k3s/services/keycloak/keycloak-deployment.yaml

41 lines
887 B
YAML
Raw Normal View History

apiVersion: k8s.keycloak.org/v2alpha1
kind: Keycloak
metadata:
name: keycloak
namespace: default
spec:
instances: 1
image: quay.io/keycloak/keycloak:latest
startOptimized: false
db:
vendor: postgres
host: birdfeeder2.home.nest
port: 5432
database: keycloak
usernameSecret:
name: keycloak-db-secret
key: username
passwordSecret:
name: keycloak-db-secret
key: password
http:
httpEnabled: true
hostname:
hostname: sso.mynest.love
strict: true
additionalOptions:
- name: proxy-headers
value: xforwarded
- name: hostname-strict-https
value: "true"
- name: bootstrap-admin-username
secret:
name: keycloak-admin-login
key: username
- name: bootstrap-admin-password
secret:
name: keycloak-admin-login
key: password
ingress:
enabled: false