test

yonote-chart/Chart.lock

@@ -20,8 +20,14 @@ dependencies:
 - name: redis
   repository: https://charts.bitnami.com/bitnami
   version: 16.12.1
+- name: app
+  repository: https://dysnix.github.io/charts
+  version: 0.3.15
+- name: postgresql
+  repository: https://charts.bitnami.com/bitnami
+  version: 11.6.2
 - name: minio
   repository: https://charts.bitnami.com/bitnami
   version: 14.6.20
-digest: sha256:ac298eab717f006b97255703008f8d675b5e0603afa5b755673455012d6d3693
-generated: "2024-07-16T12:06:23.7878103+03:00"
+digest: sha256:c5b8b9e07fb2f98522c86c4b5e0758d5adecd9d2493fa65d942c5fbcca316a9b
+generated: "2024-08-14T15:35:18.751768537+03:00"

yonote-chart/Chart.yaml

@@ -47,8 +47,20 @@ dependencies:
     condition: yonote-redis.enabled
     alias: yonote-redis
 
+  - name: app
+    version: "0.3.15"
+    repository: https://dysnix.github.io/charts
+    condition: keycloak.enabled
+    alias: keycloak
+
+  - name: postgresql
+    version: "11.6.2"
+    repository: https://charts.bitnami.com/bitnami
+    condition: keycloak.keycloak-database.enabled
+    alias: keycloak-database
+
   - name: minio
     version: "14.6.20"
     repository: https://charts.bitnami.com/bitnami
     condition: minio.enabled
-    alias: minio
+    alias: minio    

yonote-chart/secret-values.yaml

@@ -27,5 +27,16 @@ global:
       password: "wsGZ6kXhr5"
       postgresPassword: "QQYw4UjOU"
 
-  
+keycloak-app:
+  global:
+    postgresql:
+      auth:
+        password: "tT9BqYdNyd1"
+
+  keycloak:
+    secrets:
+      secrets:
+        stringData:
+          KEYCLOAK_ADMIN_PASSWORD: "12345"
+          KC_DB_PASSWORD: "tT9BqYdNyd1"  
     

yonote-chart/values.yaml

@@ -1,5 +1,4 @@
 global:
-  name: yonote-app
   postgresql:
     auth:
       database: yonote
@@ -678,4 +677,104 @@ minio:
     
     buckets:
       - name: yonote-bucket
-        policy: none
+        policy: none
+
+keycloak-database:
+  enabled: true
+  name: keycloak-database
+  fullnameOverride: yonote-keycloak-db
+  nameOverride: db
+  primary:
+    persistence:
+      size: 512Mi
+
+keycloak:
+  global:
+    postgresql:
+      auth:
+        database: keycloak
+        username: keycloak
+
+  enabled: true
+  name: yonote-keycloak
+  fullnameOverride: yonote-keycloak
+  image:
+    registry: images.updates.yonote.ru
+    repository: yonote-keycloak
+    tag: 19-0.1.1
+  command:
+    - /bin/sh
+    - -c
+    - /opt/keycloak/bin/kc.sh import --file=/opt/keycloak/data/import/realm-export.json --debug
+    - /opt/keycloak/bin/kc.sh start
+  configMaps:
+    configs:
+      data:
+        KEYCLOAK_ADMIN: root
+        KC_PROXY: edge
+        KC_HOSTNAME_STRICT: "false"
+        KC_HOSTNAME_ADMIN: auth.onprem-test.stands.wilix.dev
+        KC_HOSTNAME: auth.onprem-test.stands.wilix.dev
+        KC_DB: postgres
+        KC_DB_URL: jdbc:postgresql://yonote-keycloak-db:5432/keycloak
+        # KC_DB_URL_DATABASE: keycloak
+        KC_DB_USERNAME: keycloak
+        KC_HOSTNAME_STRICT_HTTPS: "false"
+        KC_HOSTNAME_PATH: "/"
+  envFrom:
+    - configMapRef:
+        name: '{{ template "app.fullname" . }}-configs'
+    - secretRef:
+        name: '{{ template "app.fullname" . }}-secrets'
+  checksums:
+    - secrets.yaml
+    - configmaps.yaml
+  containerPorts:
+    - containerPort: 8080
+      name: app
+      protocol: TCP
+      
+  resources:
+    limits:
+      cpu: 500m
+      memory: 512Mi
+    requests:
+      cpu: 150m
+      memory: 128Mi
+  service:
+    type: ClusterIP
+    port: 8080
+    targetPort: 8080
+  ingress:
+    enabled: true
+    hostname: 'auth.onprem-test.stands.wilix.dev'
+    ingressClassName: traefik
+    path: '/'
+    pathType: Prefix
+    annotations:
+      kubernetes.io/ingress.class: traefik
+      cert-manager.io/cluster-issuer: letsencrypt.rancher.wilix.dev
+    extraTls:
+    - hosts:
+        - "auth.onprem-test.stands.wilix.dev"
+      secretName: "auth.onprem-test.stands.wilix.dev"
+  # livenessProbe:
+  #   enabled: true
+  #   failureThreshold: 6
+  #   initialDelaySeconds: 60
+  #   periodSeconds: 15
+  #   successThreshold: 1
+  #   timeoutSeconds: 5
+  #   httpGet:
+  #     path: /
+  #     port: app
+  # readinessProbe:
+  #   enabled: true
+  #   failureThreshold: 6
+  #   initialDelaySeconds: 60
+  #   periodSeconds: 15
+  #   successThreshold: 1
+  #   timeoutSeconds: 5
+  #   httpGet:
+  #     path: /
+  #     port: app