UNCLASSIFIED - NO CUI

keycloak update to 7.1.4-bb.5

Package Merge Request

Package Changes

https://repo1.dso.mil/big-bang/product/packages/keycloak/-/blob/7.1.4-bb.5/CHANGELOG.md

Package MR

big-bang/product/packages/keycloak!322 (merged)

For Issue

Closes #262

Upgrade Notices

Keycloak upstream has broken out TLS configs for its management interface, meaning Big Bang users no longer need to set addons.keycloak.values.upstream.http.internalScheme to HTTPS for health checks to pass when TLS is enabled.

Because of this change upstream, this release removes the mesh exclusion for Keycloak's management interface, allowing prometheus to scrape metrics with mTLS encryption. If you are overriding addons.keycloak.values.upstream.extraEnv and are not setting addons.keycloak.values.upstream.http.internalScheme to HTTPS, you must add the following to your addons.keycloak.values.upstream.extraEnv key to continue scraping Keycloak's prometheus metrics:

    - name: KC_HTTP_MANAGEMENT_SCHEME
      value: http
Edited by Zach Callahan

Merge request reports

Loading