From b04c80e79cb607ee24553ad7b22e6623e7fc1456 Mon Sep 17 00:00:00 2001
From: Benedith Mulongo <benedith@sunet.se>
Date: Thu, 30 Jan 2025 12:42:41 +0100
Subject: [PATCH] Update to tls

---
 keycloak/base/keycloak-deployment.yaml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/keycloak/base/keycloak-deployment.yaml b/keycloak/base/keycloak-deployment.yaml
index 8680bd9..b69e929 100644
--- a/keycloak/base/keycloak-deployment.yaml
+++ b/keycloak/base/keycloak-deployment.yaml
@@ -19,7 +19,7 @@ spec:
       - name: keycloak
         # image: quay.io/keycloak/keycloak:23.0.1
         image: quay.io/keycloak/keycloak:26.1
-        args: [ "start" ]
+        args: [ "start", "--optimized" ]
         env:
         - name: KC_BOOTSTRAP_ADMIN_USERNAME
           value: admin
@@ -42,7 +42,13 @@ spec:
         volumeMounts:
         - mountPath: /opt/keycloak/data/h2/
           name: storage
+        - name: tls-secret
+          mountPath: /etc/ssl/certs
+          readOnly: true
       volumes:
       - name: storage
         persistentVolumeClaim:
           claimName: keycloak-pvc
+      - name: tls-secret
+        secret:
+          secretName: keycloak-tls-secret