diff --git a/bitnami/keycloak/CHANGELOG.md b/bitnami/keycloak/CHANGELOG.md
index 09a951118d2559..59072db534463c 100644
--- a/bitnami/keycloak/CHANGELOG.md
+++ b/bitnami/keycloak/CHANGELOG.md
@@ -1,12 +1,16 @@
# Changelog
-## 25.2.5 (2025-10-09)
+## 25.3.0 (2025-11-11)
-* [bitnami/keycloak] Fix: Rename duplicated secret labels ([#36254](https://github.com/bitnami/charts/pull/36254))
+* [bitnami/keycloak] New param javaOptsAppendExtra to append additional java opts ([#36350](https://github.com/bitnami/charts/pull/36350))
-## 25.2.4 (2025-09-23)
+## 25.2.5 (2025-10-08)
-* [bitnami/keycloak] Fix indentation in ingress TLS secret template ([#36282](https://github.com/bitnami/charts/pull/36282))
+* [bitnami/keycloak] Fix: Rename duplicated secret labels (#36254) ([9b3915b](https://github.com/bitnami/charts/commit/9b3915b649a9b08fbfad1fa82cc24e48232edd36)), closes [#36254](https://github.com/bitnami/charts/issues/36254)
+
+## 25.2.4 (2025-10-02)
+
+* [bitnami/keycloak] Fix indentation in ingress TLS secret template (#36282) ([3f7fa45](https://github.com/bitnami/charts/commit/3f7fa45393366ca67af940efa64acfab89c05e75)), closes [#36282](https://github.com/bitnami/charts/issues/36282)
## 25.2.3 (2025-09-11)
@@ -1335,7 +1339,7 @@
## 7.1.1 (2022-03-10)
-* [bitnami/keycloak] Remove unused 'database-password' key (#9315) ([b4c79bd](https://github.com/bitnami/charts/commit/b4c79bd326d27541834a62a2cf8df209fdfbdf54)), closes [#9315](https://github.com/bitnami/charts/issues/9315) [#9274](https://github.com/bitnami/charts/issues/9274)
+* [bitnami/keycloak] Remove unused 'database-password' key (#9315) ([b4c79bd](https://github.com/bitnami/charts/commit/b4c79bd326d27541834a62a2cf8df209fdfbdf54)), closes [#9315](https://github.com/bitnami/charts/issues/9315)
## 7.1.0 (2022-03-08)
@@ -1375,7 +1379,7 @@
## 6.2.1 (2022-02-25)
-* [bitnami/Keycloak] Improve documentation for tls ingress (#8973) ([11c0116](https://github.com/bitnami/charts/commit/11c01168577d8cb5ee61f9f890a1966c709d443e)), closes [#8973](https://github.com/bitnami/charts/issues/8973) [#7734](https://github.com/bitnami/charts/issues/7734)
+* [bitnami/Keycloak] Improve documentation for tls ingress (#8973) ([11c0116](https://github.com/bitnami/charts/commit/11c01168577d8cb5ee61f9f890a1966c709d443e)), closes [#8973](https://github.com/bitnami/charts/issues/8973)
## 6.2.0 (2022-02-23)
diff --git a/bitnami/keycloak/Chart.yaml b/bitnami/keycloak/Chart.yaml
index 077e198d3f7ce3..b5e9dc9fcf990e 100644
--- a/bitnami/keycloak/Chart.yaml
+++ b/bitnami/keycloak/Chart.yaml
@@ -35,4 +35,4 @@ maintainers:
name: keycloak
sources:
- https://github.com/bitnami/charts/tree/main/bitnami/keycloak
-version: 25.2.5
+version: 25.3.0
diff --git a/bitnami/keycloak/README.md b/bitnami/keycloak/README.md
index 4ec4e6ebf9c6a0..3c60de157de0a5 100644
--- a/bitnami/keycloak/README.md
+++ b/bitnami/keycloak/README.md
@@ -414,6 +414,7 @@ There are cases where you may want to deploy extra objects, such a ConfigMap con
| `cache.stack` | Cache stack to use | `jdbc-ping` |
| `cache.configFile` | Path to the file from which cache configuration should be loaded from | `cache-ispn.xml` |
| `cache.useHeadlessServiceWithAppVersion` | Create a headless service used for ispn containing the app version | `false` |
+| `cache.javaOptsAppendExtra` | Extra java options to append to the java options | `""` |
| `logging.output` | Alternates between the default log output format or json format | `default` |
| `logging.level` | Allowed values as documented: FATAL, ERROR, WARN, INFO, DEBUG, TRACE, ALL, OFF | `INFO` |
| `configuration` | Keycloak Configuration. Auto-generated based on other parameters when not specified | `""` |
diff --git a/bitnami/keycloak/templates/configmap-env-vars.yaml b/bitnami/keycloak/templates/configmap-env-vars.yaml
index b6633812d14789..fcb182d8879cec 100644
--- a/bitnami/keycloak/templates/configmap-env-vars.yaml
+++ b/bitnami/keycloak/templates/configmap-env-vars.yaml
@@ -74,7 +74,11 @@ data:
{{- if .Values.cache.configFile }}
KC_CACHE_CONFIG_FILE: {{ .Values.cache.configFile | quote }}
{{- end }}
- JAVA_OPTS_APPEND: {{ printf "-Djgroups.dns.query=%s.%s.svc.%s" (ternary (include "keycloak.headless.ispn.serviceName" .) (include "keycloak.headless.serviceName" .) .Values.cache.useHeadlessServiceWithAppVersion) (include "common.names.namespace" .) .Values.clusterDomain | quote }}
+ {{- $javaOptsAppend := printf "-Djgroups.dns.query=%s-headless.%s.svc.%s" (include "common.names.fullname" .) (include "common.names.namespace" .) .Values.clusterDomain -}}
+ {{- if .Values.cache.javaOptsAppendExtra }}
+ {{- $javaOptsAppend = printf "%s %s" $javaOptsAppend .Values.cache.javaOptsAppendExtra -}}
+ {{- end }}
+ JAVA_OPTS_APPEND: {{ quote $javaOptsAppend }}
{{- end }}
KC_HTTP_RELATIVE_PATH: {{ .Values.httpRelativePath | quote }}
{{- if .Values.adminRealm }}
diff --git a/bitnami/keycloak/values.yaml b/bitnami/keycloak/values.yaml
index 09fb96d53dda8a..3ae585de3525e9 100644
--- a/bitnami/keycloak/values.yaml
+++ b/bitnami/keycloak/values.yaml
@@ -207,12 +207,14 @@ httpRelativePath: "/"
## @param cache.stack Cache stack to use
## @param cache.configFile Path to the file from which cache configuration should be loaded from
## @param cache.useHeadlessServiceWithAppVersion Create a headless service used for ispn containing the app version
+## @param cache.javaOptsAppendExtra Extra java options to append to the java options
##
cache:
enabled: true
stack: jdbc-ping
configFile: "cache-ispn.xml"
useHeadlessServiceWithAppVersion: false
+ javaOptsAppendExtra: ""
## Keycloak logging configuration
## ref: https://www.keycloak.org/server/logging
## @param logging.output Alternates between the default log output format or json format
@@ -1292,4 +1294,4 @@ externalDatabase:
existingSecretUserKey: ""
existingSecretPasswordKey: ""
annotations: {}
- extraParams: ""
\ No newline at end of file
+ extraParams: ""