Resolve "Keycloak new release"

Summary

New release version for Keycloak

• default config refactoring
• new custom plugin/image update with UI fixes
• add custom volumes and volumemounts for bigbang integration

Package MRs

• https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/keycloak/-/merge_requests/26
• https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/keycloak/-/merge_requests/27
• https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/keycloak/-/merge_requests/28

Closes #497 (closed)

chart/templates/keycloak/values.yaml

@@ -22,9 +22,6 @@ monitoring:
 serviceMonitor:
   enabled: {{ .Values.monitoring.enabled }}
 
-networkPolicies:
-  enabled: {{ .Values.networkPolicies.enabled }}
-
 {{- if .Values.addons.keycloak.database.host }}
 postgresql:
   enabled: false
@@ -33,15 +30,17 @@ postgresql:
 {{- if or .Values.addons.keycloak.database.host (and .Values.addons.keycloak.ingress.cert .Values.addons.keycloak.ingress.key) }}
 secrets:
   {{- if and .Values.addons.keycloak.ingress.cert .Values.addons.keycloak.ingress.key }}
-  certificates:
+  tlscert:
     stringData:
       tls.crt: {{ .Values.addons.keycloak.ingress.cert | quote }}
+  tlskey:
+    stringData:
       tls.key: {{ .Values.addons.keycloak.ingress.key  | quote }}
   {{- end }}
 
   {{- with .Values.addons.keycloak.database }}
   {{- if .host }}
-  db:
+  env:
     stringData:
       DB_USER: {{ .username | quote }}
       DB_PASSWORD: {{ .password | quote }}
@@ -53,10 +52,24 @@ secrets:
   {{- end }}
 {{- end }}
 
-{{- if .Values.addons.keycloak.database.host }}
-extraEnvFrom: |
-  - secretRef:
-      name: 'keycloak-db'
-{{- end }}
+{{- if and .Values.addons.keycloak.ingress.cert .Values.addons.keycloak.ingress.key }}
+extraVolumes: |-
+  - name: tlscert
+    secret:
+      secretName: keycloak-tlscert
+  - name: tlskey
+    secret:
+      secretName: keycloak-tlskey
 
+extraVolumeMounts: |-
+  - name: tlscert
+    mountPath: /etc/x509/https/tls.crt
+    subPath: tls.crt
+    readOnly: true
+  - name: tlskey
+    mountPath: /etc/x509/https/tls.key
+    subPath: tls.key
+    readOnly: true
 {{- end }}
+
+{{- end }}
\ No newline at end of file