Remove https related settings
This commit is contained in:
parent
b1be4f4203
commit
3f835d6563
6 changed files with 3 additions and 88 deletions
|
@ -17,22 +17,11 @@ spec:
|
||||||
spec:
|
spec:
|
||||||
containers:
|
containers:
|
||||||
- name: keycloak
|
- name: keycloak
|
||||||
# image: quay.io/keycloak/keycloak:23.0.1
|
|
||||||
image: quay.io/keycloak/keycloak:26.1
|
image: quay.io/keycloak/keycloak:26.1
|
||||||
args:
|
args:
|
||||||
- "start"
|
- "start"
|
||||||
- "--verbose"
|
- "--verbose"
|
||||||
env:
|
env:
|
||||||
- name: KC_HTTP_ENABLED
|
|
||||||
value: "true"
|
|
||||||
- name: KC_HOSTNAME
|
|
||||||
value: "https://keycloak.streams.sunet.se"
|
|
||||||
- name: KC_HOSTNAME_ADMIN
|
|
||||||
value: "https://keycloak.streams.sunet.se"
|
|
||||||
- name: KC_HOSTNAME_STRICT
|
|
||||||
value: "false"
|
|
||||||
- name: KC_HOSTNAME_STRICT_HTTPS
|
|
||||||
value: "false"
|
|
||||||
- name: KEYCLOAK_USER
|
- name: KEYCLOAK_USER
|
||||||
value: admin
|
value: admin
|
||||||
- name: KEYCLOAK_PASSWORD
|
- name: KEYCLOAK_PASSWORD
|
||||||
|
@ -54,8 +43,6 @@ spec:
|
||||||
ports:
|
ports:
|
||||||
- name: http
|
- name: http
|
||||||
containerPort: 8080
|
containerPort: 8080
|
||||||
# - name: https
|
|
||||||
# containerPort: 8443
|
|
||||||
readinessProbe:
|
readinessProbe:
|
||||||
httpGet:
|
httpGet:
|
||||||
path: /health/ready
|
path: /health/ready
|
||||||
|
@ -66,11 +53,8 @@ spec:
|
||||||
successThreshold: 1 # Number of successful probes to consider the pod ready
|
successThreshold: 1 # Number of successful probes to consider the pod ready
|
||||||
failureThreshold: 5
|
failureThreshold: 5
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
# - mountPath: /opt/keycloak/data/h2/
|
- mountPath: /opt/keycloak/data/h2/
|
||||||
# name: storage
|
name: storage
|
||||||
- name: keycloak-tls-secret
|
|
||||||
mountPath: /etc/ssl/certs
|
|
||||||
readOnly: true
|
|
||||||
securityContext:
|
securityContext:
|
||||||
runAsUser: 1000
|
runAsUser: 1000
|
||||||
runAsGroup: 1000
|
runAsGroup: 1000
|
||||||
|
@ -78,6 +62,3 @@ spec:
|
||||||
- name: storage
|
- name: storage
|
||||||
persistentVolumeClaim:
|
persistentVolumeClaim:
|
||||||
claimName: keycloak-pvc
|
claimName: keycloak-pvc
|
||||||
- name: keycloak-tls-secret
|
|
||||||
secret:
|
|
||||||
secretName: keycloak-tls-secret
|
|
||||||
|
|
|
@ -7,7 +7,7 @@ spec:
|
||||||
project: default
|
project: default
|
||||||
source:
|
source:
|
||||||
repoURL: https://platform.sunet.se/streams/streams-manifests.git
|
repoURL: https://platform.sunet.se/streams/streams-manifests.git
|
||||||
targetRevision: streams-manifests-2025-01-31-v13
|
targetRevision: streams-manifests-2025-01-31-v14
|
||||||
path: keycloak/overlays/test
|
path: keycloak/overlays/test
|
||||||
destination:
|
destination:
|
||||||
server: https://kubernetes.default.svc
|
server: https://kubernetes.default.svc
|
||||||
|
|
|
@ -1,7 +0,0 @@
|
||||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
||||||
kind: Kustomization
|
|
||||||
namespace: keycloak
|
|
||||||
commonLabels:
|
|
||||||
env: dev
|
|
||||||
resources:
|
|
||||||
- ../../base/
|
|
|
@ -1,7 +0,0 @@
|
||||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
||||||
kind: Kustomization
|
|
||||||
namespace: keycloak
|
|
||||||
commonLabels:
|
|
||||||
env: prod
|
|
||||||
resources:
|
|
||||||
- ../../base/
|
|
|
@ -1,51 +0,0 @@
|
||||||
apiVersion: apps/v1
|
|
||||||
kind: Deployment
|
|
||||||
metadata:
|
|
||||||
name: keycloak
|
|
||||||
namespace: keycloak
|
|
||||||
labels:
|
|
||||||
app: keycloak
|
|
||||||
spec:
|
|
||||||
replicas: 1
|
|
||||||
selector:
|
|
||||||
matchLabels:
|
|
||||||
app: keycloak
|
|
||||||
template:
|
|
||||||
metadata:
|
|
||||||
labels:
|
|
||||||
app: keycloak
|
|
||||||
spec:
|
|
||||||
containers:
|
|
||||||
- name: keycloak
|
|
||||||
image: quay.io/keycloak/keycloak:26.1
|
|
||||||
env:
|
|
||||||
- name: KC_HOSTNAME_DEBUG
|
|
||||||
value: "true"
|
|
||||||
- name: KC_HTTP_ENABLED
|
|
||||||
value: "true"
|
|
||||||
- name: KC_HOSTNAME
|
|
||||||
value: "https://keycloak-test.streams.sunet.se"
|
|
||||||
- name: KC_HOSTNAME_ADMIN
|
|
||||||
value: "https://keycloak-test.streams.sunet.se"
|
|
||||||
- name: KC_HOSTNAME_STRICT
|
|
||||||
value: "false"
|
|
||||||
- name: KC_HOSTNAME_STRICT_HTTPS
|
|
||||||
value: "false"
|
|
||||||
- name: KEYCLOAK_USER
|
|
||||||
value: admin
|
|
||||||
- name: KEYCLOAK_PASSWORD
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: keycloak-admin-secret
|
|
||||||
key: password
|
|
||||||
- name: KEYCLOAK_ADMIN
|
|
||||||
value: "admin"
|
|
||||||
- name: KEYCLOAK_ADMIN_PASSWORD
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: keycloak-admin-secret
|
|
||||||
key: password
|
|
||||||
- name: KC_HEALTH_ENABLED
|
|
||||||
value: "true"
|
|
||||||
- name: KC_PROXY
|
|
||||||
value: "edge"
|
|
|
@ -7,4 +7,3 @@ resources:
|
||||||
- ../../base/
|
- ../../base/
|
||||||
patches:
|
patches:
|
||||||
- path: keycloak-ingress.yaml
|
- path: keycloak-ingress.yaml
|
||||||
- path: keycloak-deployment.yaml
|
|
||||||
|
|
Loading…
Add table
Reference in a new issue