feat: add expose service entry for internal cluster traffic

src/keycloak/chart/templates/istio-service-entry.yaml

@@ -0,0 +1,18 @@
+{{- if .Capabilities.APIVersions.Has "networking.istio.io/v1beta1" }}
+apiVersion: networking.istio.io/v1beta1
+kind: ServiceEntry
+metadata:
+  name: {{ include "keycloak.fullname" . }}-internal-service-entry
+  namespace: {{ .Release.Namespace }}
+spec:
+  hosts:
+  - sso.{{ .Values.domain }}
+  location: MESH_INTERNAL
+  ports:
+  - number: 443
+    name: https
+    protocol: HTTPS
+  resolution: DNS
+  endpoints:
+    - address: tenant-ingressgateway.istio-tenant-gateway.svc.cluster.local
+{{- end }}

src/keycloak/chart/templates/secret-admin-password.yaml

@@ -13,7 +13,7 @@ apiVersion: v1
 kind: Secret
 metadata:
   name: {{ $secretName }}
-  namespace: {{ .Release.Namespace }}  
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "keycloak.labels" . | nindent 4 }}
 type: Opaque

src/keycloak/chart/templates/secret-postgresql.yaml

@@ -3,7 +3,7 @@ apiVersion: v1
 kind: Secret
 metadata:
   name: {{ include "keycloak.fullname" . }}-postgresql
-  namespace: {{ .Release.Namespace }}  
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "keycloak.labels" . | nindent 4 }}
 type: Opaque