bea/infra-prod
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update keycloak

Browse Source
This commit is contained in:
Beatrice Dellacà
2025-03-30 18:18:29 +02:00
parent 94c3b3b7a7
commit c3658c08d2
1 changed files with 3 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
deploy/keycloak/keycloak.yaml
View File

@@ -53,10 +53,9 @@ spec:
- "start" - "start"
- "--cache=ispn" # Enable distributed Infinispan cache (HA mode) [oai_citation_attribution:0‡keycloak.org](https://www.keycloak.org/server/caching#:~:text=When%20you%20start%20Keycloak%20in,in%20your%20network%20are%20discovered) - "--cache=ispn" # Enable distributed Infinispan cache (HA mode) [oai_citation_attribution:0‡keycloak.org](https://www.keycloak.org/server/caching#:~:text=When%20you%20start%20Keycloak%20in,in%20your%20network%20are%20discovered)
- "--cache-stack=kubernetes" # Use built-in Kubernetes stack for clustering (DNS_PING) - "--cache-stack=kubernetes" # Use built-in Kubernetes stack for clustering (DNS_PING)
# - "--hostname=https://sso.panic.haus" # External URL for Keycloak (use HTTPS for TLS offload) - "--hostname=https://sso.panic.haus" # External URL for Keycloak (use HTTPS for TLS offload)
- "--http-enabled=true" # Allow Keycloak to listen on HTTP (for edge TLS termination) [oai_citation_attribution:1‡keycloak.org](https://www.keycloak.org/server/hostname#:~:text=provides%20the%20flexibility%20for%20users,start%20the%20server%20as%20follows) - "--http-enabled=true" # Allow Keycloak to listen on HTTP (for edge TLS termination) [oai_citation_attribution:1‡keycloak.org](https://www.keycloak.org/server/hostname#:~:text=provides%20the%20flexibility%20for%20users,start%20the%20server%20as%20follows)
- "-Djgroups.dns.query=keycloak-headless" - "-Djgroups.dns.query=keycloak-headless"
- "--optimized"
env: env:
- name: KEYCLOAK_ADMIN - name: KEYCLOAK_ADMIN
value: "admin" value: "admin"
@@ -64,8 +63,8 @@ spec:
value: "admin" value: "admin"
# - name: KC_PROXY_HEADERS # - name: KC_PROXY_HEADERS
# value: "xforwarded" # value: "xforwarded"
# - name: KC_HOSTNAME - name: KC_HOSTNAME
# value: "sso.panic.haus" value: "sso.panic.haus"
- name: KC_HTTP_ENABLED - name: KC_HTTP_ENABLED
value: "true" value: "true"
- name: KC_HEALTH_ENABLED - name: KC_HEALTH_ENABLED