Compare commits
17 Commits
71d8aa9fc5
...
keycloak-v
| Author | SHA1 | Date | |
|---|---|---|---|
| d11b156f15 | |||
| 854f936c13 | |||
| 88e49484bb | |||
| d72e29ff16 | |||
| 3bbb2f8240 | |||
| c84b0cd754 | |||
| b0b300073f | |||
| 4c8e4fdda8 | |||
| 33ae8790bc | |||
| ef882de1d8 | |||
| 975319c401 | |||
| 08359d4642 | |||
| 7924303a33 | |||
| 4092438f95 | |||
| 180b147897 | |||
| beaf854645 | |||
| c06b8bf2f3 |
@@ -2,5 +2,5 @@ apiVersion: v2
|
|||||||
name: immich-argocd-apps
|
name: immich-argocd-apps
|
||||||
description: A Helm chart for deploying Immich as an ArgoCD app
|
description: A Helm chart for deploying Immich as an ArgoCD app
|
||||||
type: application
|
type: application
|
||||||
version: 0.1.4
|
version: 0.3.0
|
||||||
appVersion: v1.120.2
|
appVersion: v1.123.0
|
||||||
|
|||||||
@@ -2,4 +2,4 @@ apiVersion: v2
|
|||||||
name: keycloak-argocd-apps
|
name: keycloak-argocd-apps
|
||||||
description: A Helm chart for deploying the different argocd apps to deploy Keycloak
|
description: A Helm chart for deploying the different argocd apps to deploy Keycloak
|
||||||
type: application
|
type: application
|
||||||
version: 0.1.0
|
version: 0.2.1
|
||||||
|
|||||||
@@ -1,7 +1,7 @@
|
|||||||
apiVersion: argoproj.io/v1alpha1
|
apiVersion: argoproj.io/v1alpha1
|
||||||
kind: Application
|
kind: Application
|
||||||
metadata:
|
metadata:
|
||||||
name: keycloak-deployment
|
name: {{ .Values.argocd.prefix }}keycloak-deployment
|
||||||
namespace: {{ .Values.argocd.namespace }}
|
namespace: {{ .Values.argocd.namespace }}
|
||||||
annotations:
|
annotations:
|
||||||
argocd.argoproj.io/sync-wave: "0"
|
argocd.argoproj.io/sync-wave: "0"
|
||||||
@@ -10,14 +10,26 @@ spec:
|
|||||||
project: {{ .Values.argocd.project }}
|
project: {{ .Values.argocd.project }}
|
||||||
source:
|
source:
|
||||||
repoURL: "https://git.blarre.net/thomas/helm-charts.git"
|
repoURL: "https://git.blarre.net/thomas/helm-charts.git"
|
||||||
targetRevision: HEAD
|
targetRevision: {{ .Values.keycloakDeployment.targetRevision }}
|
||||||
path: keycloak-deployment
|
path: keycloak-deployment
|
||||||
helm:
|
helm:
|
||||||
releaseName: keycloak-deployment
|
releaseName: keycloak-deployment
|
||||||
valuesObject:
|
valuesObject:
|
||||||
|
prefix: {{ .Values.argocd.prefix }}
|
||||||
keycloakDeployment:
|
keycloakDeployment:
|
||||||
|
deploymentName: {{ .Values.keycloakDeployment.deploymentName }}
|
||||||
numInstances: {{ .Values.keycloakDeployment.numInstances }}
|
numInstances: {{ .Values.keycloakDeployment.numInstances }}
|
||||||
hostname: {{ .Values.keycloakDeployment.hostname }}
|
hostname: {{ .Values.keycloakDeployment.hostname }}
|
||||||
|
vendor: {{ .Values.keycloakDeployment.vendor }}
|
||||||
|
dbHost: {{ .Values.keycloakDeployment.dbHost }}
|
||||||
|
dbPort: {{ .Values.keycloakDeployment.dbPort }}
|
||||||
|
usernameSecret:
|
||||||
|
name: {{ .Values.keycloakDeployment.usernameSecret.name }}
|
||||||
|
key: {{ .Values.keycloakDeployment.usernameSecret.key }}
|
||||||
|
passwordSecret:
|
||||||
|
name: {{ .Values.keycloakDeployment.passwordSecret.name }}
|
||||||
|
key: {{ .Values.keycloakDeployment.passwordSecret.key }}
|
||||||
|
database: {{ .Values.keycloakDeployment.database }}
|
||||||
destination:
|
destination:
|
||||||
server: {{ .Values.mainDestination }}
|
server: {{ .Values.mainDestination }}
|
||||||
namespace: {{ .Values.mainNamespace }}
|
namespace: {{ .Values.mainNamespace }}
|
||||||
|
|||||||
@@ -1,7 +1,7 @@
|
|||||||
apiVersion: argoproj.io/v1alpha1
|
apiVersion: argoproj.io/v1alpha1
|
||||||
kind: Application
|
kind: Application
|
||||||
metadata:
|
metadata:
|
||||||
name: keycloak-postinstall
|
name: {{ .Values.argocd.prefix }}keycloak-postinstall
|
||||||
namespace: {{ .Values.argocd.namespace }}
|
namespace: {{ .Values.argocd.namespace }}
|
||||||
annotations:
|
annotations:
|
||||||
argocd.argoproj.io/sync-wave: "1"
|
argocd.argoproj.io/sync-wave: "1"
|
||||||
@@ -10,11 +10,12 @@ spec:
|
|||||||
project: {{ .Values.argocd.project }}
|
project: {{ .Values.argocd.project }}
|
||||||
source:
|
source:
|
||||||
repoURL: "https://git.blarre.net/thomas/helm-charts.git"
|
repoURL: "https://git.blarre.net/thomas/helm-charts.git"
|
||||||
targetRevision: HEAD
|
targetRevision: {{ .Values.keycloakDeployment.targetRevision }}
|
||||||
path: keycloak-postinstall
|
path: keycloak-postinstall
|
||||||
helm:
|
helm:
|
||||||
releaseName: keycloak-postinstall
|
releaseName: keycloak-postinstall
|
||||||
valuesObject:
|
valuesObject:
|
||||||
|
prefix: {{ .Values.argocd.prefix }}
|
||||||
tailscaleIngresses:
|
tailscaleIngresses:
|
||||||
keycloakHostname: {{ .Values.tailscaleIngresses.keycloakHostname }}
|
keycloakHostname: {{ .Values.tailscaleIngresses.keycloakHostname }}
|
||||||
destination:
|
destination:
|
||||||
|
|||||||
@@ -1,7 +1,8 @@
|
|||||||
|
{{- if .Values.dbCluster.enable -}}
|
||||||
apiVersion: argoproj.io/v1alpha1
|
apiVersion: argoproj.io/v1alpha1
|
||||||
kind: Application
|
kind: Application
|
||||||
metadata:
|
metadata:
|
||||||
name: keycloak-requirements
|
name: {{ .Values.argocd.prefix }}keycloak-requirements
|
||||||
namespace: {{ .Values.argocd.namespace }}
|
namespace: {{ .Values.argocd.namespace }}
|
||||||
annotations:
|
annotations:
|
||||||
argocd.argoproj.io/sync-wave: "-1"
|
argocd.argoproj.io/sync-wave: "-1"
|
||||||
@@ -15,6 +16,7 @@ spec:
|
|||||||
helm:
|
helm:
|
||||||
releaseName: keycloak-requirements
|
releaseName: keycloak-requirements
|
||||||
valuesObject:
|
valuesObject:
|
||||||
|
prefix: {{ .Values.argocd.prefix }}
|
||||||
dbCluster:
|
dbCluster:
|
||||||
size: {{ .Values.dbCluster.size }}
|
size: {{ .Values.dbCluster.size }}
|
||||||
numInstances: {{ .Values.dbCluster.numInstances }}
|
numInstances: {{ .Values.dbCluster.numInstances }}
|
||||||
@@ -29,3 +31,4 @@ spec:
|
|||||||
- ApplyOutOfSyncOnly=true
|
- ApplyOutOfSyncOnly=true
|
||||||
- ServerSideApply=true
|
- ServerSideApply=true
|
||||||
- CreateNamespace=true
|
- CreateNamespace=true
|
||||||
|
{{- end }}
|
||||||
@@ -1,13 +1,26 @@
|
|||||||
argocd:
|
argocd:
|
||||||
namespace: argocd
|
namespace: argocd
|
||||||
project: default
|
project: default
|
||||||
|
prefix: null
|
||||||
dbCluster:
|
dbCluster:
|
||||||
size: 1Gi
|
enable: true
|
||||||
|
size: 10Gi
|
||||||
numInstances: 3
|
numInstances: 3
|
||||||
mainNamespace: keycloak
|
mainNamespace: keycloak
|
||||||
mainDestination: https://kubernetes.default.svc
|
mainDestination: https://kubernetes.default.svc
|
||||||
keycloakDeployment:
|
keycloakDeployment:
|
||||||
|
targetRevision: HEAD
|
||||||
numInstances: 1
|
numInstances: 1
|
||||||
hostname: sso.domain.net
|
hostname: sso.domain.net
|
||||||
|
vendor: postgres
|
||||||
|
dbHost: keycloak-db-rw
|
||||||
|
dbPort: 5432
|
||||||
|
usernameSecret:
|
||||||
|
name: keycloak-db-app
|
||||||
|
key: user
|
||||||
|
passwordSecret:
|
||||||
|
name: keycloak-db-app
|
||||||
|
key: password
|
||||||
|
database: app
|
||||||
tailscaleIngresses:
|
tailscaleIngresses:
|
||||||
keycloakHostname: sso
|
keycloakHostname: sso
|
||||||
@@ -2,4 +2,4 @@ apiVersion: v2
|
|||||||
name: keycloak-deployment
|
name: keycloak-deployment
|
||||||
description: A Helm chart for deploying the actual keycloak pod through the keycloak operator
|
description: A Helm chart for deploying the actual keycloak pod through the keycloak operator
|
||||||
type: application
|
type: application
|
||||||
version: 0.1.0
|
version: 0.2.1
|
||||||
@@ -1,19 +1,20 @@
|
|||||||
apiVersion: k8s.keycloak.org/v2alpha1
|
apiVersion: k8s.keycloak.org/v2alpha1
|
||||||
kind: Keycloak
|
kind: Keycloak
|
||||||
metadata:
|
metadata:
|
||||||
name: linode-keycloak
|
name: {{ .Values.prefix }}keycloak
|
||||||
spec:
|
spec:
|
||||||
instances: {{ .Values.keycloakDeployment.numInstances }}
|
instances: {{ .Values.keycloakDeployment.numInstances }}
|
||||||
db:
|
db:
|
||||||
vendor: postgres
|
vendor: {{ .Values.keycloakDeployment.vendor }}
|
||||||
host: keycloak-db-rw
|
host: {{ .Values.keycloakDeployment.dbHost }}
|
||||||
|
port: {{ .Values.keycloakDeployment.dbPort }}
|
||||||
usernameSecret:
|
usernameSecret:
|
||||||
name: keycloak-db-app
|
name: {{ .Values.keycloakDeployment.usernameSecret.name }}
|
||||||
key: user
|
key: {{ .Values.keycloakDeployment.usernameSecret.key }}
|
||||||
passwordSecret:
|
passwordSecret:
|
||||||
name: keycloak-db-app
|
name: {{ .Values.keycloakDeployment.passwordSecret.name }}
|
||||||
key: password
|
key: {{ .Values.keycloakDeployment.passwordSecret.key }}
|
||||||
database: app
|
database: {{ .Values.keycloakDeployment.database }}
|
||||||
ingress:
|
ingress:
|
||||||
enabled: false
|
enabled: false
|
||||||
http:
|
http:
|
||||||
|
|||||||
@@ -1,3 +1,14 @@
|
|||||||
|
prefix: null
|
||||||
keycloakDeployment:
|
keycloakDeployment:
|
||||||
numInstances: 1
|
numInstances: 1
|
||||||
hostname: sso.domain.net
|
hostname: sso.domain.net
|
||||||
|
vendor: postgres
|
||||||
|
dbHost: keycloak-db-rw
|
||||||
|
dbPort: 5432
|
||||||
|
usernameSecret:
|
||||||
|
name: keycloak-db-app
|
||||||
|
key: user
|
||||||
|
passwordSecret:
|
||||||
|
name: keycloak-db-app
|
||||||
|
key: password
|
||||||
|
database: app
|
||||||
@@ -1,7 +1,7 @@
|
|||||||
apiVersion: networking.k8s.io/v1
|
apiVersion: networking.k8s.io/v1
|
||||||
kind: Ingress
|
kind: Ingress
|
||||||
metadata:
|
metadata:
|
||||||
name: ts-keycloak
|
name: {{ .Values.prefix }}ts-keycloak
|
||||||
annotations:
|
annotations:
|
||||||
tailscale.com/funnel: "true"
|
tailscale.com/funnel: "true"
|
||||||
spec:
|
spec:
|
||||||
|
|||||||
@@ -1,2 +1,3 @@
|
|||||||
|
prefix: null
|
||||||
tailscaleIngresses:
|
tailscaleIngresses:
|
||||||
keycloakHostname: sso
|
keycloakHostname: sso
|
||||||
@@ -2,4 +2,4 @@ apiVersion: v2
|
|||||||
name: keycloak-requirements
|
name: keycloak-requirements
|
||||||
description: A Helm chart for deploying the DB used by keycloak
|
description: A Helm chart for deploying the DB used by keycloak
|
||||||
type: application
|
type: application
|
||||||
version: 0.1.0
|
version: 0.1.1
|
||||||
|
|||||||
@@ -1,7 +1,7 @@
|
|||||||
apiVersion: postgresql.cnpg.io/v1
|
apiVersion: postgresql.cnpg.io/v1
|
||||||
kind: Cluster
|
kind: Cluster
|
||||||
metadata:
|
metadata:
|
||||||
name: keycloak-db
|
name: {{ .Values.prefix }}keycloak-db
|
||||||
spec:
|
spec:
|
||||||
instances: {{ .Values.dbCluster.numInstances }}
|
instances: {{ .Values.dbCluster.numInstances }}
|
||||||
|
|
||||||
|
|||||||
@@ -1,4 +1,4 @@
|
|||||||
|
prefix: null
|
||||||
dbCluster:
|
dbCluster:
|
||||||
size: 1Gi
|
size: 1Gi
|
||||||
numInstances: 3
|
numInstances: 3
|
||||||
|
|
||||||
@@ -15,8 +15,10 @@ spec:
|
|||||||
helm:
|
helm:
|
||||||
releaseName: vaultwarden
|
releaseName: vaultwarden
|
||||||
valuesObject:
|
valuesObject:
|
||||||
domain: {{ .Values.vaultwarden.fqdn }}
|
domain: {{ .Values.vaultwarden.domain }}
|
||||||
timeZone: {{ .Values.vaultwarden.timeZone }}
|
timeZone: {{ .Values.vaultwarden.timeZone }}
|
||||||
|
adminToken:
|
||||||
|
value: {{ .Values.vaultwarden.adminToken.value }}
|
||||||
database:
|
database:
|
||||||
type: postgresql
|
type: postgresql
|
||||||
existingSecret: {{ .Values.vaultwarden.dbCluster.secretName }}
|
existingSecret: {{ .Values.vaultwarden.dbCluster.secretName }}
|
||||||
@@ -25,15 +27,17 @@ spec:
|
|||||||
name: {{ .Values.vaultwarden.dataPvc.name }}
|
name: {{ .Values.vaultwarden.dataPvc.name }}
|
||||||
size: {{ .Values.vaultwarden.dataPvc.size }}
|
size: {{ .Values.vaultwarden.dataPvc.size }}
|
||||||
class: {{ .Values.vaultwarden.dataPvc.storageClassName }}
|
class: {{ .Values.vaultwarden.dataPvc.storageClassName }}
|
||||||
|
accessMode: {{ .Values.vaultwarden.dataPvc.accessMode }}
|
||||||
attachments:
|
attachments:
|
||||||
name: {{ .Values.vaultwarden.attachmentPvc.name }}
|
name: {{ .Values.vaultwarden.attachmentPvc.name }}
|
||||||
size: {{ .Values.vaultwarden.attachmentPvc.size }}
|
size: {{ .Values.vaultwarden.attachmentPvc.size }}
|
||||||
class: {{ .Values.vaultwarden.attachmentPvc.storageClassName }}
|
class: {{ .Values.vaultwarden.attachmentPvc.storageClassName }}
|
||||||
|
accessMode: {{ .Values.vaultwarden.attachmentPvc.accessMode }}
|
||||||
ingress:
|
ingress:
|
||||||
enabled: false
|
enabled: false
|
||||||
destination:
|
destination:
|
||||||
server: {{ .Values.mainDestination }}
|
server: {{ .Values.destination.server }}
|
||||||
namespace: {{ .Values.mainNamespace }}
|
namespace: {{ .Values.destination.namespace }}
|
||||||
syncPolicy:
|
syncPolicy:
|
||||||
automated:
|
automated:
|
||||||
prune: true # Automatically remove resources no longer in the repo
|
prune: true # Automatically remove resources no longer in the repo
|
||||||
|
|||||||
@@ -23,7 +23,7 @@ spec:
|
|||||||
name: {{ .Values.vaultwarden.dataPvc.name }}
|
name: {{ .Values.vaultwarden.dataPvc.name }}
|
||||||
storageClassName: {{ .Values.vaultwarden.dataPvc.storageClassName }}
|
storageClassName: {{ .Values.vaultwarden.dataPvc.storageClassName }}
|
||||||
size: {{ .Values.vaultwarden.dataPvc.size }}
|
size: {{ .Values.vaultwarden.dataPvc.size }}
|
||||||
mainNamespace: {{ .Values.destnation.namespace }}
|
mainNamespace: {{ .Values.destination.namespace }}
|
||||||
destination:
|
destination:
|
||||||
server: {{ .Values.destination.server }}
|
server: {{ .Values.destination.server }}
|
||||||
namespace: {{ .Values.destination.namespace }}
|
namespace: {{ .Values.destination.namespace }}
|
||||||
|
|||||||
@@ -23,12 +23,16 @@ vaultwarden:
|
|||||||
name: vaultwarden-data
|
name: vaultwarden-data
|
||||||
storageClassName: ''
|
storageClassName: ''
|
||||||
size: 10Gi
|
size: 10Gi
|
||||||
|
accessMode: "ReadWriteOnce"
|
||||||
attachmentPvc:
|
attachmentPvc:
|
||||||
name: vaultwarden-attachments
|
name: vaultwarden-attachments
|
||||||
storageClassName: 'linode-block-storage-retain-luks-vw'
|
storageClassName: 'linode-block-storage-retain-luks-vw'
|
||||||
size: 10Gi
|
size: 10Gi
|
||||||
fqdn: vaultwarden.domain.net
|
accessMode: "ReadWriteOnce"
|
||||||
|
domain: "https://vaultwarden.domain.net"
|
||||||
timeZone: "Europe/Lisbon"
|
timeZone: "Europe/Lisbon"
|
||||||
|
adminToken:
|
||||||
|
value:
|
||||||
|
|
||||||
tailscaleIngresses:
|
tailscaleIngresses:
|
||||||
vaultwardenHostname: vaultwarden
|
vaultwardenHostname: vaultwarden
|
||||||
|
|||||||
Reference in New Issue
Block a user