diff --git a/charts/keycloak/Chart.yaml b/charts/keycloak/Chart.yaml index 196681a5cd7395d89e7674d0b719f3119d2d2665..36598eaf2e3db9ac0809019ee9a0f1da8e55fb95 100644 --- a/charts/keycloak/Chart.yaml +++ b/charts/keycloak/Chart.yaml @@ -7,5 +7,5 @@ icon: https://www.keycloak.org/resources/images/keycloak_icon_512px.svg sources: - https://git.shivering-isles.com/shivering-isles/infrastructure-gitops - https://github.com/keycloak/keycloak -version: 0.2.2 +version: 0.3.0 appVersion: "19.0.2" diff --git a/charts/keycloak/README.md b/charts/keycloak/README.md index e5887acf0a096519547d0d3f0b229ab8112e7987..78aef9ec471ff53ea4b7ad43fe91619d846a62e4 100644 --- a/charts/keycloak/README.md +++ b/charts/keycloak/README.md @@ -1,6 +1,6 @@ # keycloak -   +   (Alpha) A Helm chart for Keycloak on Kubernetes @@ -43,6 +43,7 @@ | metrics.interval | string | `nil` | | | metrics.scrapeTimeout | string | `nil` | | | nameOverride | string | `""` | | +| networkPolicy.create | bool | `false` | Creates a network policy for inifispan communication, does **not** take care of database or ingress communication | | nodeSelector | object | `{}` | | | podAnnotations | object | `{}` | | | podSecurityContext | object | `{}` | | diff --git a/charts/keycloak/templates/networkpolicy.yaml b/charts/keycloak/templates/networkpolicy.yaml new file mode 100644 index 0000000000000000000000000000000000000000..273639bc405667ae60ea75e086da6dce0fbc304f --- /dev/null +++ b/charts/keycloak/templates/networkpolicy.yaml @@ -0,0 +1,17 @@ +{{- if .Values.networkPolicy.create -}} +apiVersion: networking.k8s.io/v1 +kind: NetworkPolicy +metadata: + name: {{ include "keycloak.fullname" . }}-allow-infinispan + labels: + {{- include "keycloak.labels" . | nindent 4 }} +spec: + podSelector: + {{- include "keycloak.selectorLabels" . | nindent 4 }} + ingress: + - from: + - podSelector: + {{- include "keycloak.selectorLabels" . | nindent 12 }} + ports: + - port: 7800 +{{- end }}