From 20977bbc8664ba449f0b6f16a6fa69d1f2f363a1 Mon Sep 17 00:00:00 2001
From: Marko Oldenburg <development@cooltux.net>
Date: Sun, 31 Aug 2025 10:24:59 +0200
Subject: [PATCH] Add admin ingress and RBAC configuration options

This commit introduces several changes to the `values.yaml` file for the
Keycloak chart. Specifically, it adds new configuration options for an
`adminIngress` section to enable or disable the admin ingress resource,
defaulting to `false`. This provides clearer control over unnecessary
exposure of the Keycloak admin interface.

Additionally, a new `rbac` section has been added, with a default value
for creating RBAC resources set to `false`. This change allows users to
have more granular control over RBAC settings for the Keycloak deployment.

These modifications were made to enhance flexibility and security
configuration of Keycloak in Kubernetes environments. No breaking
changes were introduced, but users interested in these new options
should review and adjust their Helm chart values accordingly.
---
 charts/keycloak/values.yaml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/charts/keycloak/values.yaml b/charts/keycloak/values.yaml
index 09fb96d..eb515ef 100644
--- a/charts/keycloak/values.yaml
+++ b/charts/keycloak/values.yaml
@@ -715,6 +715,10 @@ ingress:
   ##             name: http
   ##
   extraRules: []
+
+adminIngress:
+  enabled: false
+
 ## Network Policy configuration
 ## ref: https://kubernetes.io/docs/concepts/services-networking/network-policies/
 ##
@@ -784,6 +788,8 @@ networkPolicy:
   ingressNSPodMatchLabels: {}
 
 ## @section Other parameters
+rbac:
+  create: false
 
 ## ServiceAccount configuration
 ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
@@ -1292,4 +1298,4 @@ externalDatabase:
   existingSecretUserKey: ""
   existingSecretPasswordKey: ""
   annotations: {}
-  extraParams: ""
\ No newline at end of file
+  extraParams: ""