blob: 41ee1ee99bbf3ca21fa837fdd6d48d9777763655 [file] [log] [blame]
Oleksandr Kozachenkob0093492023-09-06 21:43:47 +02001# Copyright (c) 2022 VEXXHOST, Inc.
2#
3# Licensed under the Apache License, Version 2.0 (the "License"); you may
4# not use this file except in compliance with the License. You may obtain
5# a copy of the License at
6#
7# http://www.apache.org/licenses/LICENSE-2.0
8#
9# Unless required by applicable law or agreed to in writing, software
10# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
11# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
12# License for the specific language governing permissions and limitations
13# under the License.
14
vexxhost-bot8196a942024-10-26 11:58:18 -040015_keycloak_ingress_annotations:
16 cert-manager.io/cluster-issuer: "{{ keycloak_ingress_cluster_issuer }}"
17
Oleksandr Kozachenkob0093492023-09-06 21:43:47 +020018_keycloak_helm_values:
Mohammed Naser65cda132024-05-02 14:34:08 -040019 # NOTE(mnaser): These workarounds below are needed to allow the Bitnami Helm chart to work with
20 # the upstream image.
21 enableDefaultInitContainers: false
22 containerSecurityContext:
23 readOnlyRootFilesystem: false
24 runAsUser: 1000
Oleksandr Kozachenkob0093492023-09-06 21:43:47 +020025 # Note(okozachenko1203): Mysql vendor is not supported by bitnami helm chart. As a workaround,
26 # we have to define jdbc connection string explicitly along side
27 # `externalDatabase` helm values.
28 extraEnvVars:
29 - name: KC_PROXY
30 value: edge
31 - name: KC_DB
32 value: mysql
33 - name: KC_DB_URL
34 value: "jdbc:mysql://{{ openstack_helm_endpoints.oslo_db.hosts.default }}.openstack:3306/{{ keycloak_database_name }}"
35 - name: KC_DB_USERNAME
36 value: "{{ keycloak_database_username }}"
37 - name: KC_DB_PASSWORD
38 valueFrom:
39 secretKeyRef:
40 key: db-password
41 name: keycloak-externaldb
42 command:
43 - /opt/keycloak/bin/kc.sh
44 - --verbose
45 - start
Oleksandr Kozachenkob0093492023-09-06 21:43:47 +020046 - --health-enabled=true
47 - --http-enabled=true
48 - --http-port=8080
49 - --hostname-strict=false
50 - --spi-events-listener-jboss-logging-success-level=info
51 - --spi-events-listener-jboss-logging-error-level=warn
52 - --transaction-xa-enabled=false
vexxhost-bota7b6e3b2024-07-11 17:58:08 +020053 - --metrics-enabled=true
Oleksandr Kozachenkob0093492023-09-06 21:43:47 +020054 auth:
55 adminPassword: "{{ keycloak_admin_password }}"
56 adminUser: "{{ keycloak_admin_username }}"
57 externalDatabase:
58 host: "{{ openstack_helm_endpoints.oslo_db.hosts.default }}.openstack"
59 port: 3306
60 database: "{{ keycloak_database_name }}"
61 user: "{{ keycloak_database_username }}"
62 password: "{{ keycloak_database_password }}"
63 image:
64 registry: "{{ atmosphere_images['keycloak'] | vexxhost.kubernetes.docker_image('domain') }}"
65 repository: "{{ atmosphere_images['keycloak'] | vexxhost.kubernetes.docker_image('path') }}"
66 tag: "{{ atmosphere_images['keycloak'] | vexxhost.kubernetes.docker_image('tag') }}"
67 postgresql:
68 enabled: false
69 production: true
70 proxy: edge
Mohammed Naser73dcb9d2024-01-02 16:23:43 -050071 startupProbe:
72 enabled: true
73 initialDelaySeconds: 5
74 failureThreshold: 120
Oleksandr Kozachenko72da0122023-10-17 22:52:39 +020075 nodeSelector:
76 openstack-control-plane: enabled
vexxhost-bota7b6e3b2024-07-11 17:58:08 +020077 metrics:
78 enabled: true