-
Sheogorath authored
This patch upgrades keycloak to 20.0.0 and implements the new adminHostname feature by adding the required variables and a separate ingress object, which can be utilised for the admin URL and restrict it independent of the regular frontend.
Sheogorath authoredThis patch upgrades keycloak to 20.0.0 and implements the new adminHostname feature by adding the required variables and a separate ingress object, which can be utilised for the admin URL and restrict it independent of the regular frontend.
README.md 4.21 KiB
keycloak
(Alpha) A Helm chart for Keycloak on Kubernetes
Homepage: https://www.keycloak.org/
Source Code
- https://git.shivering-isles.com/shivering-isles/infrastructure-gitops
- https://github.com/keycloak/keycloak
Values
Key | Type | Default | Description |
---|---|---|---|
adminIngress | object | {"annotations":{},"className":"","enabled":false,"hosts":[{"host":"chart-example.local","paths":[{"path":"/","pathType":"ImplementationSpecific"}]}],"tls":[]} |
Optional separate ingress endpoint when keycloak.adminHostname is used |
affinity | object | {} |
|
autoscaling.enabled | bool | false |
|
autoscaling.maxReplicas | int | 100 |
|
autoscaling.minReplicas | int | 1 |
|
autoscaling.targetCPUUtilizationPercentage | int | 80 |
|
fullnameOverride | string | "" |
|
image.pullPolicy | string | "IfNotPresent" |
pull policy used for the keycloak container |
image.repository | string | "quay.io/keycloak/keycloak" |
Keycloak image to be used |
image.tag | string | "" |
Overrides the image tag whose default is the chart appVersion. |
imagePullSecrets | list | [] |
|
ingress.annotations | object | {} |
|
ingress.className | string | "" |
|
ingress.enabled | bool | false |
|
ingress.hosts[0].host | string | "chart-example.local" |
|
ingress.hosts[0].paths[0].path | string | "/" |
|
ingress.hosts[0].paths[0].pathType | string | "ImplementationSpecific" |
|
ingress.tls | list | [] |
|
keycloak.adminHostname | string | nil |
Optional Admin Hostname, see https://www.keycloak.org/server/hostname#_administration_console |
keycloak.database.password | string | nil |
password of the database user |
keycloak.database.type | string | "postgres" |
Type of the database, see db at https://www.keycloak.org/server/db#_configuring_a_database
|
keycloak.database.url | string | nil |
database URL, see db-url at https://www.keycloak.org/server/db#_configuring_a_database jdbc:postgresql://localhost/keycloak
|
keycloak.database.username | string | nil |
username of the database user |
keycloak.features | list | [] |
list of features that should be enabled on the keycloak instance. See features at https://www.keycloak.org/server/containers#_relevant_options
|
keycloak.hostname | string | "keycloak.example.com" |
Hostname used for the keycloak installation |
keycloak.proxy | string | "edge" |
proxy configuration, See https://www.keycloak.org/server/reverseproxy |
metrics.enabled | bool | false |
|
metrics.interval | string | nil |
|
metrics.scrapeTimeout | string | nil |
|
nameOverride | string | "" |
|
networkPolicy.create | bool | false |
Creates a network policy for inifispan communication, does not take care of database or ingress communication |
nodeSelector | object | {} |
|
podAnnotations | object | {} |
|
podSecurityContext | object | {} |
|
replicaCount | int | 1 |
|
resources.limits.cpu | string | "1" |
|
resources.limits.memory | string | "1.5Gi" |
|
resources.requests.cpu | string | "100m" |
|
resources.requests.memory | string | "1Gi" |
|
securityContext.allowPrivilegeEscalation | bool | false |
|
securityContext.capabilities.drop[0] | string | "ALL" |
|
securityContext.runAsNonRoot | bool | true |
|
service.port | int | 80 |
|
service.type | string | "ClusterIP" |
|
serviceAccount.annotations | object | {} |
Annotations to add to the service account |
serviceAccount.create | bool | true |
Specifies whether a service account should be created |
serviceAccount.name | string | "" |
The name of the service account to use. If not set and create is true, a name is generated using the fullname template |
tolerations | list | [] |
Autogenerated from chart metadata using helm-docs v1.11.0