fix(jgroup): Fix jgroup service name

templates/services.cue

@@ -52,14 +52,17 @@ import (
 
 #ServiceJgroup: #Service & {
 	#config:    #Config
-	#component: "jgroup"
+	#component: "jgroups"
 	spec: {
+		clusterIP: "None"
+		publishNotReadyAddresses: true
 		ports: [
 			{
 				name:       "jgroups"
 				port:       #config.cache.jgroups.port
 				protocol:   "TCP"
 				targetPort: "jgroups"
+				appProtocol: "tcp"
 			},
 		]
 	}

test/certificate.yaml

@@ -104,18 +104,21 @@ apiVersion: v1
 kind: Service
 metadata:
   labels:
-    app.kubernetes.io/component: jgroup
+    app.kubernetes.io/component: jgroups
     app.kubernetes.io/managed-by: timoni
     app.kubernetes.io/name: keycloak
     app.kubernetes.io/version: 0.0.0-devel
-  name: keycloak-jgroup
+  name: keycloak-jgroups
   namespace: test
 spec:
+  clusterIP: None
   ports:
-  - name: jgroups
+  - appProtocol: tcp
+    name: jgroups
     port: 7800
     protocol: TCP
     targetPort: jgroups
+  publishNotReadyAddresses: true
   selector:
     app.kubernetes.io/name: keycloak
   type: ClusterIP

test/pdb.yaml

@@ -28,18 +28,21 @@ apiVersion: v1
 kind: Service
 metadata:
   labels:
-    app.kubernetes.io/component: jgroup
+    app.kubernetes.io/component: jgroups
     app.kubernetes.io/managed-by: timoni
     app.kubernetes.io/name: keycloak
     app.kubernetes.io/version: 0.0.0-devel
-  name: keycloak-jgroup
+  name: keycloak-jgroups
   namespace: test
 spec:
+  clusterIP: None
   ports:
-  - name: jgroups
+  - appProtocol: tcp
+    name: jgroups
     port: 7800
     protocol: TCP
     targetPort: jgroups
+  publishNotReadyAddresses: true
   selector:
     app.kubernetes.io/name: keycloak
   type: ClusterIP

test/production-istio-values.cue

@@ -0,0 +1,71 @@
+// Note that this file must have no imports and all values must be concrete.
+
+// Unsecure Keycloak deployment in http with HA
+
+@if(!debug)
+
+package main
+
+// Defaults
+values: {
+
+	replicas: 2
+
+	virtualService: {
+		gateways: [{"istio-system/istio-ingressgateway"}]
+		hosts: [
+			"keycloak.myorgs.com",
+		]
+	}
+
+	networkPolicyCreate: true
+
+	networkPolicyRules: [{
+		from: [{
+			namespaceSelector: {
+				matchLabels: {
+					"kubernetes.io/metadata.name": "istio-system"
+				}
+			}
+			podSelector: {
+				matchLabels: {
+					app: "istio-ingressgateway"
+				}
+			}
+		},
+		]
+		ports: [{
+			protocol: "TCP"
+			port:     8080
+		},
+		]},
+	]
+	admin: {
+		password: {value: "FIXME-USE-SECRET"}
+	}
+	database: {
+		type: {value: "postgres"}
+		url: {value: "jdbc:postgresql://keycloak.postgres.svc.cluster.local/keycloakdb?sslmode=require"}
+		username: {
+			valueFrom: {
+				secretKeyRef: {
+					name: "keycloakdb.credentials"
+					key:  "username"
+				}
+			}
+		}
+		password: {
+			valueFrom: {
+				secretKeyRef: {
+					name: "keycloakdb.credentials"
+					key:  "password"
+				}
+			}
+		}
+	}
+	extraEnvs: [
+		{name: "KC_PROXY", value:           "edge"},
+		{name: "KC_HOSTNAME_STRICT", value: "false"},
+		{name: "KC_LOG_LEVEL", value:       "INFO"},
+	]
+}