525

524526
1. **Pod fails to start with database connection errors**
525-
526527
- Verify database connection parameters
527528
- Ensure the database is running and accessible
528529
- Check database credentials in secrets
529530
- Review pod logs: `kubectl logs <pod-name>`
530531

531532
2. **Cannot access Keycloak via ingress**
532-
533533
- Verify ingress configuration and annotations
534534
- Check if ingress controller is installed
535535
- Ensure DNS resolves to the correct IP
536536
- Check TLS certificate configuration
537537

538538
3. **Admin login fails**
539-
540539
- Verify admin password in the secret
541540
- Check if the admin user exists in the database
542541
- Review Keycloak logs for authentication errors

‎charts/keycloak/templates/deployment.yaml‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -247,3 +247,7 @@ spec:
247247
tolerations:
248248
{{- toYaml . | nindent 8 }}
249249
{{- end }}
250+
{{- with .Values.topologySpreadConstraints }}
251+
topologySpreadConstraints:
252+
{{- toYaml . | nindent 8 }}
253+
{{- end }}

‎charts/keycloak/templates/service.yaml‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,4 +23,5 @@ spec:
2323
name: https
2424
{{- end }}
2525
selector:
26-
{{- include "keycloak.selectorLabels" . | nindent 4 }}
26+
{{- include "keycloak.selectorLabels" . | nindent 4 }}
27+
trafficDistribution: {{ .Values.service.trafficDistribution }}

‎charts/keycloak/values.schema.json‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -313,6 +313,10 @@
313313
"annotations": {
314314
"type": "object",
315315
"description": "Service annotations"
316+
},
317+
"trafficDistribution": {
318+
"type": "string",
319+
"description": "Traffic distribution policy"
316320
}
317321
}
318322
},
@@ -531,6 +535,10 @@
531535
"type": "object",
532536
"description": "Affinity settings for pod assignment"
533537
},
538+
"topologySpreadConstraints": {
539+
"type": "array",
540+
"description": "Topology Spread Constraints for pod assignment"
541+
},
534542
"serviceAccount": {
535543
"type": "object",
536544
"properties": {

‎charts/keycloak/values.yaml‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -146,6 +146,8 @@ service:
146146
httpsTargetPort: 8443
147147
## @param service.annotations Service annotations
148148
annotations: {}
149+
## @param service.trafficDistribution Traffic distribution preference for the keycloak service. If the field is not set, the implementation will apply its default routing strategy.
150+
trafficDistribution: ""
149151

150152
## @section Ingress configuration
151153
ingress:
@@ -253,6 +255,9 @@ nodeSelector: {}
253255
## @param tolerations Toleration labels for pod assignment
254256
tolerations: []
255257

258+
## @param topologySpreadConstraints Topology Spread Constraints for pod assignment
259+
topologySpreadConstraints: []
260+
256261
## @param affinity Affinity settings for pod assignment
257262
affinity: {}
258263

‎charts/minio/Chart.lock‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
dependencies:
22
- name: common
33
repository: oci://registry-1.docker.io/cloudpirates
4-
version: 1.0.0
5-
digest: sha256:4dc4489391e65614af4cd64d56a213e353a7a70b231faf64c584779774304d96
6-
generated: "2025-08-14T12:32:33.889806+02:00"
4+
version: 1.1.1
5+
digest: sha256:8da3c04e2c4a1ebfff4f21936399938e0f3fcf9fbd2f7135e7e907ce725b8f00
6+
generated: "2025-10-01T22:07:26.882147+02:00"

‎charts/minio/Chart.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ apiVersion: v2
22
name: minio
33
description: High Performance Object Storage compatible with Amazon S3 APIs
44
type: application
5-
version: 0.2.4
5+
version: 0.3.0
66
appVersion: "2025.09.07"
77
keywords:
88
- minio

‎charts/minio/README.md‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -133,12 +133,12 @@ The following table lists the configurable parameters of the MinIO chart and the
133133
| Parameter | Description | Default |
134134
| ------------------------------------------ | ------------------------------------------------- | --------- |
135135
| `podSecurityContext.fsGroup` | Group ID for the volumes of the pod | `1000` |
136-
| `securityContext.allowPrivilegeEscalation` | Enable container privilege escalation | `false` |
137-
| `securityContext.runAsNonRoot` | Configure the container to run as a non-root user | `true` |
138-
| `securityContext.runAsUser` | User ID for the MinIO container | `1000` |
139-
| `securityContext.runAsGroup` | Group ID for the MinIO container | `1000` |
140-
| `securityContext.readOnlyRootFilesystem` | Mount container root filesystem as read-only | `true` |
141-
| `securityContext.capabilities.drop` | Linux capabilities to be dropped | `["ALL"]` |
136+
| `containerSecurityContext.allowPrivilegeEscalation` | Enable container privilege escalation | `false` |
137+
| `containerSecurityContext.runAsNonRoot` | Configure the container to run as a non-root user | `true` |
138+
| `containerSecurityContext.runAsUser` | User ID for the MinIO container | `1000` |
139+
| `containerSecurityContext.runAsGroup` | Group ID for the MinIO container | `1000` |
140+
| `containerSecurityContext.readOnlyRootFilesystem` | Mount container root filesystem as read-only | `true` |
141+
| `containerSecurityContext.capabilities.drop` | Linux capabilities to be dropped | `["ALL"]` |
142142

143143
### Service configuration
144144

0 commit comments

Comments
 (0)