Repository for dip
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 

105 lines
2.3 KiB

image:
repository: paasup/keycloak
tag: 17.0.1-legacy
ingress:
enabled: true
annotations:
cert-manager.io/cluster-issuer: "root-ca-issuer"
rules:
- host: keycloak.example.org
paths:
- path: /
pathType: Prefix
tls:
- hosts:
- keycloak.example.org
secretName: keycloak-tls
resources:
requests:
cpu: 100m
memory: 500Mi
limits:
cpu: 4000m
memory: 1000Mi
# 내장 DB 사용시 enable로 변경
postgresql:
enabled: false
# 외부 DB 사용 시
# DB_VENDOR, DB_ADDR, DB_PORT, DB_DATABASE, DB_SCHEMA의 값을 배포된 DB의 값으로 변경
extraEnv: |
- name: DB_VENDOR
value: postgres
- name: DB_ADDR
value: postgresql-postgresql-ha-postgresql
- name: DB_PORT
value: "5432"
- name: DB_DATABASE
value: keycloak
- name: DB_SCHEMA
value: keycloak
- name: KEYCLOAK_USER
value: admin
- name: KEYCLOAK_PASSWORD
value: Paasadm1234!
- name: KEYCLOAK_FRONTEND_URL
value: "https://keycloak.example.org/auth"
- name: JGROUPS_DISCOVERY_PROTOCOL
value: dns.DNS_PING
- name: JGROUPS_DISCOVERY_PROPERTIES
value: 'dns_query=keycloak-headless.platform.svc.cluster.local'
- name: CACHE_OWNERS_COUNT
value: "2"
- name: CACHE_OWNERS_AUTH_SESSIONS_COUNT
value: "2"
- name: TZ
value: Asia/Seoul
extraEnvFrom: |
- secretRef:
name: 'keycloak-db'
secrets:
db:
stringData:
DB_USER: keycloak # keycloak이 사용할 DB의 사용자 이름
DB_PASSWORD: keycloak # keycloak이 사용할 DB의 사용자 비밀번호
## themes 추가 시 주석 해제 / keycloak theme 컨테이너 생성 필요
## Additional init containers, e. g. for providing custom themes
#extraInitContainers: |
# - name: theme-provider
# image: example.org/library/paasxpert:v2.3-231219
# imagePullPolicy: IfNotPresent
# command:
# - sh
# args:
# - -c
# - |
# echo "Copying theme..."
# cp -R /theme/* /themes
# volumeMounts:
# - name: theme
# mountPath: /themes
#
# command:
# - /bin/sh
#
# args:
# - -c
# - |
# cp -R /themes/* /opt/jboss/keycloak/themes/
# /opt/jboss/tools/docker-entrypoint.sh -b 0.0.0.0
#
# extraVolumeMounts: |
# - name: theme
# mountPath: /themes
#
# extraVolumes: |
# - name: theme
# emptyDir: {}