Move P1 version of Keycloak to Iron Bank

• Create the necessary dockerfile, hardening manifest, readme, etc. in https://repo1.dso.mil/dsop/big-bang/p1-sso for the Iron Bank approval process.
• Open issue in Iron Bank for initial application approval
• Complete merge request into Development branch (IB must merge)
• Justify any vulnerabilities and attach spreadsheet to open IB issue.
• Once IB approves and pushes to registry1, modify values.yaml to use IB image

changed the description

added Big Bang Security keycloak labels

added kindchore + 1 deleted label

Jeff McCoy has an example of a pipeline using earthly. This is how he would like the pipeline done.
https://repo1.dso.mil/platform-one/big-bang/apps/product-tools/shift/pack/-/blob/master/.gitlab-ci.yml

I don't think IB will allow us to have our own pipeline. What I've done with other submissions to IB is have a local pipeline do a pre-built image. Then copy files from that image onto Iron Bank's base image for their pipeline.

So, we could maybe use the above pipeline in our KC package repo (as a stage?) and save the artifact to our container registry. Then, IB would download the artifact and copy files onto the RHEL UBI image in its pipeline.

In special circumstances IronBank does allow custom container projects. Can't find an example right now. We should pursue it.

added teamXForce label

added stale label

removed stale label

added priority6 label

set weight to 5

changed the description

removed priority6 label

added priority5 label

adjusted priority to match parent epic

this workflow will help us get all BB images hosted directly from registry1 and allow us to obtain cyber approvals for custom code

changed the description

added stale label

@michaelmcleroy this issue has been inactive for 60 days and is being labelled as marked-for-auto-close. If this issue is still required please take action by removing the stale and marked-for-auto-close labels and commenting with an update, status, or justification. If this issue is not required please close it or label it as delete-me. If no action is taken this issue will be auto closed in 30 days.

added marked-for-auto-close label