From c537c652d589ef66cdd9b6eb28a8cc19416558e2 Mon Sep 17 00:00:00 2001
From: Sheogorath <sheogorath@shivering-isles.com>
Date: Sun, 25 Sep 2022 23:22:15 +0200
Subject: [PATCH] feat(keycloak): Scale out keycloak
This patch updates the keycloak replica count to 2 and deploys a pod
anti-affinity which will spreadout pods to different nodes.
---
apps/base/keycloak/release.yaml | 12 ++++++++++++
apps/k8s01/keycloak/keycloak-values.yaml | 6 +++---
2 files changed, 15 insertions(+), 3 deletions(-)
diff --git a/apps/base/keycloak/release.yaml b/apps/base/keycloak/release.yaml
index 693b4184c..47dde8682 100644
--- a/apps/base/keycloak/release.yaml
+++ b/apps/base/keycloak/release.yaml
@@ -50,3 +50,15 @@ data:
url: jdbc:postgresql://keycloak-postgres.keycloak.svc.cluster.local/keycloak
metrics:
enabled: true
+ affinity:
+ podAntiAffinity:
+ preferredDuringSchedulingIgnoredDuringExecution:
+ - weight: 100
+ podAffinityTerm:
+ labelSelector:
+ matchExpressions:
+ - key: component
+ operator: In
+ values:
+ - registry
+ topologyKey: kubernetes.io/hostname
diff --git a/apps/k8s01/keycloak/keycloak-values.yaml b/apps/k8s01/keycloak/keycloak-values.yaml
index 0512aa239..92e176876 100644
--- a/apps/k8s01/keycloak/keycloak-values.yaml
+++ b/apps/k8s01/keycloak/keycloak-values.yaml
@@ -5,15 +5,15 @@ metadata:
namespace: keycloak
type: Opaque
stringData:
- values-overrides.yaml: ENC[AES256_GCM,data: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,iv:n1hGF24Aa0ITw/WYZAuyixVmlPTtOKKI1bYi3AjlW1M=,tag:MCQ5ywk2HApAhZC3lir22g==,type:str]
+ values-overrides.yaml: ENC[AES256_GCM,data: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,iv:HDYSIT5dHT/Rm7S/AT1x2r8rFNlZVSEBzXm3n6HV7Qs=,tag:L2tS4aaBDFOel/TvBgbWlA==,type:str]
sops:
kms: []
gcp_kms: []
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2022-09-24T17:47:58Z"
- mac: ENC[AES256_GCM,data:BnrzEJpPinGp48lCSYURlU6/ab5QyFkZM+gnfvG2RgCUOlNPaWZLtBwpsDkueSXPoMFgaONCKfdP1NbvEHldQzRY7+JeeWQybih4IKk7nMsQgXPW3sg5uXKiq8fxPpmre5c1ICkN7wNAJrf011DQh9BFTgjKuNUKoeOD3ep0Ol4=,iv:ck3rXRJ3vQ8DTX07zhBAwldDnxVePDdq86Z/SPa5fMk=,tag:U0/TOEGQQqlClkn42eyRQA==,type:str]
+ lastmodified: "2022-09-25T21:21:54Z"
+ mac: ENC[AES256_GCM,data:h8v5An2poTudTqwDCVreUQAdB2TufZhA0JIupoHWP2OXtWchpjIwjMarSBE+SgX1AGNJpgDbkJ+QerSOG7rcYWqDH1VlSjQCxEhrzwqteDOxiwq7ETB4b6aRcqf31SoVsMEG+gfLaf0y3CMFnvXdb5qM00vAJ6W96hozMNFIMQE=,iv:xi0LCmy90i69U9mJenIUGt82mF6rZ3GqllbBPFkuKA4=,tag:B1GChdqYAJEzOxGIm8ikeg==,type:str]
pgp:
- created_at: "2022-03-22T22:26:35Z"
enc: |-
--
GitLab