Keycloak includes management endpoint in default service connection registration

[danegsta]

Is there an existing issue for this?

• I have searched the existing issues

Describe the bug

As reported by a user in #14411 (comment), when doing .WithReference(resource) we include ALL endpoints, even endpoints such as management dashboards that don't make sense as service discovery endpoints.

We need to add the ability to exclude an endpoint from the default reference set so that we can exclude endpoints that don't make sense by default.

Expected Behavior

No response

Steps To Reproduce

No response

Exceptions (if any)

No response

.NET Version info

No response

Anything else?

No response

[MihuBot]

I'm a bot. Here is a possible related and/or duplicate issue (I may be wrong):

• Provide a way of hiding http endpoints from the dashboard (for GRPC endpoints for example) #6454

[fdohrendorfG]

A bit of context

See:

aspire/src/Aspire.Hosting.Keycloak/KeycloakResourceBuilderExtensions.cs

Lines 71 to 72 in 1d9629e

	.WithHttpEndpoint(port: port, targetPort: DefaultContainerPort)
	.WithHttpEndpoint(targetPort: ManagementInterfaceContainerPort, name: ManagementEndpointName)

And:

aspire/src/Components/Aspire.Keycloak.Authentication/AspireKeycloakExtensions.cs

Line 187 in 1d9629e

return $"https+http://{serviceName}/realms/{realm}";