Add keycloak chart (#10)

* Improve README with usage

* Add empty charts

* Use Let's Encrypt for certificats

* Fix typo

* cert-manager - Remove CRD file

* gitlab - update URLs

* Add keycloak chart

* Add comment

* Bump versions

Author: devpro

README.md

@@ -5,6 +5,10 @@
 
 Helm charts to ease the deployment of containers on Kubernetes clusters and get information on widely used components.
 
+## Quickstart
+
+* Visit [devpro.github.io/helm-charts](https://devpro.github.io/helm-charts/)
+
 ## Catalog
 
 * Applications
@@ -13,10 +17,11 @@ Helm charts to ease the deployment of containers on Kubernetes clusters and get
   * [WordPress](charts/wordpress/README.md) 🗸
 * Backing services
   * [Kafka](charts/kafka/README.md)
-  * [Keycloak](charts/Keycloak/README.md)
+  * [Keycloak](charts/keycloak/README.md) 🗸
   * [MariaDB](charts/mariadb/README.md) 🗸
   * [memcached](charts/memcached/README.md)
   * [MongoDB](charts/mongodb/README.md)
+  * [MQTT](charts/mqtt/README.md)
   * [PostgreSQL](charts/postgresql/README.md)
   * [RabbitMQ](charts/rabbitmq/README.md)
   * [Redis](charts/redis/README.md)
@@ -26,6 +31,7 @@ Helm charts to ease the deployment of containers on Kubernetes clusters and get
 * Kube add-ons
   * [ArgoCD](charts/argo-cd/README.md) 🗸
   * [cert-manager](charts/cert-manager/README.md) 🗸
+  * [external-dns](charts/external-dns/README.md)
   * [HAProxy](charts/haproxy/README.md)
   * [Istio](charts/istio/README.md)
   * [Kong](charts/kong/README.md)
@@ -41,17 +47,71 @@ Helm charts to ease the deployment of containers on Kubernetes clusters and get
 * Security
   * [NeuVector](charts/neuvector/README.md) 🗸
 * Software Factory (supply chain)
+  * [Artifactory](charts/artifactory/README.md)
   * [Azure DevOps Agent](charts/azure-devops-agent/README.md)
   * [Concourse](charts/concourse/README.md)
   * [Drone](charts/drone/README.md)
   * [GitLab](charts/gitlab/README.md) 🗸
   * [GitLab Runner](charts/gitlab-runner/README.md)
   * [Harbor](charts/harbor/README.md) 🗸
+  * [Jira](charts/jira/README.md)
+  * [Nexus](charts/nexus/README.md)
   * [SonarQube](charts/sonarqube/README.md) 🗸
   * [Tekton](charts/tekton/README.md)
 
 Limitation: [Helm Chart Releaser](https://github.com/helm/chart-releaser) doesn't support multiple chart directories ou multiple levels so all charts must be in `charts` repository
 
+## Usage
+
+### From Helm CLI
+
+```bash
+# adds the Helm repository
+helm repo add devpro https://devpro.github.io/helm-charts
+
+# searches for a specific package from the command line
+helm repo search <package_name>
+
+# installs a package
+helm install <package_name>
+```
+
+### From ArgoCD
+
+* Create a git repository to store Kubernetes definition files (GitOps approach)
+
+```yaml
+# wordpress/Chart.yaml
+apiVersion: v2
+name: wordpress
+description: Helm chart for installing WordPress
+type: application
+version: 0.1.0
+appVersion: 1.0.0
+dependencies:
+  - name: wordpress
+    version: 0.1.1
+    repository: https://devpro.github.io/helm-charts
+```
+
+* Create a new application in ArgoCD to reference the git repository with the path to the folder
+
+### From Fleet
+
+* Create a git repository to store Kubernetes definition files (GitOps approach)
+
+```yaml
+# wordpress/fleet.yaml
+defaultNamespace: sample-apps
+helm:
+  repo: https://devpro.github.io/helm-charts
+  chart: wordpress
+  version: 0.1.1
+  releaseName: wordpress
+```
+
+* Create a GitRepo to reference the git repository with the path to the folder
+
 ## Cluster setup logic
 
 * Create a Kubernetes Cluster and get CLI access (download `kubectl` configuration)

charts/Keycloak/Chart.lock

@@ -0,0 +1,6 @@
+dependencies:
+- name: keycloak
+  repository: https://charts.bitnami.com/bitnami
+  version: 12.1.3
+digest: sha256:3f010ce6f75ce94c67301c19c0fe2551b82ba287ffef63c6db24f9a42bc97f1d
+generated: "2022-11-24T20:55:19.448675175+01:00"

charts/Keycloak/Chart.yaml

@@ -0,0 +1,13 @@
+apiVersion: v2
+name: keycloak
+description: Helm chart for managing Keycloak
+type: application
+version: "0.1.0"
+appVersion: "19.0.3"
+dependencies:
+  - name: keycloak
+    version: 12.1.3
+    repository: https://charts.bitnami.com/bitnami
+maintainers:
+  - name: devpro
+    email: bertrand@devpro.fr

charts/Keycloak/README.md

@@ -0,0 +1,54 @@
+# Keycloack
+
+This Helm chart will install [Keycloack](https://www.keycloak.org/) ([docs](https://www.keycloak.org/documentation), [code](https://github.com/keycloak/keycloak))
+and is based from the [Bitnami Helm chart](https://bitnami.com/stack/keycloak/helm) ([docs]((https://github.com/bitnami/charts/tree/main/bitnami/keycloak))).
+
+## How to update the chart
+
+```bash
+# adds helm chart repository
+helm repo add bitnami https://charts.bitnami.com/bitnami
+helm repo update
+
+# searches for the latest version
+helm search repo -l keycloak
+
+# manual: update version number in Chart.yaml
+
+# updates Chart.lock
+helm dependency update
+```
+
+## How to deploy manually
+
+```bash
+# gets ingress controller public IP
+NGINX_PUBLIC_IP=`kubectl get service -n ingress-nginx ingress-nginx-controller --output jsonpath='{.status.loadBalancer.ingress[0].ip}'`
+
+# checks the Kubernetes objects generated from the chart
+helm template keycloak . -f values.yaml \
+  --namespace supply-chain > temp.yaml
+
+# applies the manifest (add "--debug > output.yaml" in case of issue)
+helm upgrade --install keycloak . -f values.yaml --create-namespace \
+  --set keycloak.ingress.hostname=keycloak.${NGINX_PUBLIC_IP}.sslip.io \
+  --namespace authentication
+
+# checks everything is ok
+kubectl get svc,deploy,pod,ingress,pv,certificate -n authentication
+
+# manual: open https://keycloak.${NGINX_PUBLIC_IP}.sslip.io/ (and login with user/Admin1234)
+
+# if needed, deletes the chart
+helm uninstall keycloak -n authentication
+```
+
+## How to start once the application is running
+
+* [Get started with Keycloak on Kubernetes](https://www.keycloak.org/getting-started/getting-started-kube)
+
+## How to investigate
+
+### Known issue
+
+* Creating the secret at the same time as the chart may cause issue, create the secret first

charts/Keycloak/values.yaml

@@ -0,0 +1,17 @@
+# https://github.com/bitnami/charts/blob/main/bitnami/keycloak/values.yaml
+keycloak:
+  auth:
+    adminUser: user
+    adminPassword: Admin1234
+    # existingSecret: keycloak-credentials
+    # passwordSecretKey: admin-password
+  # production: false
+  ingress:
+    enabled: true
+    ingressClassName: nginx
+    annotations:
+      cert-manager.io/cluster-issuer: letsencrypt-prod
+    tls: true
+  # extraEnvVars:
+  #   - name: KEYCLOAK_LOG_LEVEL
+  #     value: DEBUG

charts/artifactory/README.md

@@ -0,0 +1,3 @@
+# Artifactory
+
+[docs](https://jfrog.com/knowledge-base/artifactory-installation-quick-start-guide-helm/)

charts/cert-manager/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: cert-manager
 description: Helm chart for managing cert-manager
 type: application
-version: "0.1.2"
+version: "0.1.3"
 appVersion: "1.10.0"
 dependencies:
   - name: cert-manager

charts/cert-manager/README.md

@@ -21,9 +21,6 @@ helm search repo cert-manager
 
 # updates Chart.lock (and downloads locally the charts)
 helm dependency update
-
-# refreshes CRD file
-wget -O crds/cert-manager.crds.yaml https://github.com/cert-manager/cert-manager/releases/download/v1.10.0/cert-manager.crds.yaml
 ```
 
 ## How to deploy manually
@@ -32,15 +29,15 @@ wget -O crds/cert-manager.crds.yaml https://github.com/cert-manager/cert-manager
 # checks the Kubernetes objects generated from the chart
 helm template cert-manager . -f values.yaml --namespace cert-manager > temp.yaml
 
-# installs the chart with helm (with CRDs)
-helm install cert-manager . -f values.yaml --create-namespace --namespace cert-manager
+# applies CRD file (to be done once)
+kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.10.0/cert-manager.crds.yaml
+
+# installs the chart with helm
+helm upgrade --install cert-manager . -f values.yaml --namespace cert-manager
 
 # checks deployments (the 3 of them should be READY 1/1)
 kubectl get deploy -n cert-manager
 
-# updates an existing installation (CRDs won't be installed)
-helm upgrade --install cert-manager . -f values.yaml --namespace cert-manager
-
 # if needed, deletes the chart
 helm delete cert-manager -n cert-manager
 kubectl delete ns cert-manager