From 1e666f86a724b8ff0ed4aa7416ef755136351577 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 20 Nov 2025 08:40:53 +0000 Subject: [PATCH] Update Helm release postgresql to v18 Signed-off-by: Renovate Bot --- class/defaults.yml | 2 +- .../templates/primary/networkpolicy.yaml | 18 ++--- .../postgresql/templates/primary/pdb.yaml | 19 +++++ .../templates/primary/statefulset.yaml | 77 +++++++++++++----- .../templates/primary/svc-headless.yaml | 7 +- .../postgresql/templates/primary/svc.yaml | 5 +- .../postgresql/templates/serviceaccount.yaml | 12 +++ .../postgresql/templates/primary/pdb.yaml | 0 .../postgresql/templates/serviceaccount.yaml | 12 +++ .../templates/primary/networkpolicy.yaml | 18 ++--- .../postgresql/templates/primary/pdb.yaml | 19 +++++ .../templates/primary/statefulset.yaml | 79 ++++++++++++++----- .../templates/primary/svc-headless.yaml | 7 +- .../postgresql/templates/primary/svc.yaml | 5 +- .../postgresql/templates/serviceaccount.yaml | 12 +++ .../postgresql/templates/primary/pdb.yaml | 0 .../postgresql/templates/serviceaccount.yaml | 12 +++ 17 files changed, 230 insertions(+), 74 deletions(-) create mode 100644 tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/pdb.yaml create mode 100644 tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml create mode 100644 tests/golden/external/external/external/01_keycloak_helmchart/postgresql/templates/primary/pdb.yaml create mode 100644 tests/golden/external/external/external/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml create mode 100644 tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/pdb.yaml create mode 100644 tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml create mode 100644 tests/golden/openshift/openshift/openshift/01_keycloak_helmchart/postgresql/templates/primary/pdb.yaml create mode 100644 tests/golden/openshift/openshift/openshift/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml diff --git a/class/defaults.yml b/class/defaults.yml index 1c7f8869b..2cdfccd1e 100644 --- a/class/defaults.yml +++ b/class/defaults.yml @@ -64,7 +64,7 @@ parameters: version: 7.0.1 postgresql: source: https://charts.bitnami.com/bitnami - version: 12.12.10 + version: 18.1.11 # FQDN should be overwritten on the cluster level fqdn: keycloak.example.com # Default path since Quarkus is "/" rather than "/auth" diff --git a/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/networkpolicy.yaml b/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/networkpolicy.yaml index a10253f60..e95a53165 100644 --- a/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/networkpolicy.yaml +++ b/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/networkpolicy.yaml @@ -6,21 +6,21 @@ metadata: app.kubernetes.io/instance: keycloak app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: postgresql - app.kubernetes.io/version: 15.4.0 - helm.sh/chart: postgresql-12.12.10 - name: keycloak-postgresql-ingress + app.kubernetes.io/version: 18.1.0 + helm.sh/chart: postgresql-18.1.11 + name: keycloak-postgresql namespace: syn-builtin spec: + egress: + - {} ingress: - - from: - - podSelector: - matchLabels: - app.kubernetes.io/instance: keycloakx - app.kubernetes.io/name: keycloakx - ports: + - ports: - port: 5432 podSelector: matchLabels: app.kubernetes.io/component: primary app.kubernetes.io/instance: keycloak app.kubernetes.io/name: postgresql + policyTypes: + - Ingress + - Egress diff --git a/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/pdb.yaml b/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/pdb.yaml new file mode 100644 index 000000000..2c1927dca --- /dev/null +++ b/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/pdb.yaml @@ -0,0 +1,19 @@ +apiVersion: policy/v1 +kind: PodDisruptionBudget +metadata: + labels: + app.kubernetes.io/component: primary + app.kubernetes.io/instance: builtin + app.kubernetes.io/managed-by: commodore + app.kubernetes.io/name: keycloak + app.kubernetes.io/version: 18.1.0 + helm.sh/chart: postgresql-18.1.11 + name: keycloak-postgresql + namespace: syn-builtin +spec: + maxUnavailable: 1 + selector: + matchLabels: + app.kubernetes.io/component: primary + app.kubernetes.io/instance: keycloak + app.kubernetes.io/name: postgresql diff --git a/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/statefulset.yaml b/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/statefulset.yaml index b0cb1eb09..c07af9a95 100644 --- a/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/statefulset.yaml +++ b/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/statefulset.yaml @@ -6,8 +6,8 @@ metadata: app.kubernetes.io/instance: builtin app.kubernetes.io/managed-by: commodore app.kubernetes.io/name: keycloak - app.kubernetes.io/version: 15.4.0 - helm.sh/chart: postgresql-12.12.10 + app.kubernetes.io/version: 18.1.0 + helm.sh/chart: postgresql-18.1.11 name: keycloak-postgresql namespace: syn-builtin spec: @@ -29,8 +29,8 @@ spec: app.kubernetes.io/instance: keycloak app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: postgresql - app.kubernetes.io/version: 15.4.0 - helm.sh/chart: postgresql-12.12.10 + app.kubernetes.io/version: 18.1.0 + helm.sh/chart: postgresql-18.1.11 name: keycloak-postgresql spec: affinity: @@ -46,6 +46,7 @@ spec: app.kubernetes.io/name: postgresql topologyKey: kubernetes.io/hostname weight: 1 + automountServiceAccountToken: false containers: - env: - name: BITNAMI_DEBUG @@ -54,20 +55,16 @@ spec: value: '5432' - name: POSTGRESQL_VOLUME_DIR value: /bitnami/postgresql + - name: OPENSSL_FIPS + value: 'yes' - name: PGDATA value: /bitnami/postgresql/data - name: POSTGRES_USER value: keycloak - - name: POSTGRES_PASSWORD - valueFrom: - secretKeyRef: - key: password - name: keycloak-postgresql - - name: POSTGRES_POSTGRES_PASSWORD - valueFrom: - secretKeyRef: - key: postgres-password - name: keycloak-postgresql + - name: POSTGRES_PASSWORD_FILE + value: /opt/bitnami/postgresql/secrets/password + - name: POSTGRES_POSTGRES_PASSWORD_FILE + value: /opt/bitnami/postgresql/secrets/postgres-password - name: POSTGRES_DATABASE value: keycloak - name: POSTGRESQL_ENABLE_LDAP @@ -119,26 +116,45 @@ spec: - | exec pg_isready -U "keycloak" -d "dbname=keycloak sslcert=/opt/bitnami/postgresql/certs/tls.crt sslkey=/opt/bitnami/postgresql/certs/tls.key" -h 127.0.0.1 -p 5432 [ -f /opt/bitnami/postgresql/tmp/.initialized ] || [ -f /bitnami/postgresql/.initialized ] + [ -f /opt/bitnami/postgresql/tmp/.initialized ] || [ -f /bitnami/postgresql/.initialized ] failureThreshold: 6 initialDelaySeconds: 5 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 resources: - limits: {} + limits: + cpu: 150m + ephemeral-storage: 2Gi + memory: 192Mi requests: - cpu: 250m - memory: 256Mi + cpu: 100m + ephemeral-storage: 50Mi + memory: 128Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL + privileged: false + readOnlyRootFilesystem: true runAsNonRoot: true runAsUser: 1001 + seLinuxOptions: {} seccompProfile: type: RuntimeDefault volumeMounts: + - mountPath: /tmp + name: empty-dir + subPath: tmp-dir + - mountPath: /opt/bitnami/postgresql/conf + name: empty-dir + subPath: app-conf-dir + - mountPath: /opt/bitnami/postgresql/tmp + name: empty-dir + subPath: app-tmp-dir + - mountPath: /opt/bitnami/postgresql/secrets/ + name: postgresql-password - mountPath: /opt/bitnami/postgresql/certs name: postgresql-certificates readOnly: true @@ -162,19 +178,32 @@ spec: cp /tmp/certs/* /opt/bitnami/postgresql/certs/ chown -R 1001:1001 /opt/bitnami/postgresql/certs/ chmod 600 /opt/bitnami/postgresql/certs/tls.key + env: + - name: OPENSSL_FIPS + value: 'yes' image: docker.io/bitnamilegacy/os-shell:12-debian-12-r49 imagePullPolicy: IfNotPresent name: init-chmod-data resources: - limits: {} - requests: {} + limits: + cpu: 150m + ephemeral-storage: 2Gi + memory: 192Mi + requests: + cpu: 100m + ephemeral-storage: 50Mi + memory: 128Mi securityContext: runAsGroup: 0 runAsNonRoot: false runAsUser: 0 + seLinuxOptions: {} seccompProfile: type: RuntimeDefault volumeMounts: + - mountPath: /tmp + name: empty-dir + subPath: tmp-dir - mountPath: /bitnami/postgresql name: data - mountPath: /dev/shm @@ -185,8 +214,16 @@ spec: name: postgresql-certificates securityContext: fsGroup: 1001 - serviceAccountName: default + fsGroupChangePolicy: Always + supplementalGroups: [] + sysctls: [] + serviceAccountName: keycloak-postgresql volumes: + - emptyDir: {} + name: empty-dir + - name: postgresql-password + secret: + secretName: keycloak-postgresql - name: raw-certificates secret: secretName: keycloak-postgresql-tls diff --git a/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/svc-headless.yaml b/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/svc-headless.yaml index 654cd2202..9212a958d 100644 --- a/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/svc-headless.yaml +++ b/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/svc-headless.yaml @@ -1,15 +1,14 @@ apiVersion: v1 kind: Service metadata: - annotations: - service.alpha.kubernetes.io/tolerate-unready-endpoints: 'true' + annotations: null labels: app.kubernetes.io/component: primary app.kubernetes.io/instance: keycloak app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: postgresql - app.kubernetes.io/version: 15.4.0 - helm.sh/chart: postgresql-12.12.10 + app.kubernetes.io/version: 18.1.0 + helm.sh/chart: postgresql-18.1.11 name: keycloak-postgresql-hl namespace: syn-builtin spec: diff --git a/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/svc.yaml b/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/svc.yaml index bdfb944ce..2f4084eec 100644 --- a/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/svc.yaml +++ b/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/primary/svc.yaml @@ -6,8 +6,8 @@ metadata: app.kubernetes.io/instance: keycloak app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: postgresql - app.kubernetes.io/version: 15.4.0 - helm.sh/chart: postgresql-12.12.10 + app.kubernetes.io/version: 18.1.0 + helm.sh/chart: postgresql-18.1.11 name: keycloak-postgresql namespace: syn-builtin spec: @@ -20,5 +20,4 @@ spec: app.kubernetes.io/component: primary app.kubernetes.io/instance: keycloak app.kubernetes.io/name: postgresql - sessionAffinity: None type: ClusterIP diff --git a/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml b/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml new file mode 100644 index 000000000..6557154cc --- /dev/null +++ b/tests/golden/builtin/builtin/builtin/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml @@ -0,0 +1,12 @@ +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + labels: + app.kubernetes.io/instance: keycloak + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: postgresql + app.kubernetes.io/version: 18.1.0 + helm.sh/chart: postgresql-18.1.11 + name: keycloak-postgresql + namespace: syn-builtin diff --git a/tests/golden/external/external/external/01_keycloak_helmchart/postgresql/templates/primary/pdb.yaml b/tests/golden/external/external/external/01_keycloak_helmchart/postgresql/templates/primary/pdb.yaml new file mode 100644 index 000000000..e69de29bb diff --git a/tests/golden/external/external/external/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml b/tests/golden/external/external/external/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml new file mode 100644 index 000000000..69af34e90 --- /dev/null +++ b/tests/golden/external/external/external/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml @@ -0,0 +1,12 @@ +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + labels: + app.kubernetes.io/instance: keycloak + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: postgresql + app.kubernetes.io/version: 18.1.0 + helm.sh/chart: postgresql-18.1.11 + name: keycloak-postgresql + namespace: syn-external diff --git a/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/networkpolicy.yaml b/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/networkpolicy.yaml index 6c6d127ce..4b1bf8f64 100644 --- a/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/networkpolicy.yaml +++ b/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/networkpolicy.yaml @@ -6,21 +6,21 @@ metadata: app.kubernetes.io/instance: keycloak app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: postgresql - app.kubernetes.io/version: 15.4.0 - helm.sh/chart: postgresql-12.12.10 - name: keycloak-postgresql-ingress + app.kubernetes.io/version: 18.1.0 + helm.sh/chart: postgresql-18.1.11 + name: keycloak-postgresql namespace: syn-openshift-postgres spec: + egress: + - {} ingress: - - from: - - podSelector: - matchLabels: - app.kubernetes.io/instance: keycloakx - app.kubernetes.io/name: keycloakx - ports: + - ports: - port: 5432 podSelector: matchLabels: app.kubernetes.io/component: primary app.kubernetes.io/instance: keycloak app.kubernetes.io/name: postgresql + policyTypes: + - Ingress + - Egress diff --git a/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/pdb.yaml b/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/pdb.yaml new file mode 100644 index 000000000..28693c258 --- /dev/null +++ b/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/pdb.yaml @@ -0,0 +1,19 @@ +apiVersion: policy/v1 +kind: PodDisruptionBudget +metadata: + labels: + app.kubernetes.io/component: primary + app.kubernetes.io/instance: openshift-postgres + app.kubernetes.io/managed-by: commodore + app.kubernetes.io/name: keycloak + app.kubernetes.io/version: 18.1.0 + helm.sh/chart: postgresql-18.1.11 + name: keycloak-postgresql + namespace: syn-openshift-postgres +spec: + maxUnavailable: 1 + selector: + matchLabels: + app.kubernetes.io/component: primary + app.kubernetes.io/instance: keycloak + app.kubernetes.io/name: postgresql diff --git a/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/statefulset.yaml b/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/statefulset.yaml index 1da3b0694..6671b5778 100644 --- a/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/statefulset.yaml +++ b/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/statefulset.yaml @@ -6,8 +6,8 @@ metadata: app.kubernetes.io/instance: openshift-postgres app.kubernetes.io/managed-by: commodore app.kubernetes.io/name: keycloak - app.kubernetes.io/version: 15.4.0 - helm.sh/chart: postgresql-12.12.10 + app.kubernetes.io/version: 18.1.0 + helm.sh/chart: postgresql-18.1.11 name: keycloak-postgresql namespace: syn-openshift-postgres spec: @@ -29,8 +29,8 @@ spec: app.kubernetes.io/instance: keycloak app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: postgresql - app.kubernetes.io/version: 15.4.0 - helm.sh/chart: postgresql-12.12.10 + app.kubernetes.io/version: 18.1.0 + helm.sh/chart: postgresql-18.1.11 name: keycloak-postgresql spec: affinity: @@ -46,6 +46,7 @@ spec: app.kubernetes.io/name: postgresql topologyKey: kubernetes.io/hostname weight: 1 + automountServiceAccountToken: false containers: - env: - name: BITNAMI_DEBUG @@ -54,20 +55,16 @@ spec: value: '5432' - name: POSTGRESQL_VOLUME_DIR value: /bitnami/postgresql + - name: OPENSSL_FIPS + value: 'yes' - name: PGDATA value: /bitnami/postgresql/data - name: POSTGRES_USER value: keycloak - - name: POSTGRES_PASSWORD - valueFrom: - secretKeyRef: - key: password - name: keycloak-postgresql - - name: POSTGRES_POSTGRES_PASSWORD - valueFrom: - secretKeyRef: - key: postgres-password - name: keycloak-postgresql + - name: POSTGRES_PASSWORD_FILE + value: /opt/bitnami/postgresql/secrets/password + - name: POSTGRES_POSTGRES_PASSWORD_FILE + value: /opt/bitnami/postgresql/secrets/postgres-password - name: POSTGRES_DATABASE value: keycloak - name: POSTGRESQL_ENABLE_LDAP @@ -119,25 +116,44 @@ spec: - | exec pg_isready -U "keycloak" -d "dbname=keycloak sslcert=/opt/bitnami/postgresql/certs/tls.crt sslkey=/opt/bitnami/postgresql/certs/tls.key" -h 127.0.0.1 -p 5432 [ -f /opt/bitnami/postgresql/tmp/.initialized ] || [ -f /bitnami/postgresql/.initialized ] + [ -f /opt/bitnami/postgresql/tmp/.initialized ] || [ -f /bitnami/postgresql/.initialized ] failureThreshold: 6 initialDelaySeconds: 5 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 resources: - limits: {} + limits: + cpu: 150m + ephemeral-storage: 2Gi + memory: 192Mi requests: - cpu: 250m - memory: 256Mi + cpu: 100m + ephemeral-storage: 50Mi + memory: 128Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL + privileged: false + readOnlyRootFilesystem: true runAsNonRoot: true + seLinuxOptions: {} seccompProfile: type: RuntimeDefault volumeMounts: + - mountPath: /tmp + name: empty-dir + subPath: tmp-dir + - mountPath: /opt/bitnami/postgresql/conf + name: empty-dir + subPath: app-conf-dir + - mountPath: /opt/bitnami/postgresql/tmp + name: empty-dir + subPath: app-tmp-dir + - mountPath: /opt/bitnami/postgresql/secrets/ + name: postgresql-password - mountPath: /opt/bitnami/postgresql/certs name: postgresql-certificates readOnly: true @@ -152,32 +168,53 @@ spec: - | cp /tmp/certs/* /opt/bitnami/postgresql/certs/ chmod 600 /opt/bitnami/postgresql/certs/tls.key + env: + - name: OPENSSL_FIPS + value: 'yes' image: docker.io/bitnamilegacy/os-shell:12-debian-12-r49 imagePullPolicy: IfNotPresent name: copy-certs resources: - limits: {} + limits: + cpu: 150m + ephemeral-storage: 2Gi + memory: 192Mi requests: - cpu: 250m - memory: 256Mi + cpu: 100m + ephemeral-storage: 50Mi + memory: 128Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL + privileged: false + readOnlyRootFilesystem: true runAsNonRoot: true + seLinuxOptions: {} seccompProfile: type: RuntimeDefault volumeMounts: + - mountPath: /tmp + name: empty-dir + subPath: tmp-dir - mountPath: /tmp/certs name: raw-certificates - mountPath: /opt/bitnami/postgresql/certs name: postgresql-certificates securityContext: + fsGroupChangePolicy: Always seccompProfile: type: RuntimeDefault - serviceAccountName: default + supplementalGroups: [] + sysctls: [] + serviceAccountName: keycloak-postgresql volumes: + - emptyDir: {} + name: empty-dir + - name: postgresql-password + secret: + secretName: keycloak-postgresql - name: raw-certificates secret: secretName: keycloak-postgresql-tls diff --git a/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/svc-headless.yaml b/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/svc-headless.yaml index 416f3ed75..2be703045 100644 --- a/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/svc-headless.yaml +++ b/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/svc-headless.yaml @@ -1,15 +1,14 @@ apiVersion: v1 kind: Service metadata: - annotations: - service.alpha.kubernetes.io/tolerate-unready-endpoints: 'true' + annotations: null labels: app.kubernetes.io/component: primary app.kubernetes.io/instance: keycloak app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: postgresql - app.kubernetes.io/version: 15.4.0 - helm.sh/chart: postgresql-12.12.10 + app.kubernetes.io/version: 18.1.0 + helm.sh/chart: postgresql-18.1.11 name: keycloak-postgresql-hl namespace: syn-openshift-postgres spec: diff --git a/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/svc.yaml b/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/svc.yaml index 7c73c82ae..0c633a5cd 100644 --- a/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/svc.yaml +++ b/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/primary/svc.yaml @@ -6,8 +6,8 @@ metadata: app.kubernetes.io/instance: keycloak app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: postgresql - app.kubernetes.io/version: 15.4.0 - helm.sh/chart: postgresql-12.12.10 + app.kubernetes.io/version: 18.1.0 + helm.sh/chart: postgresql-18.1.11 name: keycloak-postgresql namespace: syn-openshift-postgres spec: @@ -20,5 +20,4 @@ spec: app.kubernetes.io/component: primary app.kubernetes.io/instance: keycloak app.kubernetes.io/name: postgresql - sessionAffinity: None type: ClusterIP diff --git a/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml b/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml new file mode 100644 index 000000000..90b46d5d9 --- /dev/null +++ b/tests/golden/openshift-postgres/openshift-postgres/openshift-postgres/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml @@ -0,0 +1,12 @@ +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + labels: + app.kubernetes.io/instance: keycloak + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: postgresql + app.kubernetes.io/version: 18.1.0 + helm.sh/chart: postgresql-18.1.11 + name: keycloak-postgresql + namespace: syn-openshift-postgres diff --git a/tests/golden/openshift/openshift/openshift/01_keycloak_helmchart/postgresql/templates/primary/pdb.yaml b/tests/golden/openshift/openshift/openshift/01_keycloak_helmchart/postgresql/templates/primary/pdb.yaml new file mode 100644 index 000000000..e69de29bb diff --git a/tests/golden/openshift/openshift/openshift/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml b/tests/golden/openshift/openshift/openshift/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml new file mode 100644 index 000000000..9b0b7a50d --- /dev/null +++ b/tests/golden/openshift/openshift/openshift/01_keycloak_helmchart/postgresql/templates/serviceaccount.yaml @@ -0,0 +1,12 @@ +apiVersion: v1 +automountServiceAccountToken: false +kind: ServiceAccount +metadata: + labels: + app.kubernetes.io/instance: keycloak + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: postgresql + app.kubernetes.io/version: 18.1.0 + helm.sh/chart: postgresql-18.1.11 + name: keycloak-postgresql + namespace: keycloak-dev