192 lines
4.2 KiB
YAML
192 lines
4.2 KiB
YAML
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: keycloak
|
|
---
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: keycloak-theme
|
|
namespace: keycloak
|
|
data:
|
|
theme.properties: |
|
|
parent=keycloak
|
|
import=common/keycloak
|
|
styles=css/styles.css
|
|
styles.css: |
|
|
body {
|
|
background-color: #f8fafc;
|
|
font-family: 'Inter', sans-serif;
|
|
}
|
|
.login-pf body {
|
|
background: #f8fafc;
|
|
}
|
|
.card-pf {
|
|
box-shadow: 0 4px 6px -1px rgb(0 0 0 / 0.1), 0 2px 4px -2px rgb(0 0 0 / 0.1);
|
|
border-radius: 8px;
|
|
border-top: 4px solid #0F172A;
|
|
}
|
|
.btn-primary {
|
|
background-color: #0F172A !important;
|
|
border-color: #0F172A !important;
|
|
}
|
|
.btn-primary:hover {
|
|
background-color: #1E293B !important;
|
|
}
|
|
#kc-header-wrapper {
|
|
color: #0F172A;
|
|
font-weight: 700;
|
|
font-family: 'Outfit', sans-serif;
|
|
text-transform: uppercase;
|
|
letter-spacing: 1px;
|
|
}
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: StatefulSet
|
|
metadata:
|
|
name: keycloak-db
|
|
namespace: keycloak
|
|
spec:
|
|
serviceName: keycloak-db
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app: keycloak-db
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: keycloak-db
|
|
spec:
|
|
containers:
|
|
- name: postgres
|
|
image: postgres:15
|
|
env:
|
|
- name: POSTGRES_DB
|
|
value: "keycloak"
|
|
- name: POSTGRES_USER
|
|
value: "keycloak"
|
|
- name: POSTGRES_PASSWORD
|
|
value: "keycloak"
|
|
ports:
|
|
- containerPort: 5432
|
|
volumeMounts:
|
|
- name: keycloak-db-data
|
|
mountPath: /var/lib/postgresql/data
|
|
volumeClaimTemplates:
|
|
- metadata:
|
|
name: keycloak-db-data
|
|
spec:
|
|
accessModes: [ "ReadWriteOnce" ]
|
|
resources:
|
|
requests:
|
|
storage: 5Gi
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: keycloak-db
|
|
namespace: keycloak
|
|
spec:
|
|
ports:
|
|
- port: 5432
|
|
selector:
|
|
app: keycloak-db
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: keycloak
|
|
namespace: keycloak
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app: keycloak
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: keycloak
|
|
spec:
|
|
containers:
|
|
- name: keycloak
|
|
image: quay.io/keycloak/keycloak:24.0.5
|
|
args: ["start-dev"]
|
|
env:
|
|
- name: KEYCLOAK_ADMIN
|
|
value: "admin"
|
|
- name: KEYCLOAK_ADMIN_PASSWORD
|
|
value: "Mykeycloakpwd@1"
|
|
- name: KC_DB
|
|
value: "postgres"
|
|
- name: KC_DB_URL
|
|
value: "jdbc:postgresql://keycloak-db:5432/keycloak"
|
|
- name: KC_DB_USERNAME
|
|
value: "keycloak"
|
|
- name: KC_DB_PASSWORD
|
|
value: "keycloak"
|
|
- name: KC_HOSTNAME_STRICT_HTTPS
|
|
value: "false"
|
|
- name: KC_PROXY_HEADERS
|
|
value: "xforwarded"
|
|
- name: KC_HOSTNAME_URL
|
|
value: "https://sso.applaude.net/"
|
|
- name: KC_HTTP_ENABLED
|
|
value: "true"
|
|
ports:
|
|
- name: http
|
|
containerPort: 8080
|
|
volumeMounts:
|
|
- name: theme-volume-properties
|
|
mountPath: /opt/keycloak/themes/curaflow/login/theme.properties
|
|
subPath: theme.properties
|
|
- name: theme-volume-css
|
|
mountPath: /opt/keycloak/themes/curaflow/login/css/styles.css
|
|
subPath: styles.css
|
|
volumes:
|
|
- name: theme-volume-properties
|
|
configMap:
|
|
name: keycloak-theme
|
|
items:
|
|
- key: theme.properties
|
|
path: theme.properties
|
|
- name: theme-volume-css
|
|
configMap:
|
|
name: keycloak-theme
|
|
items:
|
|
- key: styles.css
|
|
path: styles.css
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: keycloak
|
|
namespace: keycloak
|
|
spec:
|
|
type: ClusterIP
|
|
ports:
|
|
- port: 8080
|
|
targetPort: 8080
|
|
selector:
|
|
app: keycloak
|
|
---
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
name: keycloak-ingress
|
|
namespace: keycloak
|
|
annotations:
|
|
k8s.apisix.apache.org/plugin-config-name: "strip-hsts"
|
|
spec:
|
|
ingressClassName: apisix
|
|
rules:
|
|
- host: sso.applaude.net
|
|
http:
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
backend:
|
|
service:
|
|
name: keycloak
|
|
port:
|
|
number: 8080
|