Keycloak upgrade with monitoring fix

Big Bang

Update keycloak release tag and test-values and example configs.

Package Merge Request

Package Changes

• Keycloak patch upgrade from 20.0.2 to 20.0.3
• fixes for prometheus monitoring

Package MR

big-bang/product/packages/keycloak!97 (merged)

For Issue

Closes big-bang/product/packages/keycloak#81 (closed)

chart/templates/keycloak/values.yaml

@@ -45,17 +45,16 @@ monitoring:
   enabled: {{ .Values.monitoring.enabled }}
 serviceMonitor:
   enabled: {{ .Values.monitoring.enabled }}
-  # not able to get servicemonitor working with tlsConfig. Leaving it here for future work.
   # conditional passes only for default istio: enabled, mTLS: SCRICT, istio injection: enabled
-  # {{- if and $istioInjection (eq (dig "istio" "mtls" "mode" "STRICT" .Values.addons.keycloak.values) "STRICT") }}
-  # scheme: https
-  # tlsConfig:
-  #   caFile: /etc/prom-certs/root-cert.pem
-  #   certFile: /etc/prom-certs/cert-chain.pem
-  #   keyFile: /etc/prom-certs/key.pem
-  #   # Prometheus does not support Istio security naming, thus skip verifying target pod certificate
-  #   insecureSkipVerify: true
-  # {{- end }}
+  {{- if and $istioInjection (eq (dig "istio" "mtls" "mode" "STRICT" .Values.addons.keycloak.values) "STRICT") }}
+  scheme: https
+  tlsConfig:
+    caFile: /etc/prom-certs/root-cert.pem
+    certFile: /etc/prom-certs/cert-chain.pem
+    keyFile: /etc/prom-certs/key.pem
+    # Prometheus does not support Istio security naming, thus skip verifying target pod certificate
+    insecureSkipVerify: true
+  {{- end }}
 
 {{- if .Values.addons.keycloak.database.host }}
 postgresql: