UNCLASSIFIED - NO CUI

Skip to content
Snippets Groups Projects
Commit b597530e authored by Ryan Garcia's avatar Ryan Garcia :dizzy:
Browse files

Merge branch 'update-keycloak-tag-18.4.0-bb.2' into 'master'

keycloak update to 18.4.0-bb.2

Closes big-bang/product/packages/keycloak#85

See merge request !2649
parents e7a20588 6cd00fcd
No related branches found
No related tags found
1 merge request!2649keycloak update to 18.4.0-bb.2
Pipeline #1627825 passed with warnings
...@@ -1378,7 +1378,7 @@ addons: ...@@ -1378,7 +1378,7 @@ addons:
git: git:
repo: https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/keycloak.git repo: https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/keycloak.git
path: "./chart" path: "./chart"
tag: "18.4.0-bb.1" tag: "18.4.0-bb.2"
database: database:
# -- Hostname of a pre-existing database to use for Keycloak. # -- Hostname of a pre-existing database to use for Keycloak.
......
...@@ -272,13 +272,17 @@ addons: ...@@ -272,13 +272,17 @@ addons:
roles: roles:
- "nx-admin" - "nx-admin"
# NexusNotes: | # NexusNotes: |
# Login to Nexus Admin UI and then get the x509 certificate from this path # get nexus x509 cert from Nexus Admin UI
# https://nexus.bigbang.dev/service/rest/v1/security/saml/metadata # https://nexus.bigbang.dev/service/rest/v1/security/saml/metadata
# copy and paste the nexus single line certificate into a text file and save it # copy and paste the nexus single line cert into a text file and save it
# vi nexus-x509.txt # vi nexus-x509.txt
# -----BEGIN CERTIFICATE----- # -----BEGIN CERTIFICATE-----
# put-single-line-nexus-x509-certificate-here # put-single-line-nexus-x509-certificate-here
# -----END CERTIFICATE----- # -----END CERTIFICATE-----
# make a valid pem file with proper wrapping at 64 characters per line # make a valid pem file with proper wrapping at 64 characters per line
# fold -w 64 nexus-x509.txt > nexus.pem # fold -w 64 nexus-x509.txt > nexus.pem
# In Keycloak go to the nexus client and on the Keys tab import the nexus.pem file in two places # make a PKCS12 from nexus.pem
# keytool -import -alias alias -file nexus.pem -keystore nexus.p12 -storetype PKCS12 -storepass password
# In Keycloak go to the nexus client and on the Keys tab import PKCS12 using the nexus.p12 file in two places
# key alias = alias
# store password = password
...@@ -78,6 +78,8 @@ addons: ...@@ -78,6 +78,8 @@ addons:
value: ispn value: ispn
- name: KC_CACHE_STACK - name: KC_CACHE_STACK
value: kubernetes value: kubernetes
- name: KC_METRICS_ENABLED
value: "true"
secrets: secrets:
env: env:
......
...@@ -98,6 +98,9 @@ addons: ...@@ -98,6 +98,9 @@ addons:
value: ispn value: ispn
- name: KC_CACHE_STACK - name: KC_CACHE_STACK
value: kubernetes value: kubernetes
- name: KC_METRICS_ENABLED
value: "true"
secrets: secrets:
env: env:
......
...@@ -1483,7 +1483,7 @@ addons: ...@@ -1483,7 +1483,7 @@ addons:
quarkus.properties: '{{ .Files.Get "resources/dev/quarkus.properties" }}' quarkus.properties: '{{ .Files.Get "resources/dev/quarkus.properties" }}'
extraInitContainers: |- extraInitContainers: |-
- name: plugin - name: plugin
image: registry1.dso.mil/ironbank/big-bang/p1-keycloak-plugin:3.1.0 image: registry1.dso.mil/ironbank/big-bang/p1-keycloak-plugin:3.2.0
imagePullPolicy: Always imagePullPolicy: Always
command: command:
- sh - sh
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment