keycloak: update quay.io/keycloak/keycloak Docker tag to v26.3.2

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
quay.io/keycloak/keycloak	Kustomization	minor	26.1.4 -> 26.3.2

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Infro diff for cb2705a

argocd.hashbang.sh > external-dns (2 files changed)

time="2025-08-12T10:58:04Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
time="2025-08-12T10:58:07Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."

===== /Service external-dns/external-dns ======
--- /tmp/argocd-diff374665515/external-dns-live.yaml
+++ /tmp/argocd-diff374665515/external-dns
@@ -2,9 +2,11 @@
 kind: Service
 metadata:
   annotations:
+    argocd.argoproj.io/tracking-id: external-dns:/Service:external-dns/external-dns
     kubectl.kubernetes.io/last-applied-configuration: |
       {"apiVersion":"v1","kind":"Service","metadata":{"annotations":{},"labels":{"app.kubernetes.io/name":"external-dns"},"name":"external-dns","namespace":"external-dns"},"spec":{"ports":[{"name":"metrics","port":7979,"targetPort":7979}],"selector":{"app.kubernetes.io/name":"external-dns"}}}
   labels:
+    app.kubernetes.io/instance: external-dns
     app.kubernetes.io/name: external-dns
   name: external-dns
   namespace: external-dns

===== /ServiceAccount external-dns/external-dns ======
--- /tmp/argocd-diff220848312/external-dns-live.yaml
+++ /tmp/argocd-diff220848312/external-dns
@@ -2,9 +2,11 @@
 kind: ServiceAccount
 metadata:
   annotations:
+    argocd.argoproj.io/tracking-id: external-dns:/ServiceAccount:external-dns/external-dns
     kubectl.kubernetes.io/last-applied-configuration: |
       {"apiVersion":"v1","kind":"ServiceAccount","metadata":{"annotations":{},"labels":{"app.kubernetes.io/name":"external-dns"},"name":"external-dns","namespace":"external-dns"}}
   labels:
+    app.kubernetes.io/instance: external-dns
     app.kubernetes.io/name: external-dns
   name: external-dns
   namespace: external-dns

===== apps/Deployment external-dns/external-dns ======
--- /tmp/argocd-diff2955803496/external-dns-live.yaml
+++ /tmp/argocd-diff2955803496/external-dns
@@ -2,11 +2,13 @@
 kind: Deployment
 metadata:
   annotations:
+    argocd.argoproj.io/tracking-id: external-dns:apps/Deployment:external-dns/external-dns
     deployment.kubernetes.io/revision: "11"
     kubectl.kubernetes.io/last-applied-configuration: |
       {"apiVersion":"apps/v1","kind":"Deployment","metadata":{"annotations":{},"labels":{"app.kubernetes.io/name":"external-dns"},"name":"external-dns","namespace":"external-dns"},"spec":{"selector":{"matchLabels":{"app.kubernetes.io/name":"external-dns"}},"strategy":{"type":"Recreate"},"template":{"metadata":{"labels":{"app.kubernetes.io/name":"external-dns"}},"spec":{"containers":[{"args":["--source=service","--source=ingress","--registry=txt","--provider=aws","--txt-owner-id=digitalocean-hashbang","--txt-prefix=_owner.","--source=crd","--domain-filter=hashbang.sh","--managed-record-types=A","--managed-record-types=CNAME","--managed-record-types=TXT"],"env":[{"name":"AWS_REGION","value":"us-west-2"},{"name":"AWS_ACCESS_KEY_ID","value":"AKIAR7CEWFK35SZX5S66"},{"name":"AWS_SECRET_ACCESS_KEY","valueFrom":{"secretKeyRef":{"key":"key","name":"external-dns-iam"}}}],"image":"registry.k8s.io/external-dns/external-dns:v0.16.1@sha256:37d3a7a05c4638b8177382b80a627c223bd84a53c1a91be137245bd3cfdf9986","name":"external-dns","ports":[{"containerPort":7979,"name":"metrics"}]}],"securityContext":{"fsGroup":65534},"serviceAccountName":"external-dns"}}}}
   generation: 11
   labels:
+    app.kubernetes.io/instance: external-dns
     app.kubernetes.io/name: external-dns
   managedFields:
   - apiVersion: apps/v1
@@ -150,11 +152,6 @@
         - --provider=aws
         - --txt-owner-id=digitalocean-hashbang
         - --txt-prefix=_owner.
-        - --source=crd
-        - --domain-filter=hashbang.sh
-        - --managed-record-types=A
-        - --managed-record-types=CNAME
-        - --managed-record-types=TXT
         env:
         - name: AWS_REGION
           value: us-west-2

===== cilium.io/CiliumNetworkPolicy external-dns/external-dns ======
--- /tmp/argocd-diff1506128870/external-dns-live.yaml
+++ /tmp/argocd-diff1506128870/external-dns
@@ -2,10 +2,12 @@
 kind: CiliumNetworkPolicy
 metadata:
   annotations:
+    argocd.argoproj.io/tracking-id: external-dns:cilium.io/CiliumNetworkPolicy:external-dns/external-dns
     kubectl.kubernetes.io/last-applied-configuration: |
       {"apiVersion":"cilium.io/v2","kind":"CiliumNetworkPolicy","metadata":{"annotations":{},"labels":{"app.kubernetes.io/name":"external-dns"},"name":"external-dns","namespace":"external-dns"},"spec":{"egress":[{"toEntities":["cluster"]},{"toEntities":["cluster"],"toPorts":[{"ports":[{"port":"53","protocol":"ANY"}],"rules":{"dns":[{"matchPattern":"*.amazonaws.com"}]}}]},{"toEntities":["world"],"toPorts":[{"ports":[{"port":"443","protocol":"TCP"}]}]}],"endpointSelector":{"matchLabels":{"k8s:app":"external-dns"}},"ingress":[{"fromEntities":["cluster"],"toPorts":[{"ports":[{"port":"7979","protocol":"TCP"}],"rules":{"http":[{"method":"GET","path":"/metrics"}]}}]}]}}
   generation: 32
   labels:
+    app.kubernetes.io/instance: external-dns
     app.kubernetes.io/name: external-dns
   name: external-dns
   namespace: external-dns

===== monitoring.coreos.com/ServiceMonitor external-dns/external-dns-server-metrics ======
--- /tmp/argocd-diff2022263040/external-dns-server-metrics-live.yaml
+++ /tmp/argocd-diff2022263040/external-dns-server-metrics
@@ -3,10 +3,12 @@
 metadata:
   annotations:
     argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+    argocd.argoproj.io/tracking-id: external-dns:monitoring.coreos.com/ServiceMonitor:external-dns/external-dns-server-metrics
     kubectl.kubernetes.io/last-applied-configuration: |
       {"apiVersion":"monitoring.coreos.com/v1","kind":"ServiceMonitor","metadata":{"annotations":{"argocd.argoproj.io/sync-options":"SkipDryRunOnMissingResource=true"},"labels":{"app.kubernetes.io/name":"external-dns","prometheusInstance":"default"},"name":"external-dns-server-metrics","namespace":"external-dns"},"spec":{"endpoints":[{"port":"metrics"}],"selector":{"matchLabels":{"app.kubernetes.io/name":"external-dns"}}}}
   generation: 1
   labels:
+    app.kubernetes.io/instance: external-dns
     app.kubernetes.io/name: external-dns
     prometheusInstance: default
   managedFields:

===== rbac.authorization.k8s.io/ClusterRole /external-dns ======
--- /tmp/argocd-diff4016837707/external-dns-live.yaml
+++ /tmp/argocd-diff4016837707/external-dns
@@ -2,9 +2,11 @@
 kind: ClusterRole
 metadata:
   annotations:
+    argocd.argoproj.io/tracking-id: external-dns:rbac.authorization.k8s.io/ClusterRole:external-dns/external-dns
     kubectl.kubernetes.io/last-applied-configuration: |
       {"apiVersion":"rbac.authorization.k8s.io/v1","kind":"ClusterRole","metadata":{"annotations":{},"labels":{"app.kubernetes.io/name":"external-dns"},"name":"external-dns"},"rules":[{"apiGroups":[""],"resources":["endpoints","pods","services"],"verbs":["get","watch","list"]},{"apiGroups":["extensions"],"resources":["ingresses"],"verbs":["get","watch","list"]},{"apiGroups":["networking.k8s.io"],"resources":["ingresses"],"verbs":["get","watch","list"]},{"apiGroups":[""],"resources":["nodes"],"verbs":["watch","list"]},{"apiGroups":["externaldns.k8s.io"],"resources":["dnsendpoints"],"verbs":["get","watch","list"]},{"apiGroups":["externaldns.k8s.io"],"resources":["dnsendpoints/status"],"verbs":["*"]}]}
   labels:
+    app.kubernetes.io/instance: external-dns
     app.kubernetes.io/name: external-dns
   name: external-dns
   resourceVersion: "710536737"
@@ -43,17 +45,3 @@
   verbs:
   - watch
   - list
-- apiGroups:
-  - externaldns.k8s.io
-  resources:
-  - dnsendpoints
-  verbs:
-  - get
-  - watch
-  - list
-- apiGroups:
-  - externaldns.k8s.io
-  resources:
-  - dnsendpoints/status
-  verbs:
-  - '*'

===== rbac.authorization.k8s.io/ClusterRoleBinding /external-dns-viewer ======
--- /tmp/argocd-diff4181016083/external-dns-viewer-live.yaml
+++ /tmp/argocd-diff4181016083/external-dns-viewer
@@ -2,9 +2,11 @@
 kind: ClusterRoleBinding
 metadata:
   annotations:
+    argocd.argoproj.io/tracking-id: external-dns:rbac.authorization.k8s.io/ClusterRoleBinding:external-dns/external-dns-viewer
     kubectl.kubernetes.io/last-applied-configuration: |
       {"apiVersion":"rbac.authorization.k8s.io/v1","kind":"ClusterRoleBinding","metadata":{"annotations":{},"labels":{"app.kubernetes.io/name":"external-dns"},"name":"external-dns-viewer"},"roleRef":{"apiGroup":"rbac.authorization.k8s.io","kind":"ClusterRole","name":"external-dns"},"subjects":[{"kind":"ServiceAccount","name":"external-dns","namespace":"external-dns"}]}
   labels:
+    app.kubernetes.io/instance: external-dns
     app.kubernetes.io/name: external-dns
   name: external-dns-viewer
   resourceVersion: "710536742"

argocd.hashbang.sh > ircd (0 files changed)

time="2025-08-12T10:58:11Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
time="2025-08-12T10:58:14Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."

===== apps/Deployment ircd/irc-deployment ======
--- /tmp/argocd-diff865999474/irc-deployment-live.yaml
+++ /tmp/argocd-diff865999474/irc-deployment
@@ -30,7 +30,7 @@
         app: irc
     spec:
       containers:
-      - image: ghcr.io/ergochat/ergo:v2.14.0@sha256:ef4040d18044a53c8c995defb3159018cf2e83030e5db068c3976d9343c826a5
+      - image: ghcr.io/ergochat/ergo:v2.15.0@sha256:135cd42c6300d957e0045ee53fbe886e43e1c04bb621391ed7b8940c174d68f3
         imagePullPolicy: IfNotPresent
         livenessProbe:
           failureThreshold: 3
@@ -78,7 +78,7 @@
           echo "Exiting.";
         command:
         - /bin/sh
-        image: ghcr.io/ergochat/ergo:v2.14.0@sha256:ef4040d18044a53c8c995defb3159018cf2e83030e5db068c3976d9343c826a5
+        image: ghcr.io/ergochat/ergo:v2.15.0@sha256:135cd42c6300d957e0045ee53fbe886e43e1c04bb621391ed7b8940c174d68f3
         imagePullPolicy: IfNotPresent
         name: config-reloader
         resources: {}

argocd.hashbang.sh > keycloak (0 files changed)

time="2025-08-12T10:58:18Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."
time="2025-08-12T10:58:21Z" level=warning msg="Failed to invoke grpc call. Use flag --grpc-web in grpc calls. To avoid this warning message, use flag --grpc-web."

===== apps/Deployment keycloak/keycloak ======
--- /tmp/argocd-diff2400060658/keycloak-live.yaml
+++ /tmp/argocd-diff2400060658/keycloak
@@ -237,7 +237,7 @@
             name: keycloak-config-hdcdhkmdtd
         - secretRef:
             name: keycloak-config-9kffb44m7f
-        image: quay.io/keycloak/keycloak:26.1.4@sha256:044a457e04987e1fff756be3d2fa325a4ef420fa356b7034ecc9f1b693c32761
+        image: quay.io/keycloak/keycloak:26.3.2@sha256:98fab020a3a490aba0978f237e2a06cd0ea42bf149c6cf10f11c0aaf27728ff2
         imagePullPolicy: IfNotPresent
         livenessProbe:
           failureThreshold: 3