Added keycloak operator

k3s-tooling/templates/keycloak-operator.yaml

@@ -0,0 +1,28 @@
+{{- if .Values.keycloakOperator.enable -}}
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: keycloak-operator
+  namespace: {{ .Values.argocd.namespace }}
+  annotations:
+    notifications.argoproj.io/subscribe.on-sync-succeeded.telegram: "-1002270587578"
+spec:
+  project: {{ .Values.argocd.project }}
+  source:
+    repoURL: "https://git.blarre.net/thomas/helm-charts.git"
+    targetRevision: HEAD
+    path: keycloak-operator
+    helm:
+      releaseName: keycloak-operator
+  destination:
+    server: {{ .Values.keycloakOperator.destination.server }}
+    namespace: {{ .Values.keycloakOperator.destination.namespace }}
+  syncPolicy:
+    automated:
+      prune: true           # Automatically remove resources no longer in the repo
+      selfHeal: true        # Automatically self-heal when drift is detected
+    syncOptions:
+      - ApplyOutOfSyncOnly=true
+      - ServerSideApply=true
+      - CreateNamespace=true
+{{- end }}

k3s-tooling/values.yaml

@@ -41,3 +41,8 @@ traefik:
     server: https://kubernetes.default.svc
     namespace: kube-system
 
+keycloak-operator:
+  enable: false
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: keycloak

keycloak-operator/.helmignore

@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/

keycloak-operator/Chart.yaml

@@ -0,0 +1,6 @@
+apiVersion: v2
+name: keycloak-operator
+description: A Helm chart for the Keycloak operator
+type: application
+version: 0.1.0
+appVersion: "26.0.5"

keycloak-operator/templates/_helpers.tpl

@@ -0,0 +1,62 @@
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "keycloak-operator.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+If release name contains chart name it will be used as a full name.
+*/}}
+{{- define "keycloak-operator.fullname" -}}
+{{- if .Values.fullnameOverride }}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- $name := default .Chart.Name .Values.nameOverride }}
+{{- if contains $name .Release.Name }}
+{{- .Release.Name | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
+{{- end }}
+{{- end }}
+{{- end }}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "keycloak-operator.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Common labels
+*/}}
+{{- define "keycloak-operator.labels" -}}
+helm.sh/chart: {{ include "keycloak-operator.chart" . }}
+{{ include "keycloak-operator.selectorLabels" . }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end }}
+
+{{/*
+Selector labels
+*/}}
+{{- define "keycloak-operator.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "keycloak-operator.name" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- end }}
+
+{{/*
+Create the name of the service account to use
+*/}}
+{{- define "keycloak-operator.serviceAccountName" -}}
+{{- if .Values.serviceAccount.create }}
+{{- default (include "keycloak-operator.fullname" .) .Values.serviceAccount.name }}
+{{- else }}
+{{- default "default" .Values.serviceAccount.name }}
+{{- end }}
+{{- end }}

keycloak-operator/templates/keycloak-crd.yaml

@@ -0,0 +1,15 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: keycloak-crd-job
+spec:
+  template:
+    spec:
+      containers:
+        - name: crd-fetcher
+          image: bitnami/kubectl:latest  # Use Bitnami's kubectl image
+          command:
+            - "sh"
+            - "-c"
+            - "curl -fL {{ .Values.baseURL }}/{{ .Release.appVersion }}/kubernetes/keycloaks.k8s.keycloak.org-v1.yml -o /tmp/keycloak-crd.yml && kubectl apply -f /tmp/keycloak-crd.yml"
+      restartPolicy: OnFailure

keycloak-operator/templates/keycloak-operator.yaml

@@ -0,0 +1,17 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: keycloakoperator-job
+  annotations:
+    "helm.sh/hook": post-install
+spec:
+  template:
+    spec:
+      containers:
+        - name: crd-fetcher
+          image: bitnami/kubectl:latest  # Use Bitnami's kubectl image
+          command:
+            - "sh"
+            - "-c"
+            - "curl -fL {{ .Values.baseURL }}/{{ .Release.appVersion }}/kubernetes/kubernetes.yml -o /tmp/keycloakoperator.yml && kubectl apply -f /tmp/keycloakoperator.yml"
+      restartPolicy: OnFailure

keycloak-operator/templates/keycloakrealmimports-crd.yaml

@@ -0,0 +1,15 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: keycloakrealmimports-crd-job
+spec:
+  template:
+    spec:
+      containers:
+        - name: crd-fetcher
+          image: bitnami/kubectl:latest  # Use Bitnami's kubectl image
+          command:
+            - "sh"
+            - "-c"
+            - "curl -fL {{ .Values.baseURL }}/{{ .Release.appVersion }}/kubernetes/keycloakrealmimports.k8s.keycloak.org-v1.yml -o /tmp/keycloakrealmimports-crd.yml && kubectl apply -f /tmp/keycloakrealmimports-crd.yml"
+      restartPolicy: OnFailure

keycloak-operator/values.yaml

@@ -0,0 +1 @@
+baseURL: "https://raw.githubusercontent.com/keycloak/keycloak-k8s-resources"