From edddcfc5aec344805d7887204a06f5f5a4d31a07 Mon Sep 17 00:00:00 2001
From: Dominique Metz <dominique.metz@codecentric.de>
Date: Thu, 30 Apr 2026 14:17:43 +0200
Subject: [PATCH]  fix(keycloakx): replace archived seleniarm image in Helm

 The seleniarm project was archived in 2024. Switch to the selenium/standalone-chromium image (SeleniumHQ absorbed seleniarm's
  multi-arch work), bumping Chromium from 117.0 to 147.0.

Signed-off-by: Dominique Metz <dominique.metz@codecentric.de>
---
 .../templates/test/configmap-test.yaml        | 19 +++++--------------
 charts/keycloakx/values.yaml                  |  8 ++++----
 2 files changed, 9 insertions(+), 18 deletions(-)

diff --git a/charts/keycloakx/templates/test/configmap-test.yaml b/charts/keycloakx/templates/test/configmap-test.yaml
index 6a3b69720..da4ed13d6 100644
--- a/charts/keycloakx/templates/test/configmap-test.yaml
+++ b/charts/keycloakx/templates/test/configmap-test.yaml
@@ -14,23 +14,14 @@ data:
     #!/usr/bin/env bash
     set -eu
 
-    if ! python3 -c 'import selenium' &> /dev/null
-    then
-      if ! command -v pip3 &> /dev/null
-      then
-        echo 'Installing pip3...'
-        export PATH="$PATH:$HOME/.local/bin"
-        mkdir -p "$HOME/.config/pip"
-        echo -e '[global]\nbreak-system-packages = true' > "$HOME/.config/pip/pip.conf"
-        wget -q -P "$HOME" https://bootstrap.pypa.io/get-pip.py
-        python3 "$HOME/get-pip.py" --user 1> /dev/null
-      fi
-
+    if ! python3 -c 'import selenium' &> /dev/null; then
       echo 'Installing selenium module...'
-      pip3 -q install selenium
+      python3 -m venv /tmp/test-venv
+      /tmp/test-venv/bin/pip install -q selenium
+      exec /tmp/test-venv/bin/python "$(dirname "$0")/test.py"
     fi
 
-    python3 "$(dirname $0)/test.py"
+    python3 "$(dirname "$0")/test.py"
   test.py: |
     import os
     from selenium import webdriver
diff --git a/charts/keycloakx/values.yaml b/charts/keycloakx/values.yaml
index 85b99b3fb..eb41e1cdb 100644
--- a/charts/keycloakx/values.yaml
+++ b/charts/keycloakx/values.yaml
@@ -616,17 +616,17 @@ test:
   enabled: false
   image:
     # The image for the test Pod
-    repository: docker.io/seleniarm/standalone-chromium
+    repository: docker.io/selenium/standalone-chromium
     # The tag for the test Pod image
-    tag: "117.0"
+    tag: "147.0"
     # The image pull policy for the test Pod image
     pullPolicy: IfNotPresent
   # SecurityContext for the entire test Pod
   podSecurityContext:
-    fsGroup: 1000
+    fsGroup: 1200  # UID of seluser in selenium/standalone-chromium
   # SecurityContext for the test container
   securityContext:
-    runAsUser: 1000
+    runAsUser: 1200  # UID of seluser in selenium/standalone-chromium
     runAsNonRoot: true
   # See https://helm.sh/docs/topics/charts_hooks/#hook-deletion-policies
   deletionPolicy: before-hook-creation