update

yonote-keycloak-chart/Chart.lock

@@ -0,0 +1,9 @@
+dependencies:
+- name: app
+  repository: https://dysnix.github.io/charts
+  version: 0.3.15
+- name: postgresql
+  repository: https://charts.bitnami.com/bitnami
+  version: 11.6.2
+digest: sha256:4ff512f4cf7c217961e59af3e2cb656f4d6fc8441f17ce3da96ca1a03f58bf58
+generated: "2024-07-16T12:04:39.863844193+03:00"

yonote-keycloak-chart/Chart.yaml

@@ -0,0 +1,13 @@
+apiVersion: v2
+name: yonote-keycloak-chart
+version: 1.0.0
+dependencies:
+- name: app
+  version: "0.3.15"
+  repository: https://dysnix.github.io/charts
+  alias: keycloak
+- name: postgresql
+  version: "11.6.2"
+  repository: https://charts.bitnami.com/bitnami
+  condition: keycloak-database.enabled
+  alias: keycloak-database

yonote-keycloak-chart/secret-values.yaml

@@ -0,0 +1,6 @@
+keycloak:
+  secrets:
+    secrets:
+      stringData:
+        KEYCLOAK_ADMIN_PASSWORD: "12345"
+        KC_DB_PASSWORD: "3fWAxP6ZYp"

yonote-keycloak-chart/values.yaml

@@ -0,0 +1,101 @@
+global:
+  postgresql:
+    auth:
+      database: keycloak
+      username: keycloak
+
+keycloak-database:
+  enabled: true
+  fullnameOverride: yonote-keycloak-db
+  nameOverride: db
+  primary:
+    persistence:
+      size: 512Mi
+
+keycloak:
+  name: yonote-keycloak
+  fullnameOverride: yonote-keycloak
+  image:
+    registry: images.updates.yonote.ru
+    repository: yonote-keycloak
+    tag: latest
+
+  command:
+    - /bin/sh
+    - -c
+    - |
+      "/opt/keycloak/bin/kc.sh" "start"    
+
+  configMaps:
+    configs:
+      data:
+        KEYCLOAK_ADMIN: root
+        KC_PROXY: edge
+        KC_HOSTNAME_STRICT: "false"
+        KC_HOSTNAME_ADMIN: auth.example.com/admin
+        KC_HOSTNAME: auth.example.com
+        KC_DB: postgres
+        KC_DB_URL: jdbc:postgresql://yonote-keycloak-db:5432/keycloak
+        KC_DB_URL_DATABASE: keycloak
+        KC_DB_USERNAME: keycloak
+        KC_HOSTNAME_STRICT_HTTPS: "false"
+        KC_HOSTNAME_PATH: "/"
+
+  envFrom:
+    - configMapRef:
+        name: '{{ template "app.fullname" . }}-configs'
+    - secretRef:
+        name: '{{ template "app.fullname" . }}-secrets'
+
+  checksums:
+    - secrets.yaml
+    - configmaps.yaml
+
+  containerPorts:
+    - containerPort: 8080
+      name: app
+      protocol: TCP
+      
+  resources:
+    limits:
+      cpu: 500m
+      memory: 512Mi
+    requests:
+      cpu: 150m
+      memory: 128Mi
+
+  service:
+    service:
+    type: ClusterIP
+    port: 8080
+    targetPort: 8080
+
+  ingress:
+    enabled: true
+    ingressClassName: nginx
+    pathType: ImplementationSpecific
+    hostname: auth.example.com
+    path: /
+    tls: false
+
+  livenessProbe:
+    enabled: true
+    failureThreshold: 6
+    initialDelaySeconds: 60
+    periodSeconds: 15
+    successThreshold: 1
+    timeoutSeconds: 5
+    httpGet:
+      path: /
+      port: app
+
+  readinessProbe:
+    enabled: true
+    failureThreshold: 6
+    initialDelaySeconds: 60
+    periodSeconds: 15
+    successThreshold: 1
+    timeoutSeconds: 5
+    httpGet:
+      path: /
+      port: app