UNCLASSIFIED - NO CUI

Skip to content

Keycloak's values comments should warn about potential gotchas with TLS certs

Motivation

Keycloak handles mounting the TLS key and cert by configuring extraEnv, extraVolumes, and extraVolumeMounts for the keycloak package. Unfortunately, because these fields are strings, if the user has an overlay that sets any of these fields, that configuration goes with it. The values comments should call this out specifically.

Acceptance Criteria

  • The above situation is fully explained in the keycloak section of Big Bang's default values