History

Stefan Reimer d41e82ff08 fix: shorten kubezero-lib names, tweaks		2022-12-15 21:51:31 +00:00
..
crds	feat: version bump keycloak to 20.X, add PDB, support HA deployment	2022-11-03 13:20:50 +01:00
templates/keycloak	fix: shorten kubezero-lib names, tweaks	2022-12-15 21:51:31 +00:00
Chart.yaml	fix: shorten kubezero-lib names, tweaks	2022-12-15 21:51:31 +00:00
README.md	fix: shorten kubezero-lib names, tweaks	2022-12-15 21:51:31 +00:00
README.md.gotmpl	fix: disable JVM metrics, prepare for metrics SPI	2022-11-03 15:02:21 +01:00
dashboards-keycloak.yaml	fix: shorten kubezero-lib names, tweaks	2022-12-15 21:51:31 +00:00
keycloak.patch	feat: Make Keycloak work behind Istio	2022-05-11 16:31:37 +02:00
update.sh	feat: add metrics support to keycloak, block access to /metrics from ingress	2022-11-03 14:41:46 +01:00
values.yaml	feat: version bump keycloak to 20.X, add PDB, support HA deployment	2022-11-03 13:20:50 +01:00

README.md

kubezero-auth

KubeZero umbrella chart for all things Authentication and Identity management

Homepage: https://kubezero.com

Maintainers

Name	Email	Url
Stefan Reimer	stefan@zero-downtime.net

Requirements

Kubernetes: >= 1.20.0

Repository	Name	Version
https://cdn.zero-downtime.net/charts/	kubezero-lib	>= 0.1.6
https://charts.bitnami.com/bitnami	postgresql	11.8.1

Keycloak

Operator

https://github.com/keycloak/keycloak/tree/main/operator https://github.com/aerogear/keycloak-metrics-spi https://github.com/keycloak/keycloak-benchmark/tree/main/provision/minikube/keycloak/templates

Resources

Codecentric Helm chart: https://github.com/codecentric/helm-charts/tree/master/charts/keycloak
custom image: https://www.keycloak.org/server/containers

Values

Key	Type	Default	Description
keycloak.enabled	bool	`false`
keycloak.istio.enabled	bool	`false`
keycloak.istio.gateway	string	`"istio-ingress/private-ingressgateway"`
keycloak.istio.url	string	`""`
keycloak.metrics.enabled	bool	`false`
keycloak.podDisruptionBudget.minAvailable	int	`1`
keycloak.replicas	int	`1`
postgresql.auth.database	string	`"keycloak"`
postgresql.auth.existingSecret	string	`"kubezero-auth-postgresql"`
postgresql.auth.username	string	`"keycloak"`
postgresql.enabled	bool	`false`
postgresql.primary.persistence.size	string	`"1Gi"`
postgresql.readReplicas.replicaCount	int	`0`