Update to tls

keycloak/base/keycloak-deployment.yaml

@@ -19,7 +19,7 @@ spec:
       - name: keycloak
         # image: quay.io/keycloak/keycloak:23.0.1
         image: quay.io/keycloak/keycloak:26.1
-        args: [ "start" ]
+        args: [ "start", "--optimized" ]
         env:
         - name: KC_BOOTSTRAP_ADMIN_USERNAME
           value: admin
@@ -42,7 +42,13 @@ spec:
         volumeMounts:
         - mountPath: /opt/keycloak/data/h2/
           name: storage
+        - name: tls-secret
+          mountPath: /etc/ssl/certs
+          readOnly: true
       volumes:
       - name: storage
         persistentVolumeClaim:
           claimName: keycloak-pvc
+      - name: tls-secret
+        secret:
+          secretName: keycloak-tls-secret