blob: 0160ce86e85e39fef2ae1df9d9c063e054632fdb [file] [log] [blame]
Andreas Geissler723038e2024-02-07 10:31:05 +01001---
2command:
3 - "/opt/keycloak/bin/kc.sh"
4 - "--verbose"
5 - "start"
6 - "--http-enabled=true"
7 - "--http-port=8080"
8 - "--hostname-strict=false"
9 - "--hostname-strict-https=false"
10 - "--spi-events-listener-jboss-logging-success-level=info"
11 - "--spi-events-listener-jboss-logging-error-level=warn"
Andreas Geisslere08eee02023-04-21 14:21:37 +020012
13extraEnv: |
Andreas Geissler723038e2024-02-07 10:31:05 +010014 - name: KEYCLOAK_ADMIN
Andreas Geisslere08eee02023-04-21 14:21:37 +020015 valueFrom:
16 secretKeyRef:
17 name: {{ include "keycloak.fullname" . }}-admin-creds
18 key: user
Andreas Geissler723038e2024-02-07 10:31:05 +010019 - name: KEYCLOAK_ADMIN_PASSWORD
Andreas Geisslere08eee02023-04-21 14:21:37 +020020 valueFrom:
21 secretKeyRef:
22 name: {{ include "keycloak.fullname" . }}-admin-creds
23 key: password
Andreas Geissler723038e2024-02-07 10:31:05 +010024 - name: JAVA_OPTS_APPEND
25 value: >-
26 -XX:+UseContainerSupport
27 -XX:MaxRAMPercentage=50.0
28 -Djava.awt.headless=true
29 -Djgroups.dns.query={{ include "keycloak.fullname" . }}-headless
Andreas Geisslere08eee02023-04-21 14:21:37 +020030 - name: PROXY_ADDRESS_FORWARDING
31 value: "true"
32
Andreas Geissler723038e2024-02-07 10:31:05 +010033dbchecker:
34 enabled: true
Andreas Geisslere08eee02023-04-21 14:21:37 +020035
Andreas Geissler723038e2024-02-07 10:31:05 +010036database:
37 vendor: postgres
38 hostname: keycloak-db-postgresql
39 port: 5432
40 username: dbusername
41 password: dbpassword
42 database: keycloak
Andreas Geisslere08eee02023-04-21 14:21:37 +020043
44secrets:
45 admin-creds:
Andreas Geisslere08eee02023-04-21 14:21:37 +020046 stringData:
47 user: admin
Andreas Geissler723038e2024-02-07 10:31:05 +010048 password: secret