image:
  repository: paasup/keycloak
  tag: 17.0.1-legacy

ingress:
  enabled: true
  annotations:
    cert-manager.io/cluster-issuer: "root-ca-issuer"
  rules:
    - host: keycloak.example.org
      paths:
        - path: /
          pathType: Prefix
  tls:
    - hosts:
        - keycloak.example.org
      secretName: keycloak-tls

resources:
  requests:
    cpu: 100m
    memory: 500Mi
  limits:
    cpu: 4000m
    memory: 1000Mi

# 내장 DB 사용시 enable로 변경
postgresql:
  enabled: false

# 외부 DB 사용 시
# DB_VENDOR, DB_ADDR, DB_PORT, DB_DATABASE, DB_SCHEMA의 값을 배포된 DB의 값으로 변경
extraEnv: |
  - name: DB_VENDOR
    value: postgres
  - name: DB_ADDR
    value: postgresql-postgresql-ha-postgresql
  - name: DB_PORT
    value: "5432"
  - name: DB_DATABASE
    value: keycloak
  - name: DB_SCHEMA
    value: keycloak
  - name: KEYCLOAK_USER
    value: admin
  - name: KEYCLOAK_PASSWORD
    value: Paasadm1234!
  - name: KEYCLOAK_FRONTEND_URL
    value: "https://keycloak.example.org/auth"
  - name: JGROUPS_DISCOVERY_PROTOCOL
    value: dns.DNS_PING
  - name: JGROUPS_DISCOVERY_PROPERTIES
    value: 'dns_query=keycloak-headless.platform.svc.cluster.local'
  - name: CACHE_OWNERS_COUNT
    value: "2"
  - name: CACHE_OWNERS_AUTH_SESSIONS_COUNT
    value: "2"
  - name: TZ
    value: Asia/Seoul

extraEnvFrom: |
  - secretRef:
      name: 'keycloak-db'

secrets:
  db:
    stringData:
      DB_USER: keycloak       # keycloak이 사용할 DB의 사용자 이름
      DB_PASSWORD: keycloak   # keycloak이 사용할 DB의 사용자 비밀번호


## themes 추가 시 주석 해제 / keycloak theme 컨테이너 생성 필요
## Additional init containers, e. g. for providing custom themes
#extraInitContainers: |
#  - name: theme-provider
#    image: example.org/library/paasxpert:v2.3-231219
#    imagePullPolicy: IfNotPresent
#    command:
#      - sh
#    args:
#      - -c
#      - |
#        echo "Copying theme..."
#        cp -R /theme/* /themes
#    volumeMounts:
#      - name: theme
#        mountPath: /themes
#
# command:
#   - /bin/sh
#
# args:
#   - -c
#   - |
#     cp -R /themes/* /opt/jboss/keycloak/themes/
#     /opt/jboss/tools/docker-entrypoint.sh -b 0.0.0.0
#
# extraVolumeMounts: |
#   - name: theme
#     mountPath: /themes
#
# extraVolumes: |
#   - name: theme
#     emptyDir: {}