diff --git a/apps.yaml b/apps.yaml index 380d460249..cc56569a5e 100644 --- a/apps.yaml +++ b/apps.yaml @@ -97,7 +97,7 @@ appsInfo: integration: App Platform has security best practices built in, and is designed for intrusion. Istio is used by App Platform as a service mesh to deliver mTLS enforcement for all traffic that is deemed compromisable, egress control to force teams to choose explicit egress endpoints, and advanced routing capabilities such as weight based load balancing (A/B or blue/green testing). Istio is part of the core of App Platform and can not be disabled. keycloak: title: Keycloak - appVersion: 26.5.6 + appVersion: 26.6.2 repo: https://github.com/keycloak/keycloak maintainers: Keycloak relatedLinks: diff --git a/chart/chart-index/Chart.yaml b/chart/chart-index/Chart.yaml index fbe5d19498..617ad8599d 100644 --- a/chart/chart-index/Chart.yaml +++ b/chart/chart-index/Chart.yaml @@ -53,7 +53,7 @@ dependencies: repository: https://istio-release.storage.googleapis.com/charts - name: keycloakx alias: keycloak - version: 7.1.11 + version: 7.2.0 repository: https://codecentric.github.io/helm-charts - name: knative-operator version: v1.22.1 diff --git a/charts/keycloak/Chart.yaml b/charts/keycloak/Chart.yaml index ba1ac608cf..0ff0081aac 100644 --- a/charts/keycloak/Chart.yaml +++ b/charts/keycloak/Chart.yaml @@ -1,5 +1,5 @@ apiVersion: v2 -appVersion: 26.5.6 +appVersion: 26.6.2 description: Keycloak.X - Open Source Identity and Access Management for Modern Applications and Services home: https://www.keycloak.org/ @@ -21,4 +21,4 @@ name: keycloakx sources: - https://github.com/codecentric/helm-charts - https://github.com/keycloak/keycloak/tree/main/quarkus/container -version: 7.1.11 +version: 7.2.0 diff --git a/charts/keycloak/templates/test/configmap-test.yaml b/charts/keycloak/templates/test/configmap-test.yaml index 6a3b69720a..da4ed13d61 100644 --- a/charts/keycloak/templates/test/configmap-test.yaml +++ b/charts/keycloak/templates/test/configmap-test.yaml @@ -14,23 +14,14 @@ data: #!/usr/bin/env bash set -eu - if ! python3 -c 'import selenium' &> /dev/null - then - if ! command -v pip3 &> /dev/null - then - echo 'Installing pip3...' - export PATH="$PATH:$HOME/.local/bin" - mkdir -p "$HOME/.config/pip" - echo -e '[global]\nbreak-system-packages = true' > "$HOME/.config/pip/pip.conf" - wget -q -P "$HOME" https://bootstrap.pypa.io/get-pip.py - python3 "$HOME/get-pip.py" --user 1> /dev/null - fi - + if ! python3 -c 'import selenium' &> /dev/null; then echo 'Installing selenium module...' - pip3 -q install selenium + python3 -m venv /tmp/test-venv + /tmp/test-venv/bin/pip install -q selenium + exec /tmp/test-venv/bin/python "$(dirname "$0")/test.py" fi - python3 "$(dirname $0)/test.py" + python3 "$(dirname "$0")/test.py" test.py: | import os from selenium import webdriver diff --git a/charts/keycloak/values.yaml b/charts/keycloak/values.yaml index 85b99b3fb9..d5d974b7cc 100644 --- a/charts/keycloak/values.yaml +++ b/charts/keycloak/values.yaml @@ -11,7 +11,7 @@ image: # The Keycloak image repository repository: quay.io/keycloak/keycloak # Overrides the Keycloak image tag whose default is the chart appVersion - tag: "26.5.6" + tag: "26.6.2" # Overrides the Keycloak image tag with a specific digest digest: "" # The Keycloak image pull policy @@ -616,17 +616,17 @@ test: enabled: false image: # The image for the test Pod - repository: docker.io/seleniarm/standalone-chromium + repository: docker.io/selenium/standalone-chromium # The tag for the test Pod image - tag: "117.0" + tag: "147.0" # The image pull policy for the test Pod image pullPolicy: IfNotPresent # SecurityContext for the entire test Pod podSecurityContext: - fsGroup: 1000 + fsGroup: 1200 # UID of seluser in selenium/standalone-chromium # SecurityContext for the test container securityContext: - runAsUser: 1000 + runAsUser: 1200 # UID of seluser in selenium/standalone-chromium runAsNonRoot: true # See https://helm.sh/docs/topics/charts_hooks/#hook-deletion-policies deletionPolicy: before-hook-creation