update keycloak

This commit is contained in:
2025-03-29 23:27:21 +01:00
parent c3b409204a
commit cb80b8222e
3 changed files with 82 additions and 54 deletions

View File

@@ -7,7 +7,7 @@ spec:
- hosts:
- sso.panic.haus
rules:
- host: sso.panic.hausT
- host: sso.panic.haus
http:
paths:
- path: /

View File

@@ -0,0 +1,55 @@
apiVersion: v1
kind: Service
metadata:
name: keycloak
namespace: keycloak
labels:
app: keycloak
spec:
ports:
- name: http
port: 8080
targetPort: 8080
selector:
app: keycloak
type: ClusterIP
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: keycloak
namespace: keycloak
labels:
app: keycloak
spec:
replicas: 1
selector:
matchLabels:
app: keycloak
template:
metadata:
labels:
app: keycloak
spec:
containers:
- name: keycloak
image: quay.io/keycloak/keycloak:26.1.4
args: ["start-dev"]
env:
- name: KEYCLOAK_ADMIN
value: "admin"
- name: KEYCLOAK_ADMIN_PASSWORD
value: "admin"
- name: KC_PROXY_HEADERS
value: "xforwarded"
- name: KC_HTTP_ENABLED
value: "true"
- name: KC_HEALTH_ENABLED
value: "true"
ports:
- name: http
containerPort: 8080
readinessProbe:
httpGet:
path: /health/ready
port: 9000

View File

@@ -1,53 +1,26 @@
apiVersion: v1
kind: Service
metadata:
name: keycloak
labels:
app: keycloak
spec:
ports:
- name: http
port: 8080
targetPort: 8080
selector:
app: keycloak
type: ClusterIP
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: keycloak
labels:
app: keycloak
spec:
replicas: 1
selector:
matchLabels:
app: keycloak
template:
metadata:
labels:
app: keycloak
spec:
containers:
- name: keycloak
image: quay.io/keycloak/keycloak:26.1.4
args: ["start-dev"]
env:
- name: KEYCLOAK_ADMIN
value: "admin"
- name: KEYCLOAK_ADMIN_PASSWORD
value: "admin"
- name: KC_PROXY_HEADERS
value: "xforwarded"
- name: KC_HTTP_ENABLED
value: "true"
- name: KC_HEALTH_ENABLED
value: "true"
ports:
- name: http
containerPort: 8080
readinessProbe:
httpGet:
path: /health/ready
port: 9000
global:
defaultStorageClass: longhorn
proxy: edge
production: true
proxyHeaders: 'xforwarded'
adminIngress:
enabled: true
hostname: sso.panic.haus
ingress:
path: /
tls: true
enabled: true
controller: default
hostname: sso.panic.haus
annotations:
cert-manager.io/cluster-issuer: le-prod
postgresql:
enabled:
false
externalDatabase:
host: postgres-base-rw.postgres
user: keycloak
database: keycloakdb
password: u825qCNxfrBScKToTd3W9zKVPxpVsi7L
replicaCount: 3