apiVersion: v1
kind: Namespace
metadata:
  name: keycloak
---
apiVersion: v1
kind: ConfigMap
metadata:
  name: keycloak-theme
  namespace: keycloak
data:
  theme.properties: |
    parent=keycloak
    import=common/keycloak
    styles=css/styles.css
  styles.css: |
    body {
        background-color: #f8fafc;
        font-family: 'Inter', sans-serif;
    }
    .login-pf body {
        background: #f8fafc;
    }
    .card-pf {
        box-shadow: 0 4px 6px -1px rgb(0 0 0 / 0.1), 0 2px 4px -2px rgb(0 0 0 / 0.1);
        border-radius: 8px;
        border-top: 4px solid #0F172A;
    }
    .btn-primary {
        background-color: #0F172A !important;
        border-color: #0F172A !important;
    }
    .btn-primary:hover {
        background-color: #1E293B !important;
    }
    #kc-header-wrapper {
        color: #0F172A;
        font-weight: 700;
        font-family: 'Outfit', sans-serif;
        text-transform: uppercase;
        letter-spacing: 1px;
    }
---
apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: keycloak-db
  namespace: keycloak
spec:
  serviceName: keycloak-db
  replicas: 1
  selector:
    matchLabels:
      app: keycloak-db
  template:
    metadata:
      labels:
        app: keycloak-db
    spec:
      containers:
      - name: postgres
        image: postgres:15
        env:
        - name: POSTGRES_DB
          value: "keycloak"
        - name: POSTGRES_USER
          value: "keycloak"
        - name: POSTGRES_PASSWORD
          value: "keycloak"
        ports:
        - containerPort: 5432
        volumeMounts:
        - name: keycloak-db-data
          mountPath: /var/lib/postgresql/data
  volumeClaimTemplates:
  - metadata:
      name: keycloak-db-data
    spec:
      accessModes: [ "ReadWriteOnce" ]
      resources:
        requests:
          storage: 5Gi
---
apiVersion: v1
kind: Service
metadata:
  name: keycloak-db
  namespace: keycloak
spec:
  ports:
  - port: 5432
  selector:
    app: keycloak-db
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: keycloak
  namespace: keycloak
spec:
  replicas: 1
  selector:
    matchLabels:
      app: keycloak
  template:
    metadata:
      labels:
        app: keycloak
    spec:
      containers:
      - name: keycloak
        image: quay.io/keycloak/keycloak:24.0.5
        args: ["start-dev"]
        env:
        - name: KEYCLOAK_ADMIN
          value: "admin"
        - name: KEYCLOAK_ADMIN_PASSWORD
          value: "Mykeycloakpwd@1"
        - name: KC_DB
          value: "postgres"
        - name: KC_DB_URL
          value: "jdbc:postgresql://keycloak-db:5432/keycloak"
        - name: KC_DB_USERNAME
          value: "keycloak"
        - name: KC_DB_PASSWORD
          value: "keycloak"
        - name: KC_HOSTNAME_STRICT_HTTPS
          value: "false"
        - name: KC_PROXY_HEADERS
          value: "xforwarded"
        - name: KC_HOSTNAME_URL
          value: "https://sso.applaude.net/"
        - name: KC_HTTP_ENABLED
          value: "true"
        ports:
        - name: http
          containerPort: 8080
        volumeMounts:
        - name: theme-volume-properties
          mountPath: /opt/keycloak/themes/curaflow/login/theme.properties
          subPath: theme.properties
        - name: theme-volume-css
          mountPath: /opt/keycloak/themes/curaflow/login/css/styles.css
          subPath: styles.css
      volumes:
      - name: theme-volume-properties
        configMap:
          name: keycloak-theme
          items:
          - key: theme.properties
            path: theme.properties
      - name: theme-volume-css
        configMap:
          name: keycloak-theme
          items:
          - key: styles.css
            path: styles.css
---
apiVersion: v1
kind: Service
metadata:
  name: keycloak
  namespace: keycloak
spec:
  type: ClusterIP
  ports:
  - port: 8080
    targetPort: 8080
  selector:
    app: keycloak
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: keycloak-ingress
  namespace: keycloak
  annotations:
    k8s.apisix.apache.org/plugin-config-name: "strip-hsts"
spec:
  ingressClassName: apisix
  rules:
  - host: sso.applaude.net
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: keycloak
            port:
              number: 8080