112 lines
2.2 KiB
YAML
112 lines
2.2 KiB
YAML
auth:
|
|
adminUser: mareshqadmin
|
|
adminPassword: mareshqadmin
|
|
|
|
global:
|
|
storageClass: longhorn
|
|
|
|
replicaCount: 2
|
|
|
|
pdb:
|
|
create: true
|
|
minAvailable: 1
|
|
|
|
autoscaling:
|
|
enabled: false
|
|
|
|
resources:
|
|
limits:
|
|
cpu: "1"
|
|
memory: 2Gi
|
|
requests:
|
|
cpu: 500m
|
|
memory: 1Gi
|
|
|
|
# Pods must be spread across nodes
|
|
# See: https://github.com/bitnami/charts/blob/main/bitnami/common/templates/_affinities.tpl#L56-L106
|
|
# podAntiAffinityPreset: hard
|
|
|
|
updateStrategy:
|
|
type: RollingUpdate
|
|
rollingUpdate:
|
|
maxUnavailable: 1
|
|
|
|
service:
|
|
type: ClusterIP
|
|
# http:
|
|
# enable: false
|
|
|
|
ingress:
|
|
enabled: true
|
|
hostname: sso.mareshq.com
|
|
|
|
servicePort: https
|
|
|
|
ingressClassName: nginx
|
|
|
|
tls: true
|
|
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: letsencrypt-prod
|
|
# Allow self-signed certificates on the backend
|
|
nginx.ingress.kubernetes.io/server-snippet: |
|
|
proxy_ssl_verify off;
|
|
nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
|
|
nginx.ingress.kubernetes.io/proxy-buffering: "on"
|
|
nginx.ingress.kubernetes.io/proxy-buffers-number: "4"
|
|
nginx.ingress.kubernetes.io/proxy-buffer-size: "16k"
|
|
|
|
tls:
|
|
enabled: true
|
|
autoGenerated: true
|
|
|
|
production: true
|
|
|
|
metrics:
|
|
enabled: true
|
|
|
|
serviceMonitor:
|
|
enabled: false
|
|
|
|
postgresql:
|
|
enabled: false
|
|
|
|
externalDatabase:
|
|
existingSecret: mareshq-keycloak-database-credentials
|
|
existingSecretHostKey: host
|
|
existingSecretPortKey: port
|
|
existingSecretUserKey: username
|
|
existingSecretDatabaseKey: database
|
|
existingSecretPasswordKey: password
|
|
|
|
startupProbe:
|
|
# Keycloak should be ready to serve requests within 15 minutes
|
|
enabled: true
|
|
initialDelaySeconds: 180 # 3min
|
|
periodSeconds: 10
|
|
timeoutSeconds: 5
|
|
failureThreshold: 80 # 12min
|
|
successThreshold: 1
|
|
|
|
# Custom theme installation and configuration
|
|
initContainers:
|
|
- name: theme-installer
|
|
image: busybox:latest
|
|
command:
|
|
- /bin/sh
|
|
- "-c"
|
|
- |
|
|
wget https://vojtechmares.github.io/cdn/keywind.tar.gz -O /tmp/keywind.tar.gz
|
|
tar -xzvf /tmp/keywind.tar.gz -C /opt/bitnami/keycloak/themes
|
|
|
|
volumeMounts:
|
|
- mountPath: /opt/bitnami/keycloak/themes/keywind
|
|
name: theme
|
|
|
|
extraVolumes:
|
|
- name: theme
|
|
emptyDir: {}
|
|
|
|
extraVolumeMounts:
|
|
- name: theme
|
|
mountPath: /opt/bitnami/keycloak/themes/keywind
|