wbsong111
fae1ec2668
breaking_change_check 결과 breaking=false — custom-values.yaml이 실제로 쓰는 키 (image, http.relativePath, command, ingress, proxy, resources, database, extraEnv) 중 어느 것도 diff에 걸리지 않았다. 유일한 템플릿 변경(probe 경로가 managementRelativePath를 coalesce로 우선하도록 바뀜)도 relativePath: "/" 를 그대로 쓰므로 동작 영향이 없다. CRD·의존성 변경 없음. appVersion은 26.6.4→26.7.2로 오르지만 custom-values.yaml이 자체 빌드 이미지 태그(26.7.1-bci15.7-hardened)를 명시적으로 고정하므로 이 업그레이드로 실제 배포 버전이 바뀌지는 않는다 — 26.7.2로 올리려면 hardened-containers에서 별도로 자체 빌드해야 한다. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
76 lines
3.9 KiB
Plaintext
76 lines
3.9 KiB
Plaintext
***********************************************************************
|
|
* *
|
|
* Keycloak.X Helm Chart by codecentric AG *
|
|
* *
|
|
***********************************************************************
|
|
|
|
{{- if and .Values.httpRoute.enabled .Values.httpRoute.listenerSet.enabled }}
|
|
|
|
Keycloak was installed with a Gateway API HTTPRoute and ListenerSet.
|
|
The ListenerSet {{ include "keycloak.fullname" . }} attaches listeners to the Gateway "{{ .Values.httpRoute.listenerSet.parentRef.name }}"{{ with .Values.httpRoute.listenerSet.parentRef.namespace }} in namespace "{{ . }}"{{ end }}.
|
|
|
|
Ensure the Gateway is configured to allow ListenerSet attachment from namespace {{ .Release.Namespace }}.
|
|
|
|
{{- else if .Values.httpRoute.enabled }}
|
|
|
|
Keycloak was installed with a Gateway API HTTPRoute attached to:
|
|
{{- range .Values.httpRoute.parentRefs }}
|
|
- Gateway: {{ .name }}{{ with .sectionName }}, section: {{ . }}{{ end }}
|
|
{{- end }}
|
|
|
|
{{- else if .Values.ingress.enabled }}
|
|
|
|
Keycloak was installed with an Ingress and an be reached at the following URL(s):
|
|
{{ range $unused, $rule := .Values.ingress.rules }}
|
|
{{- range $rule.paths }}
|
|
- http{{ if $.Values.ingress.tls }}s{{ end }}://{{ tpl $rule.host $ }}{{ .path }}
|
|
{{- end }}
|
|
{{- end }}
|
|
|
|
{{- else if eq "NodePort" .Values.service.type }}
|
|
|
|
Keycloak was installed with a Service of type NodePort.
|
|
{{ if .Values.service.httpNodePort }}
|
|
Get its HTTP URL with the following commands:
|
|
|
|
export NODE_PORT=$(kubectl get --namespace {{ include "keycloak.namespace" . }} service {{ include "keycloak.fullname" . }}-http --template='{{"{{ range .spec.ports }}{{ if eq .name \"http\" }}{{ .nodePort }}{{ end }}{{ end }}"}}')
|
|
export NODE_IP=$(kubectl get nodes --namespace {{ include "keycloak.namespace" . }} -o jsonpath="{.items[0].status.addresses[0].address}")
|
|
echo "http://$NODE_IP:$NODE_PORT"
|
|
{{- end }}
|
|
{{ if .Values.service.httpsNodePort }}
|
|
Get its HTTPS URL with the following commands:
|
|
|
|
export NODE_PORT=$(kubectl get --namespace {{ include "keycloak.namespace" . }} service {{ include "keycloak.fullname" . }}-http --template='{{"{{ range .spec.ports }}{{ if eq .name \"https\" }}{{ .nodePort }}{{ end }}{{ end }}"}}')
|
|
export NODE_IP=$(kubectl get nodes --namespace {{ include "keycloak.namespace" . }} -o jsonpath="{.items[0].status.addresses[0].address}")
|
|
echo "http://$NODE_IP:$NODE_PORT"
|
|
{{- end }}
|
|
|
|
{{- else if eq "LoadBalancer" .Values.service.type }}
|
|
|
|
Keycloak was installed with a Service of type LoadBalancer
|
|
|
|
NOTE: It may take a few minutes for the LoadBalancer IP to be available.
|
|
You can watch the status of by running 'kubectl get --namespace {{ include "keycloak.namespace" . }} service -w {{ include "keycloak.fullname" . }}'
|
|
|
|
Get its HTTP URL with the following commands:
|
|
|
|
export SERVICE_IP=$(kubectl get service --namespace {{ include "keycloak.namespace" . }} {{ include "keycloak.fullname" . }}-http --template "{{"{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}"}}")
|
|
echo "http://$SERVICE_IP:{{ .Values.service.httpPort }}"
|
|
|
|
Get its HTTPS URL with the following commands:
|
|
|
|
export SERVICE_IP=$(kubectl get service --namespace {{ include "keycloak.namespace" . }} {{ include "keycloak.fullname" . }}-http --template "{{"{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}"}}")
|
|
echo "http://$SERVICE_IP:{{ .Values.service.httpsPort }}"
|
|
|
|
{{- else if eq "ClusterIP" .Values.service.type }}
|
|
|
|
Keycloak was installed with a Service of type ClusterIP
|
|
|
|
Create a port-forwarding with the following commands:
|
|
|
|
export POD_NAME=$(kubectl get pods --namespace {{ include "keycloak.namespace" . }} -l "app.kubernetes.io/name={{ include "keycloak.name" . }},app.kubernetes.io/instance={{ .Release.Name }}" -o name)
|
|
echo "Visit http://127.0.0.1:8080 to use your application"
|
|
kubectl --namespace {{ include "keycloak.namespace" . }} port-forward "$POD_NAME" 8080
|
|
|
|
{{- end }}
|