apiVersion: k8s.keycloak.org/v2alpha1 kind: Keycloak metadata: name: linode-keycloak spec: instances: {{ .Values.keycloakDeployment.numInstances }} db: vendor: {{ .Values.keycloakDeployment.vendor }} host: {{ .Values.keycloakDeployment.dbHost }} usernameSecret: name: {{ .Values.keycloakDeployment.usernameSecret.name }} key: {{ .Values.keycloakDeployment.usernameSecret.key }} passwordSecret: name: {{ .Values.keycloakDeployment.passwordSecret.name }} key: {{ .Values.keycloakDeployment.passwordSecret.key }} database: {{ .Values.keycloakDeployment.database }} ingress: enabled: false http: httpEnabled: true hostname: hostname: {{ .Values.keycloakDeployment.hostname }} strict: false proxy: headers: xforwarded # double check your reverse proxy sets and overwrites the X-Forwarded-* headers