Skip to content

Instantly share code, notes, and snippets.

@radikaled
Created January 17, 2024 15:40
Show Gist options
  • Save radikaled/6eb46c27c77d45d96ff290251b8dcced to your computer and use it in GitHub Desktop.
Save radikaled/6eb46c27c77d45d96ff290251b8dcced to your computer and use it in GitHub Desktop.
Example Keycloak CR utilizing strict FIPS custom image
apiVersion: k8s.keycloak.org/v2alpha1
kind: Keycloak
metadata:
name: example-keycloak
namespace: $(NAMESPACE)
spec:
additionalOptions:
- name: spi-truststore-file-file
value: /opt/keycloak/conf/server.keystore
- name: spi-truststore-file-password
secret:
key: password
name: spi-truststore
db:
host: keycloak-primary.rhbk.svc
passwordSecret:
key: password
name: keycloak-pguser-keycloak
schema: keycloak
usernameSecret:
key: user
name: keycloak-pguser-keycloak
vendor: postgres
hostname:
hostname: $(HOSTNAME)
http:
tlsSecret: example-keycloak-tls-secret
image: $(CUSTOM_IMG_LOC)
instances: 1
unsupported:
podTemplate:
spec:
containers:
- args:
- start
- '-Djava.security.properties=/opt/keycloak/conf/kc.java.security'
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment