diff --git a/charts/keycloak/tests/__snapshot__/snapshot_test.yaml.snap b/charts/keycloak/tests/__snapshot__/snapshot_test.yaml.snap
index cec153ea73afcff90e7503d4613634534f9e6e67..06c92b923bc16e357bf58466d811843b218dbcb6 100644
--- a/charts/keycloak/tests/__snapshot__/snapshot_test.yaml.snap
+++ b/charts/keycloak/tests/__snapshot__/snapshot_test.yaml.snap
@@ -18,6 +18,8 @@ should match snapshot:
           app.kubernetes.io/name: keycloak
       template:
         metadata:
+          annotations:
+            checksum/config: 59795d176ed09e400ded93da25c6d22200033cdb1859c4c32b6993333ac410c3
           labels:
             app.kubernetes.io/instance: RELEASE-NAME
             app.kubernetes.io/name: keycloak
@@ -25,15 +27,38 @@ should match snapshot:
           containers:
           - args:
             - start
-            - --cache-stack
-            - kubernetes
+            - --cache=ispn
+            - --cache-config-file=cache-ispn.xml
+            - --cache-stack=kubernetes
             - --proxy
             - edge
-            - --features
-            - ""
             env:
             - name: KC_HEALTH_ENABLED
               value: "true"
+            - name: KC_HOSTNAME
+              value: keycloak.example.com
+            - name: JAVA_OPTS_APPEND
+              value: -Djgroups.dns.query=RELEASE-NAME-keycloak-headless.NAMESPACE.svc.cluster.local
+            - name: KC_DB
+              value: postgres
+            - name: KC_DB_USERNAME
+              valueFrom:
+                secretKeyRef:
+                  key: database-username
+                  name: RELEASE-NAME-keycloak
+                  optional: false
+            - name: KC_DB_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  key: database-password
+                  name: RELEASE-NAME-keycloak
+                  optional: false
+            - name: KC_DB_URL
+              valueFrom:
+                secretKeyRef:
+                  key: database-url
+                  name: RELEASE-NAME-keycloak
+                  optional: false
             image: quay.io/keycloak/keycloak:4.5.6
             imagePullPolicy: IfNotPresent
             livenessProbe:
@@ -57,6 +82,7 @@ should match snapshot:
                 cpu: 100m
                 memory: 1Gi
             securityContext:
+              allowPrivilegeEscalation: false
               capabilities:
                 drop:
                 - ALL
@@ -67,17 +93,17 @@ should match snapshot:
     apiVersion: v1
     kind: Secret
     metadata:
-      app.kubernetes.io/instance: RELEASE-NAME
-      app.kubernetes.io/managed-by: Helm
-      app.kubernetes.io/name: keycloak
-      app.kubernetes.io/version: 4.5.6
-      helm.sh/chart: keycloak-1.2.3
-      labels: null
+      labels:
+        app.kubernetes.io/instance: RELEASE-NAME
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: keycloak
+        app.kubernetes.io/version: 4.5.6
+        helm.sh/chart: keycloak-1.2.3
       name: RELEASE-NAME-keycloak
     stringData:
-      database-password: null
-      database-url: null
-      database-username: null
+      database-password: example-db-password
+      database-url: example-db-url
+      database-username: example-db-user
     type: Opaque
   3: |
     apiVersion: v1
@@ -101,6 +127,27 @@ should match snapshot:
         app.kubernetes.io/name: keycloak
       type: ClusterIP
   4: |
+    apiVersion: v1
+    kind: Service
+    metadata:
+      labels:
+        app.kubernetes.io/instance: RELEASE-NAME
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: keycloak
+        app.kubernetes.io/version: 4.5.6
+        helm.sh/chart: keycloak-1.2.3
+      name: RELEASE-NAME-keycloak-headless
+    spec:
+      clusterIP: None
+      ports:
+      - name: ping
+        port: 7800
+        protocol: TCP
+        targetPort: 7800
+      selector:
+        app.kubernetes.io/instance: RELEASE-NAME
+        app.kubernetes.io/name: keycloak
+  5: |
     apiVersion: v1
     kind: ServiceAccount
     metadata:
diff --git a/charts/keycloak/tests/snapshot_test.yaml b/charts/keycloak/tests/snapshot_test.yaml
index f126d02f84a52411502c45f8c099f73f5bd5a5f5..19b64df40c029c4ae8f57db0b5cb7e2ec9483fab 100644
--- a/charts/keycloak/tests/snapshot_test.yaml
+++ b/charts/keycloak/tests/snapshot_test.yaml
@@ -6,6 +6,12 @@ templates:
   - serviceaccount.yaml
 tests:
   - it: should match snapshot
+    set:
+      keycloak:
+        database:
+          username: example-db-user
+          password: example-db-password
+          url: example-db-url
     chart:
       version: 1.2.3
       appVersion: 4.5.6