Use different urls

keycloak/base/keycloak-deployment.yaml

@@ -26,6 +26,10 @@ spec:
             - "start"
             - "--verbose"
           env:
+            - name: KC_HOSTNAME_ADMIN_URL
+              value: "https://kcadmin.streams.sunet.se"
+            - name: KC_HOSTNAME_URL
+              value: "https://keycloak.streams.sunet.se"
             - name: KC_HOSTNAME_STRICT
               value: "false"
             - name: KC_HOSTNAME_STRICT_HTTPS

keycloak/base/keycloak-ingress.yaml

@@ -17,6 +17,8 @@ spec:
     - hosts:
       - keycloak.streams.sunet.se
         secretName: keycloak-tls
+      - kcadmin.streams.sunet.se
+        secretName: kcadmin-tls
   rules:
     - host: keycloak.streams.sunet.se
       http:
@@ -28,3 +30,13 @@ spec:
               name: keycloak
               port:
                 number: 80
+    - host: kcadmin.streams.sunet.se
+      http:
+        paths:
+        - path: /
+          pathType: Prefix
+          backend:
+            service:
+              name: keycloak
+              port:
+                number: 80

keycloak/keycloak-application.yaml

@@ -7,7 +7,7 @@ spec:
   project: default
   source:
     repoURL: https://platform.sunet.se/streams/streams-manifests.git
-    targetRevision: streams-manifests-2025-01-31-v18
+    targetRevision: streams-manifests-2025-01-31-v19
     path: keycloak/overlays/test
   destination:
     server: https://kubernetes.default.svc

keycloak/overlays/test/keycloak-deployment.yaml

@@ -0,0 +1,49 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: keycloak
+  namespace: keycloak
+  labels:
+    app: keycloak
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: keycloak
+  template:
+    metadata:
+      labels:
+        app: keycloak
+    spec:
+      containers:
+        - name: keycloak
+          image: quay.io/keycloak/keycloak:26.1
+          env:
+            - name: KC_HOSTNAME_ADMIN_URL
+              value: "https://kcadmin-test.streams.sunet.se"
+            - name: KC_HOSTNAME_URL
+              value: "https://keycloak-test.streams.sunet.se"
+            - name: KC_HOSTNAME_STRICT
+              value: "false"
+            - name: KC_HOSTNAME_STRICT_HTTPS
+              value: "false"
+            - name: KC_HTTP_ENABLED
+              value: "true"
+            - name: KEYCLOAK_USER
+              value: admin
+            - name: KEYCLOAK_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: keycloak-admin-secret
+                  key: password
+            - name: KC_BOOTSTRAP_ADMIN_USERNAME
+              value: "admin"
+            - name: KC_BOOTSTRAP_ADMIN_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: keycloak-admin-secret
+                  key: password
+            - name: KC_HEALTH_ENABLED
+              value: "true"
+            - name: KC_PROXY
+              value: "edge"

keycloak/overlays/test/keycloak-ingress.yaml

@@ -17,6 +17,8 @@ spec:
     - hosts:
       - keycloak-test.streams.sunet.se
         secretName: keycloak-tls
+      - kcadmin-test.streams.sunet.se
+        secretName: kcadmin-tls
   rules:
     - host: keycloak-test.streams.sunet.se
       http:
@@ -28,3 +30,13 @@ spec:
               name: keycloak
               port:
                 number: 80
+    - host: kcadmin-test.streams.sunet.se
+      http:
+        paths:
+        - path: /
+          pathType: Prefix
+          backend:
+            service:
+              name: keycloak
+              port:
+                number: 80

keycloak/overlays/test/kustomization.yaml

@@ -6,4 +6,5 @@ commonLabels:
 resources:
 - ../../base/
 patches:
+  - path: keycloak-deployment.yaml
   - path: keycloak-ingress.yaml