Updated keycloak git tag

chart/templates/keycloak/values.yaml

@@ -45,6 +45,16 @@ monitoring:
   enabled: {{ .Values.monitoring.enabled }}
 serviceMonitor:
   enabled: {{ .Values.monitoring.enabled }}
+  # conditional passes only for default istio: enabled, mTLS: SCRICT
+  {{- if and .Values.istio.enabled (eq (dig "istio" "mtls" "mode" "STRICT" .Values.addons.keycloak.values) "STRICT") }}
+  scheme: https
+  tlsConfig:
+    caFile: /etc/prom-certs/root-cert.pem
+    certFile: /etc/prom-certs/cert-chain.pem
+    keyFile: /etc/prom-certs/key.pem
+    # Prometheus does not support Istio security naming, thus skip verifying target pod certificate
+    insecureSkipVerify: true
+  {{- end }}
 
 {{- if .Values.addons.keycloak.database.host }}
 postgresql:

chart/values.yaml

@@ -1375,7 +1375,7 @@ addons:
     git:
       repo: https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/keycloak.git
       path: "./chart"
-      tag: "18.2.1-bb.4"
+      tag: "18.2.1-bb.5"
 
     database:
       # -- Hostname of a pre-existing database to use for Keycloak.