You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
71 lines
1.6 KiB
71 lines
1.6 KiB
catalog:
|
|
resources: {}
|
|
ingress:
|
|
enabled: true
|
|
ingressClassName: "apisix"
|
|
host: "lakekeeper.example.org"
|
|
path: "/.*"
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: root-ca-issuer
|
|
cert-manager.io/duration: 8760h
|
|
cert-manager.io/renew-before: 720h
|
|
k8s.apisix.apache.org/use-regex: "true"
|
|
k8s.apisix.apache.org/ssl-redirect: "true"
|
|
tls:
|
|
enabled: true
|
|
secretName: "lakekeeper-tls"
|
|
|
|
# keycloak 사설 인증서 사용 시 설정
|
|
extraEnv:
|
|
- name: SSL_CERT_FILE
|
|
value: "/tmp/ca.crt"
|
|
extraVolumeMounts:
|
|
- name: keycloak-tls
|
|
mountPath: "/tmp/ca.crt"
|
|
subPath: ca.crt
|
|
readOnly: true
|
|
extraVolumes:
|
|
- name: keycloak-tls
|
|
secret:
|
|
secretName: root-ca-secret
|
|
|
|
# lakekeeper DB
|
|
postgresql:
|
|
enabled: true
|
|
storage:
|
|
className:
|
|
requestedSize: 5Gi
|
|
resources: {}
|
|
|
|
|
|
# OIDC 인증
|
|
auth:
|
|
oauth2:
|
|
providerUri: "https://keycloak.example.org/realms/paasup"
|
|
audience: "lakekeeper"
|
|
ui:
|
|
clientID: "lakekeeper"
|
|
scopes: "lakekeeper"
|
|
authz:
|
|
backend: "openfga"
|
|
openfga:
|
|
apiKey: "your-api-key" # openfga.authn.preshared.key에 정의된 값가 동일하게 설정.
|
|
|
|
internalOpenFGA: true
|
|
openfga:
|
|
resources: {}
|
|
# 테스트 환경 비활성화, authn을 oidc 타입으로 실행하기 위해서는 playground에서는 불가.
|
|
playground:
|
|
enabled: false
|
|
authn:
|
|
method: "preshared"
|
|
preshared:
|
|
# openssl rand -base64 32
|
|
keys: ["your-api-key"]
|
|
postgresql:
|
|
primary:
|
|
resources: {}
|
|
persistence:
|
|
storageClass: ""
|
|
size: 8Gi
|
|
|
|
|