bitnami · gongomgra · Nov 11, 2025 · Oct 14, 2025 · Oct 14, 2025 · Oct 14, 2025
diff --git a/bitnami/keycloak/CHANGELOG.md b/bitnami/keycloak/CHANGELOG.md
@@ -1,12 +1,16 @@
 # Changelog
 
-## 25.2.5 (2025-10-09)
+## 25.2.6 (2025-10-20)
 
-* [bitnami/keycloak] Fix: Rename duplicated secret labels ([#36254](https://github.com/bitnami/charts/pull/36254))
+* [bitnami/keycloak] New param javaOptsAppendExtra to append additional java opts  ([#36350](https://github.com/bitnami/charts/pull/36350))
 
-## <small>25.2.4 (2025-09-23)</small>
+## <small>25.2.5 (2025-10-08)</small>
 
-* [bitnami/keycloak] Fix indentation in ingress TLS secret template ([#36282](https://github.com/bitnami/charts/pull/36282))
+* [bitnami/keycloak] Fix: Rename duplicated secret labels (#36254) ([9b3915b](https://github.com/bitnami/charts/commit/9b3915b649a9b08fbfad1fa82cc24e48232edd36)), closes [#36254](https://github.com/bitnami/charts/issues/36254)
+
+## <small>25.2.4 (2025-10-02)</small>
+
+* [bitnami/keycloak] Fix indentation in ingress TLS secret template (#36282) ([3f7fa45](https://github.com/bitnami/charts/commit/3f7fa45393366ca67af940efa64acfab89c05e75)), closes [#36282](https://github.com/bitnami/charts/issues/36282)
 
 ## <small>25.2.3 (2025-09-11)</small>
 

diff --git a/bitnami/keycloak/Chart.yaml b/bitnami/keycloak/Chart.yaml
@@ -35,4 +35,4 @@ maintainers:
 name: keycloak
 sources:
 - https://github.com/bitnami/charts/tree/main/bitnami/keycloak
-version: 25.2.5
+version: 25.2.6
diff --git a/bitnami/keycloak/README.md b/bitnami/keycloak/README.md
@@ -414,6 +414,7 @@ There are cases where you may want to deploy extra objects, such a ConfigMap con
 | `cache.stack`                                       | Cache stack to use                                                                                                                                                                                                | `jdbc-ping`                |
 | `cache.configFile`                                  | Path to the file from which cache configuration should be loaded from                                                                                                                                             | `cache-ispn.xml`           |
 | `cache.useHeadlessServiceWithAppVersion`            | Create a headless service used for ispn containing the app version                                                                                                                                                | `false`                    |
+| `cache.javaOptsAppendExtra`                         | Extra java options to append to the java options                                                                                                                                                                  | `""`                       |
 | `logging.output`                                    | Alternates between the default log output format or json format                                                                                                                                                   | `default`                  |
 | `logging.level`                                     | Allowed values as documented: FATAL, ERROR, WARN, INFO, DEBUG, TRACE, ALL, OFF                                                                                                                                    | `INFO`                     |
 | `configuration`                                     | Keycloak Configuration. Auto-generated based on other parameters when not specified                                                                                                                               | `""`                       |

diff --git a/bitnami/keycloak/templates/configmap-env-vars.yaml b/bitnami/keycloak/templates/configmap-env-vars.yaml
@@ -74,7 +74,11 @@ data:
   {{- if .Values.cache.configFile }}
   KC_CACHE_CONFIG_FILE: {{ .Values.cache.configFile | quote }}
   {{- end }}
-  JAVA_OPTS_APPEND: {{ printf "-Djgroups.dns.query=%s.%s.svc.%s" (ternary (include "keycloak.headless.ispn.serviceName" .) (include "keycloak.headless.serviceName" .) .Values.cache.useHeadlessServiceWithAppVersion) (include "common.names.namespace" .) .Values.clusterDomain | quote }}
+  {{- $javaOptsAppend := printf "-Djgroups.dns.query=%s-headless.%s.svc.%s" (include "common.names.fullname" .) (include "common.names.namespace" .) .Values.clusterDomain -}}
+  {{- if .Values.cache.javaOptsAppendExtra }}
+  {{- $javaOptsAppend = printf "%s %s" $javaOptsAppend .Values.cache.javaOptsAppendExtra -}}
+  {{- end }}
+  JAVA_OPTS_APPEND: {{ quote $javaOptsAppend }}
 {{- end }}
   KC_HTTP_RELATIVE_PATH: {{ .Values.httpRelativePath | quote }}
   {{- if .Values.adminRealm }}

diff --git a/bitnami/keycloak/values.yaml b/bitnami/keycloak/values.yaml
@@ -207,12 +207,14 @@ httpRelativePath: "/"
 ## @param cache.stack Cache stack to use
 ## @param cache.configFile Path to the file from which cache configuration should be loaded from
 ## @param cache.useHeadlessServiceWithAppVersion Create a headless service used for ispn containing the app version
+## @param cache.javaOptsAppendExtra Extra java options to append to the java options
 ##
 cache:
   enabled: true
   stack: jdbc-ping
   configFile: "cache-ispn.xml"
   useHeadlessServiceWithAppVersion: false
+  javaOptsAppendExtra: ""
 ## Keycloak logging configuration
 ## ref: https://www.keycloak.org/server/logging
 ## @param logging.output Alternates between the default log output format or json format
@@ -1292,4 +1294,4 @@ externalDatabase:
   existingSecretUserKey: ""
   existingSecretPasswordKey: ""
   annotations: {}
-  extraParams: ""
+  extraParams: ""