Skip to content

refactor: absorb ZTVP RHBK config into rh-keycloak wrapper#146

Open
minmzzhang wants to merge 1 commit into
validatedpatterns:mainfrom
minmzzhang:generalize-rhbk-chart
Open

refactor: absorb ZTVP RHBK config into rh-keycloak wrapper#146
minmzzhang wants to merge 1 commit into
validatedpatterns:mainfrom
minmzzhang:generalize-rhbk-chart

Conversation

@minmzzhang

@minmzzhang minmzzhang commented Jun 17, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • Move all ZTVP-specific RHBK configuration from the generic rhbk subchart into the rh-keycloak wrapper chart values (realm, placeholders, extra secrets, SPIFFE, vault paths)
  • Rely on the OCI dependency (oci://quay.io/validatedpatterns/rhbk >=0.1.0) for the generalized rhbk subchart
  • Fix pipeline git-clone basic-auth workspace binding (conditional on git.credentials.enabled)

Dependencies

Test plan

  • helm lint and helm template pass on rh-keycloak wrapper
  • ArgoCD deploys all applications synced and healthy (tested with vendored subchart)
  • Keycloak realm import succeeds with data-driven placeholders and extra secrets
  • Pipeline git-clone works without credentials for public repos

@minmzzhang minmzzhang changed the title refactor: absorb ZTVP RHBK config into wrapper + enable supply chain refactor: absorb ZTVP RHBK config into rh-keycloak wrapper Jun 17, 2026
Move all ZTVP-specific configuration from the generic rhbk subchart
into the rh-keycloak wrapper values: full ZTVP realm definition,
realm import placeholders, extra secrets (keycloak-users, ACS OIDC,
RHTPA CLI OIDC), SPIFFE Identity Provider enablement, and vault paths.

Update rh-keycloak Chart.yaml to depend on rhbk >=0.1.0 (generalized).

Also fix pipeline git-clone basic-auth workspace binding to be
conditional on git.credentials.enabled, preventing failures when
cloning public repos without credentials configured.

Signed-off-by: Min Zhang <minzhang@redhat.com>
@minmzzhang minmzzhang force-pushed the generalize-rhbk-chart branch from 0815516 to b7aa8da Compare June 17, 2026 15:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant