keycloak
(Alpha) A Helm chart for Keycloak on Kubernetes
Homepage: https://www.keycloak.org/
Maintainers
| Name | Url | |
|---|---|---|
| Sheogorath | https://shivering-isles.com |
Source Code
- https://git.shivering-isles.com/shivering-isles/infrastructure-gitops
- https://github.com/keycloak/keycloak
Values
| Key | Type | Default | Description |
|---|---|---|---|
| adminIngress | object | {"annotations":{},"className":"","enabled":false,"hosts":[{"host":"chart-example.local","paths":[{"path":"/js/","pathType":"ImplementationSpecific"},{"path":"/realms/","pathType":"ImplementationSpecific"},{"path":"/resources/","pathType":"ImplementationSpecific"},{"path":"/robots.txt","pathType":"ImplementationSpecific"},{"path":"/admin/","pathType":"ImplementationSpecific"}]}],"tls":[]} |
Optional separate ingress endpoint when keycloak.adminHostname is used |
| affinity | object | {} |
|
| autoscaling.enabled | bool | false |
|
| autoscaling.maxReplicas | int | 100 |
|
| autoscaling.minReplicas | int | 1 |
|
| autoscaling.targetCPUUtilizationPercentage | int | 80 |
|
| fullnameOverride | string | "" |
|
| image.pullPolicy | string | "IfNotPresent" |
pull policy used for the keycloak container |
| image.repository | string | "quay.io/keycloak/keycloak" |
Keycloak image to be used |
| image.tag | string | "" |
Overrides the image tag whose default is the chart appVersion. |
| imagePullSecrets | list | [] |
|
| ingress.annotations | object | {} |
|
| ingress.className | string | "" |
|
| ingress.enabled | bool | false |
|
| ingress.hosts[0].host | string | "chart-example.local" |
|
| ingress.hosts[0].paths[0].path | string | "/js/" |
|
| ingress.hosts[0].paths[0].pathType | string | "ImplementationSpecific" |
|
| ingress.hosts[0].paths[1].path | string | "/realms/" |
|
| ingress.hosts[0].paths[1].pathType | string | "ImplementationSpecific" |
|
| ingress.hosts[0].paths[2].path | string | "/resources/" |
|
| ingress.hosts[0].paths[2].pathType | string | "ImplementationSpecific" |
|
| ingress.hosts[0].paths[3].path | string | "/robots.txt" |
|
| ingress.hosts[0].paths[3].pathType | string | "ImplementationSpecific" |
|
| ingress.tls | list | [] |
|
| keycloak.adminHostname | string | nil |
Optional Admin Hostname, see https://www.keycloak.org/server/hostname#_administration_console |
| keycloak.database.password | string | nil |
password of the database user |
| keycloak.database.type | string | "postgres" |
Type of the database, see db at https://www.keycloak.org/server/db#_configuring_a_database
|
| keycloak.database.url | string | nil |
database URL, see db-url at https://www.keycloak.org/server/db#_configuring_a_database jdbc:postgresql://localhost/keycloak
|
| keycloak.database.username | string | nil |
username of the database user |
| keycloak.features | list | [] |
list of features that should be enabled on the keycloak instance. See features at https://www.keycloak.org/server/containers#_relevant_options
|
| keycloak.hostname | string | "keycloak.example.com" |
Hostname used for the keycloak installation |
| keycloak.proxy | string | "edge" |
proxy configuration, See https://www.keycloak.org/server/reverseproxy |
| metrics.enabled | bool | false |
|
| metrics.interval | string | nil |
|
| metrics.scrapeTimeout | string | nil |
|
| nameOverride | string | "" |
|
| networkPolicy.create | bool | false |
Creates a network policy for inifispan communication, does not take care of database or ingress communication |
| nodeSelector | object | {} |
|
| podAnnotations | object | {} |
|
| podSecurityContext | object | {} |
|
| replicaCount | int | 1 |
|
| resources.limits.cpu | string | "1" |
|
| resources.limits.memory | string | "1.5Gi" |
|
| resources.requests.cpu | string | "100m" |
|
| resources.requests.memory | string | "1Gi" |
|
| securityContext.allowPrivilegeEscalation | bool | false |
|
| securityContext.capabilities.drop[0] | string | "ALL" |
|
| securityContext.runAsNonRoot | bool | true |
|
| service.port | int | 80 |
|
| service.type | string | "ClusterIP" |
|
| serviceAccount.annotations | object | {} |
Annotations to add to the service account |
| serviceAccount.create | bool | true |
Specifies whether a service account should be created |
| serviceAccount.name | string | "" |
The name of the service account to use. If not set and create is true, a name is generated using the fullname template |
| tolerations | list | [] |
Autogenerated from chart metadata using helm-docs v1.11.0