blob: dd63d3a08f4ec78459cd41a4992adb6d757a7b56 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
|
securityContext:
allowPrivilegeEscalation: false
containers:
- name: keycloak
image: "quay.io/keycloak/keycloak:{{ item.value.version }}"
# securityContext:
# runAsUser: {{ keycloak_app_uid }}
# runAsGroup: {{ keycloak_app_gid }}
resources:
limits:
memory: "1Gi"
env:
- name: DB_VENDOR
value: mariadb
- name: DB_ADDR
value: 127.0.0.1
- name: DB_DATABASE
value: keycloak
- name: DB_USER
value: keycloak
- name: DB_PASSWORD
value: "{{ item.value.database.password }}"
- name: KEYCLOAK_USER
value: "{{ item.value.admin.username }}"
- name: KEYCLOAK_PASSWORD
value: "{{ item.value.admin.password }}"
- name: KEYCLOAK_FRONTEND_URL
value: "https://{{ item.value.hostname }}"
ports:
- containerPort: 8080
hostPort: {{ item.value.port }}
hostIP: 127.0.0.1
- name: database
image: "mariadb:{{ item.value.database.version }}"
securityContext:
runAsUser: {{ keycloak_db_uid }}
runAsGroup: {{ keycloak_db_gid }}
resources:
limits:
memory: "512Mi"
{% if 'new' in item.value and item.value.new %}
env:
- name: MYSQL_RANDOM_ROOT_PASSWORD
value: "true"
- name: MYSQL_DATABASE
value: keycloak
- name: MYSQL_USER
value: keycloak
- name: MYSQL_PASSWORD
value: "{{ item.value.database.password }}"
{% endif %}
volumeMounts:
- name: database
mountPath: /var/lib/mysql
volumes:
- name: database
hostPath:
path: "{{ keycloak_base_path }}/{{ item.key }}/{{ item.value.database.type }}"
type: Directory
|
