Feature/command customize (CloudPirates-io#186)

* [keycloak] add support for a custom container command

* [keycloak] fix: apply security context to init container

apply the same security context to the init container to fulfill
security standards of a cluster (pod security admissions)

* [keycloak] update postgres dependency to 0.6.1

* [keycloak] update chart version to 0.1.8

---------

Co-authored-by: Manuel Schrag <[email protected]>

Author: schragmanuel

charts/keycloak/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: common
   repository: oci://registry-1.docker.io/cloudpirates
-  version: 1.0.0
+  version: 1.1.1
 - name: postgres
   repository: oci://registry-1.docker.io/cloudpirates
-  version: 0.5.2
+  version: 0.6.1
 - name: mariadb
   repository: oci://registry-1.docker.io/cloudpirates
-  version: 0.2.7
-digest: sha256:58c0f4427699c161ee51d1b1f92323b1ec6ac3f9bcf29ab4df842e12a614c7da
-generated: "2025-09-25T11:46:09.5087928+02:00"
+  version: 0.3.0
+digest: sha256:18c857c1e792fb60ef7577d542f549e8732fdcaf59caa47eb21bd75126ddc713
+generated: "2025-09-30T07:51:22.5152067+02:00"

charts/keycloak/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: keycloak
 description: Open Source Identity and Access Management Solution
 type: application
-version: 0.1.7
+version: 0.1.8
 appVersion: "26.3.4"
 keywords:
   - keycloak

charts/keycloak/templates/deployment.yaml

@@ -35,6 +35,8 @@ spec:
         {{- toYaml .Values.podSecurityContext | nindent 8 }}
       initContainers:
         - name: copy-quarkus-lib
+          securityContext:
+            {{- toYaml .Values.securityContext | nindent 12 }}
           image: {{ include "keycloak.image" . }}
           imagePullPolicy: {{ .Values.image.imagePullPolicy }}
           command: ["sh", "-c", "cp -r /opt/keycloak/lib/quarkus/* /shared-quarkus/"]
@@ -57,7 +59,7 @@ spec:
           image: {{ include "keycloak.image" . }}
           imagePullPolicy: {{ .Values.image.imagePullPolicy }}
           command:
-            - /opt/keycloak/bin/kc.sh
+            - {{ .Values.image.command }}
           args:
             {{- if .Values.keycloak.production }}
             - start

charts/keycloak/values.schema.json

@@ -49,6 +49,10 @@
           "type": "string",
           "description": "Keycloak image tag (immutable tags are recommended)"
         },
+        "command": {
+          "type": "string",
+          "description": "Keycloak container startup command"
+        },
         "imagePullPolicy": {
           "type": "string",
           "enum": ["Always", "IfNotPresent", "Never"],

charts/keycloak/values.yaml

@@ -25,6 +25,8 @@ image:
   tag: "26.3.4@sha256:2b32a51a31e8d780d9fa9a69a59ead69975263c61b5dd13559090e22aa26f100"
   ## @param image.imagePullPolicy Keycloak image pull policy
   imagePullPolicy: Always
+  ## @param image.command Keycloak container command
+  command: "/opt/keycloak/bin/kc.sh"
 
 ## @section Deployment configuration
 ## @param replicaCount Number of Keycloak replicas to deploy
@@ -280,7 +282,7 @@ extraObjects: []
 initContainers:
   ## @param initContainers.waitForPostgres.image PostgreSQL init container image for waiting
   waitForPostgres:
-    image: "postgres:17.6@sha256:0b6428e8c09651398137d2b3308a6ad87e73ac15fc38729891c16d942e947d3d"
+    image: "postgres:17.6@sha256:0f4f20021a065d114083d1b95d9fb89ad847cbc4c3cc9238417815c7df42350f"
   ## @param initContainers.waitForMariadb.image MariaDB init container image for waiting
   waitForMariadb:
     image: "mariadb:12.0.2@sha256:8a061ef9813cf960f94a262930a32b190c3fbe5c8d3ab58456ef1df4b90fd5dc"