Add custom-values.yaml, READMD.md document

2025-11-26 15:11:54 +09:00
parent 2b649a78c6
commit 29d02dc6d3
3 changed files with 414 additions and 0 deletions
@@ -0,0 +1,70 @@
+catalog:
+  resources: {}
+  ingress:
+    enabled: true
+    annotations:
+      cert-manager.io/issuer: root-ca-issuer
+      cert-manager.io/duration: 8760h
+      cert-manager.io/renew-before: 720h
+      konghq.com/https-redirect-status-code: '301'
+      konghq.com/protocols: https
+
+    host: "lakekeeper.example.org"
+    ingressClassName: "kong"
+    tls:
+      enabled: true
+      secretName: "lakekeeper-tls"
+
+  # keycloak 사설 인증서 사용 시 설정
+  extraEnv:
+  - name: SSL_CERT_FILE
+    value: "/tmp/ca.crt"
+  extraVolumeMounts:
+  - name: keycloak-tls
+    mountPath: "/tmp/ca.crt"
+    subPath: ca.crt
+    readOnly: true
+  extraVolumes:
+  - name: keycloak-tls
+    secret:
+      secretName: root-ca-secret
+
+# lakekeeper DB
+postgresql:
+  storage:
+    className:
+    requestedSize: 5Gi
+  resources: {}
+
+
+# OIDC 인증
+auth:
+ oauth2:
+    providerUri: "https://keycloak.example.org/realms/paasup"
+    audience: "lakekeeper"
+    ui:
+      clientID: "lakekeeper"
+      scopes: "lakekeeper"
+authz:
+  backend: "openfga"
+  openfga:
+    apiKey: "your-api-key" # openfga.authn.preshared.key에 정의된 값가 동일하게 설정.
+    
+internalOpenFGA: true
+openfga:
+  resources: {}
+  # 테스트 환경 비활성화, authn을 oidc 타입으로 실행하기 위해서는 playground에서는 불가.
+  playground:
+    enabled: true
+  authn:
+    method: "preshared"
+    preshared:
+      # openssl rand -base64 32
+      keys: ["your-api-key"]
+  postgresql:
+    primary:
+      resources: {}
+      persistence:
+        storageClass: ""
+        size: 8Gi
+