#267 Deploy Keycloak next to kubernetes

keycloak-next/.helmignore

@@ -0,0 +1,25 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+# img folder
+img/
+# Changelog
+CHANGELOG.md

keycloak-next/Chart.lock

@@ -0,0 +1,9 @@
+dependencies:
+- name: postgresql
+  repository: oci://registry-1.docker.io/bitnamicharts
+  version: 16.7.26
+- name: common
+  repository: oci://registry-1.docker.io/bitnamicharts
+  version: 2.31.4
+digest: sha256:d92824e04bd8b3d71ee395ef556c8476badbf15ee7fca655e503933dc90df3eb
+generated: "2025-08-20T12:56:42.787734637Z"

keycloak-next/Chart.yaml

@@ -0,0 +1,36 @@
+annotations:
+  category: DeveloperTools
+  images: |
+    - name: keycloak
+      image: docker.io/bitnami/keycloak:26.3.3-debian-12-r0
+    - name: keycloak-config-cli
+      image: docker.io/bitnami/keycloak-config-cli:6.4.0-debian-12-r11
+  licenses: Apache-2.0
+  tanzuCategory: application
+apiVersion: v2
+appVersion: 26.3.3
+dependencies:
+- condition: postgresql.enabled
+  name: postgresql
+  repository: oci://registry-1.docker.io/bitnamicharts
+  version: 16.x.x
+- name: common
+  repository: oci://registry-1.docker.io/bitnamicharts
+  tags:
+  - bitnami-common
+  version: 2.x.x
+description: Keycloak is a high performance Java-based identity and access management
+  solution. It lets developers add an authentication layer to their applications with
+  minimum effort.
+home: https://bitnami.com
+icon: https://dyltqmyl993wv.cloudfront.net/assets/stacks/keycloak/img/keycloak-stack-220x234.png
+keywords:
+- keycloak
+- access-management
+maintainers:
+- name: Broadcom, Inc. All Rights Reserved.
+  url: https://github.com/bitnami/charts
+name: keycloak
+sources:
+- https://github.com/bitnami/charts/tree/main/bitnami/keycloak
+version: 25.2.0

keycloak-next/README.md

@@ -0,0 +1,64 @@
+# Keycloak Helm Deployment
+## Overview
+
+This repository contains configuration files for deploying Keycloak on Kubernetes using the official Bitnami Legacy Keycloak Helm chart.
+
+Keycloak provides identity and access management (IAM) with support for Single Sign-On (SSO), OAuth2, OpenID Connect, and SAML.
+
+
+# Prerequisites
+
+Ensure the following are installed:
+
+Kubernetes cluster (K8s v1.23+ recommended)
+
+Helm v3+
+
+kubectl configured to access your cluster
+
+Bitnami Sealed Secrets
+
+External database (PostgreSQL)
+
+
+## Install Keycloak
+```bash
+helm install keycloak ./keycloak-next --namespace keycloak -f values.yaml
+```
+
+## Upgrade Release
+```bash
+helm upgrade keycloak ./keycloak-next --namespace keycloak -f values.yaml
+```
+
+## Uninstall Keycloak
+```bash
+helm uninstall keycloak --namespace keycloak
+```
+
+
+## Access Keycloak
+```bash
+export SERVICE_PORT=$(kubectl get --namespace keycloak -o jsonpath="{.spec.ports[?(@.name=='http')].port}" services keycloak)
+
+kubectl port-forward --namespace keycloak svc/keycloak ${SERVICE_PORT}:${SERVICE_PORT} &
+```
+
+
+# Using Sealed Secrets
+
+### Generate Secret:
+```bash
+kubectl create secret generic keycloak-secret \
+  --from-literal=postgresql-password="YOUR_DB_PASSWORD" \
+  --dry-run=client -o yaml > keycloak-secret.yaml
+```
+
+### Seal it:
+```bash
+kubeseal --format yaml < keycloak-secret.yaml > sealed-keycloak-secret.yaml
+```
+### Apply:
+```bash
+kubectl apply -f sealed-keycloak-secret.yaml
+```

keycloak-next/charts/common/.helmignore

@@ -0,0 +1,26 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
+# img folder
+img/
+# Changelog
+CHANGELOG.md

keycloak-next/charts/common/Chart.yaml

@@ -0,0 +1,23 @@
+annotations:
+  category: Infrastructure
+  licenses: Apache-2.0
+apiVersion: v2
+appVersion: 2.31.4
+description: A Library Helm Chart for grouping common logic between bitnami charts.
+  This chart is not deployable by itself.
+home: https://bitnami.com
+icon: https://dyltqmyl993wv.cloudfront.net/downloads/logos/bitnami-mark.png
+keywords:
+- common
+- helper
+- template
+- function
+- bitnami
+maintainers:
+- name: Broadcom, Inc. All Rights Reserved.
+  url: https://github.com/bitnami/charts
+name: common
+sources:
+- https://github.com/bitnami/charts/tree/main/bitnami/common
+type: library
+version: 2.31.4