DEVOPS-2787 - Added support for keycloak Custom Resource based on the CRDs and managed by the keycloak operator

Author: yitzhaktal

chart/Chart.yaml

@@ -0,0 +1,6 @@
+dependencies:
+- name: lightrun-keycloak-operator
+  repository: file://../lightrun-keycloak-operator
+  version: 0.1.0
+digest: sha256:7549732d1dcdf3d2ce2cd43e5e2a1adc2722b408f9e5226981fa31ad181be457
+generated: "2025-06-20T23:00:11.691147+03:00"

charts/lightrun-helm-chart/Chart.lock

@@ -0,0 +1,11 @@
+apiVersion: v2
+name: lightrun-helm-chart
+description: Unlock real-time code-level observability with Lightrun
+version: 3.18.0
+appVersion: main
+
+dependencies:
+  - name: lightrun-keycloak-operator
+    version: "0.1.0"
+    repository: "file://../lightrun-keycloak-operator"
+    condition: deployments.keycloakOperator.enabled

charts/lightrun-helm-chart/Chart.yaml

@@ -248,9 +248,9 @@ spec:
             - name: SPRING_SECURITY_OAUTH2_RESOURCESERVER_JWT_ISSUER-URI
               value: "https://{{ .Values.general.lightrun_endpoint }}/auth/realms/lightrun"
             - name: SPRING_SECURITY_OAUTH2_RESOURCESERVER_JWT_JWK-SET-URI
-              value: "{{ include "http.scheme" . }}://{{ include "lightrun-keycloak.name" . }}:8080/auth/realms/lightrun/protocol/openid-connect/certs"
+              value: "{{ include "http.scheme" . }}://{{ include "lightrun-keycloak.serviceName" . }}:8080/auth/realms/lightrun/protocol/openid-connect/certs"
             - name: SPRING_SECURITY_KEYCLOAK_URL
-              value: "{{ include "http.scheme" . }}://{{ include "lightrun-keycloak.name" . }}:8080/auth"
+              value: "{{ include "http.scheme" . }}://{{ include "lightrun-keycloak.serviceName" . }}:8080/auth"
             {{ if or .Values.general.internal_tls.enabled .Values.deployments.redis.encryption.enabled }}
             - name: SPRING_REDIS_SSL
               value: "true"
@@ -373,7 +373,7 @@ spec:
             cpu: "100m"
         env:
           - name: URL
-            value: {{ include "http.scheme" . }}://{{ include "lightrun-keycloak.name" . }}:9000/auth/health/started {{ if .Values.general.internal_tls.enabled }}--no-check-certificate{{ end }}
+            value: {{ include "http.scheme" . }}://{{ include "lightrun-keycloak.serviceName" . }}:9000/auth/health/started {{ if .Values.general.internal_tls.enabled }}--no-check-certificate{{ end }}
 
       {{ if .Values.general.mq.enabled }}
       {{- include "lightrun-mq.initContainer.wait-for-rabbitmq" (merge (dict "imageConfig" .Values.deployments.backend.initContainers.wait_for_rabbitmq "securityContext" "lightrun-be.containerSecurityContext") .) | nindent 6 }}

chart/README.md renamed to charts/lightrun-helm-chart/README.md

@@ -95,7 +95,7 @@ spec:
             - name: BACKEND_URI
               value: {{ include "lightrun-be.name" . }}
             - name: KEYCLOAK_URI
-              value: {{ include "lightrun-keycloak.name" . }}
+              value: {{ include "lightrun-keycloak.serviceName" . }}
             {{- if .Values.deployments.frontend.extraEnvs }}
 
               {{- toYaml .Values.deployments.frontend.extraEnvs | nindent 12 }}

chart/templates/artifacts/configmap.yaml renamed to charts/lightrun-helm-chart/templates/artifacts/configmap.yaml

@@ -113,6 +113,14 @@ Container SecurityContext of lightrun frontend
 {{ include "lightrun.fullname" . }}-keycloak
 {{- end -}}
 
+{{- define "lightrun-keycloak.serviceName" -}}
+{{- if .Values.deployments.keycloak.useKeycloakOperator -}}
+{{ include "lightrun-keycloak.name" . }}-service
+{{- else -}}
+{{ include "lightrun-keycloak.name" . }}
+{{- end -}}
+{{- end -}}
+
 {{/*
 Create the name of the lightrun keycloak service account to use
 */}}