ca5ff418dd
- new deploy/k8s/keycloak/ kustomization with namespace, keycloak-postgres StatefulSet, keycloak Deployment - keycloak Deployment uses quay.io/keycloak/keycloak:25.0 with --hostname-strict=false, postgres backend - PVC data-keycloak-postgres-0 (5Gi local-path) bound to the StatefulSet - secrets keycloak-postgres / keycloak-admin provisioned in keycloak namespace - OIDC discovery endpoint confirmed reachable via port-forward; master realm issuer http://.../realms/master - next round will provision the hwlab realm + OIDC client
9 lines
190 B
YAML
9 lines
190 B
YAML
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: keycloak
|
|
labels:
|
|
app.kubernetes.io/part-of: hwlab
|
|
hwlab.pikastech.local/profile: dev
|
|
hwlab.pikastech.local/component: identity
|