Update Ironbank

This MR contains the following updates:

Package	Update	Change
ironbank/opensource/keycloak/keycloak (source)	major	24.0.5 -> 25.0.1
registry1.dso.mil/ironbank/opensource/keycloak/keycloak (source)	major	24.0.5 -> 25.0.1
registry1.dso.mil/ironbank/opensource/postgres/postgresql12 (source)	minor	12.18 -> 12.19

---

Bigbang testing pipeline: big-bang/bigbang!4662 (closed)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot

Upgrade Notices

Many Keycloak configuration environment variables are now conditionally defined directly in chart/templates/statefulset.yaml. If you were previously passing these via addons.keycloak.values.extraEnv you will need to switch to the updated values (if the defaults are not acceptable) to avoid duplicate environment variables and related helm upgrade failures.

Changes include:

Config option	New values path	Default
KC_HTTP_RELATIVE_PATH	.Values.http.relativePath	/auth
KC_CACHE	.Values.cache.stack	ispn
KC_CACHE_STACK	.Values.cache.stack	kubernetes
KC_PROXY_HEADERS	.Values.proxy.mode	forwarded
KC_HTTP_ENABLED	.Values.proxy.http.enabled	true

KC_PROXY config option is deprecated and should no longer be passed. See release notes for more information.

KC_HOSTNAME_STRICT_HTTPS config option has been removed. See upgrade guide for more information.

If utilizing the Platform One custom Keycloak Plugin you must update to the registry1.dso.mil/ironbank/big-bang/p1-keycloak-plugin:3.5.0 image in addons.keycloak.values.extraInitContainers.