Aleksandr Bogomiakov
e257e3895b
Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 10s
76 lines
1.5 KiB
YAML
76 lines
1.5 KiB
YAML
replicas: 1
|
|
|
|
image:
|
|
repository: quay.io/keycloak/keycloak
|
|
tag: "26.5.6"
|
|
|
|
command:
|
|
- "/opt/keycloak/bin/kc.sh"
|
|
- "start"
|
|
- "--http-port=8080"
|
|
- "--hostname-strict=false"
|
|
- "--proxy-headers=xforwarded"
|
|
|
|
extraEnvFrom: |
|
|
- secretRef:
|
|
name: keycloak-creds
|
|
- secretRef:
|
|
name: keycloak-bootstrap
|
|
|
|
extraEnv: |
|
|
- name: KC_HOSTNAME
|
|
value: auth.hexor.cy
|
|
- name: JAVA_OPTS_APPEND
|
|
value: "-Djgroups.dns.query=keycloak-keycloakx-headless.keycloak.svc"
|
|
|
|
extraVolumes: |
|
|
- name: hacker-theme
|
|
configMap:
|
|
name: keycloak-hacker-theme
|
|
|
|
extraVolumeMounts: |
|
|
- name: hacker-theme
|
|
mountPath: /opt/keycloak/themes/hacker/login/theme.properties
|
|
subPath: theme.properties
|
|
- name: hacker-theme
|
|
mountPath: /opt/keycloak/themes/hacker/login/css/hacker.css
|
|
subPath: hacker.css
|
|
|
|
dbchecker:
|
|
enabled: true
|
|
|
|
database:
|
|
vendor: postgres
|
|
hostname: main-rw.psql.svc
|
|
port: 5432
|
|
database: keycloak
|
|
existingSecret: keycloak-creds
|
|
existingSecretKey: KC_DB_PASSWORD
|
|
|
|
service:
|
|
type: ClusterIP
|
|
|
|
# HTTP is redirected to HTTPS by the cluster-wide Traefik default (core/traefik-config).
|
|
ingress:
|
|
enabled: true
|
|
ingressClassName: traefik
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: letsencrypt
|
|
rules:
|
|
- host: auth.hexor.cy
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
tls:
|
|
- secretName: keycloak-tls
|
|
hosts:
|
|
- auth.hexor.cy
|
|
|
|
resources:
|
|
requests:
|
|
cpu: 500m
|
|
memory: 1Gi
|
|
limits:
|
|
cpu: "3"
|
|
memory: 2Gi
|