[keycloak] Allow to choose restartPolicy (#55)

Signed-off-by: Masion Frédéric <[email protected]>

Author: fmasion

charts/keycloak/Chart.yaml

@@ -1,5 +1,5 @@
 name: keycloak
-version: 4.14.2
+version: 4.15.0
 appVersion: 5.0.0
 description: Open Source Identity and Access Management For Modern Applications and Services
 keywords:

charts/keycloak/README.md

@@ -70,6 +70,7 @@ Parameter | Description | Default
 `keycloak.podAnnotations` | Extra annotations to add to pod | `{}`
 `keycloak.hostAliases` | Mapping between IP and hostnames that will be injected as entries in the pod's hosts files | `[]`
 `keycloak.enableServiceLinks` | Indicates whether information about services should be injected into pod's environment variables, matching the syntax of Docker links | `false`
+`keycloak.restartPolicy` | Pod restart policy. One of `Always`, `OnFailure`, or `Never` | `Always`
 `keycloak.serviceAccount.create` | If `true`, a new service account is created | `false`
 `keycloak.securityContext` | Security context for the entire pod. Every container running in the pod will inherit this security context. This might be relevant when other components of the environment inject additional containers into running pods (service meshs are the most prominent example for this) | `{fsGroup: 1000}`
 `keycloak.containerSecurityContext` | Security context for containers running in the pod. Will not be inherited by additionally injected containers | `{runAsUser: 1000, runAsNonRoot: true}`

charts/keycloak/templates/statefulset.yaml

@@ -39,6 +39,7 @@ spec:
       {{- if (semverCompare ">=1.13-0" .Capabilities.KubeVersion.GitVersion) }}
       enableServiceLinks: {{ .Values.keycloak.enableServiceLinks }}
       {{- end }}
+      restartPolicy: {{ .Values.keycloak.restartPolicy }}
       serviceAccountName: {{ template "keycloak.serviceAccountName" . }}
       securityContext:
 {{ toYaml .Values.keycloak.securityContext | indent 8 }}

charts/keycloak/values.yaml

@@ -28,6 +28,8 @@ keycloak:
 
   enableServiceLinks: false
 
+  restartPolicy: Always
+
   serviceAccount:
     # Specifies whether a service account should be created
     create: false