Keycloak Chart
keycloak¶
A Helm chart for Kubernetes
The Keycloak chart runs the Keycloak, Hazy's chosen authentication and authorization service.
Please create the secret release.hazy.com which allows for access to Hazy's Docker registry to pull the corresponding images.
kubectl create secret generic release.hazy.com \
--from-file=.dockerconfigjson=/path/to/docker-secret.json \
--type=kubernetes.io/dockerconfigjson
Values¶
| Key | Type | Default | Description |
|---|---|---|---|
| affinity | object | {} |
|
| autoscaling.enabled | bool | false |
|
| autoscaling.maxReplicas | int | 100 |
|
| autoscaling.minReplicas | int | 1 |
|
| autoscaling.targetCPUUtilizationPercentage | int | 80 |
|
| backendClient | string | "" |
|
| backendClientSecret | string | "" |
|
| bootstrapSaaSUsers | bool | false |
|
| dbPostgresSecret | string | "hazy-db" |
|
| defaultPolicy | string | "" |
|
| env | object | {} |
|
| fullnameOverride | string | "" |
|
| hostnameStrict | bool | false |
|
| image.pullPolicy | string | "Always" |
|
| image.repository | string | "release.hazy.com/hazy/keycloak" |
|
| image.tag | string | "" |
|
| imagePullSecrets | list | [] |
|
| ingress.annotations | object | {} |
|
| ingress.className | string | "" |
|
| ingress.enabled | bool | false |
|
| ingress.hosts[0].host | string | "chart-example.local" |
|
| ingress.hosts[0].paths[0].path | string | "/" |
|
| ingress.hosts[0].paths[0].pathType | string | "ImplementationSpecific" |
|
| ingress.tls | list | [] |
|
| internalUrl | string | "" |
|
| logoutUrl | string | "" |
|
| nameOverride | string | "" |
|
| nodeSelector | object | {} |
|
| podAnnotations | object | {} |
|
| podSecurityContext | object | {} |
|
| realm | string | "" |
|
| redirectUrl | string | "" |
|
| replicaCount | int | 1 |
|
| resources | object | {} |
|
| securityContext | object | {} |
|
| service.port | int | 8080 |
|
| service.type | string | "ClusterIP" |
|
| serviceAccount.annotations | object | {} |
|
| serviceAccount.create | bool | true |
|
| serviceAccount.name | string | "keycloak" |
|
| setAuthRelativePath | bool | false |
|
| tolerations | list | [] |