add vault support

clusters/yc-k8s-test/infrastructure/patches/keycloak.yaml

@@ -16,6 +16,32 @@ spec:
       size: 10Gi
     postgresql:
       enabled: false
+    vaultEnv:
+      enabled: true
+      role: keycloak
+      authPath: auth/kubernetes
+      envFiles:
+        KEYCLOAK_ADMIN_PASSWORD:
+          path: secrets/data/keycloak/admin
+          key: password
+        KEYCLOAK_PASSWORD:
+          path: secrets/data/keycloak/admin
+          key: password
+        KEYCLOAK_DATABASE_HOST:
+          path: secrets/data/keycloak/postgresql
+          key: host
+        KEYCLOAK_DATABASE_PORT:
+          path: secrets/data/keycloak/postgresql
+          key: port
+        KEYCLOAK_DATABASE_USER:
+          path: secrets/data/keycloak/postgresql
+          key: user
+        KEYCLOAK_DATABASE_NAME:
+          path: secrets/data/keycloak/postgresql
+          key: database
+        KEYCLOAK_DATABASE_PASSWORD:
+          path: secrets/data/keycloak/postgresql
+          key: password
     externalDatabase:
       host: "postgresql.postgresql.svc.cluster.local"
       port: 5432

infrastructure/keycloak/base/helmrelease.yaml

@@ -8,7 +8,7 @@ spec:
   chart:
     spec:
       chart: keycloak-contour
-      version: "22.2.6"
+      version: "22.2.7"
       sourceRef:
         kind: HelmRepository
         name: yc-oci-charts