feat: add basic pgo
This commit is contained in:
@@ -0,0 +1,48 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: keycloak
|
||||
namespace: postgres-operator
|
||||
labels:
|
||||
app.kubernetes.io/name: keycloak
|
||||
spec:
|
||||
selector:
|
||||
matchLabels:
|
||||
app.kubernetes.io/name: keycloak
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app.kubernetes.io/name: keycloak
|
||||
spec:
|
||||
containers:
|
||||
- image: quay.io/keycloak/keycloak:latest
|
||||
name: keycloak
|
||||
env:
|
||||
- name: DB_VENDOR
|
||||
value: "postgres"
|
||||
- name: DB_ADDR
|
||||
valueFrom: { secretKeyRef: { name: keycloakdb-pguser-keycloakdb, key: host } }
|
||||
- name: DB_PORT
|
||||
valueFrom: { secretKeyRef: { name: keycloakdb-pguser-keycloakdb, key: port } }
|
||||
- name: DB_DATABASE
|
||||
valueFrom: { secretKeyRef: { name: keycloakdb-pguser-keycloakdb, key: dbname } }
|
||||
- name: DB_USER
|
||||
valueFrom: { secretKeyRef: { name: keycloakdb-pguser-keycloakdb, key: user } }
|
||||
- name: DB_PASSWORD
|
||||
valueFrom: { secretKeyRef: { name: keycloakdb-pguser-keycloakdb, key: password } }
|
||||
- name: KEYCLOAK_USER
|
||||
value: "admin"
|
||||
- name: KEYCLOAK_PASSWORD
|
||||
value: "admin"
|
||||
- name: PROXY_ADDRESS_FORWARDING
|
||||
value: "true"
|
||||
ports:
|
||||
- name: http
|
||||
containerPort: 8080
|
||||
- name: https
|
||||
containerPort: 8443
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /auth/realms/master
|
||||
port: 8080
|
||||
restartPolicy: Always
|
@@ -0,0 +1,5 @@
|
||||
namespace: postgres-operator
|
||||
|
||||
resources:
|
||||
- postgres.yaml
|
||||
- keycloak.yaml
|
@@ -0,0 +1,37 @@
|
||||
apiVersion: postgres-operator.crunchydata.com/v1beta1
|
||||
kind: PostgresCluster
|
||||
metadata:
|
||||
name: keycloakdb
|
||||
spec:
|
||||
image: registry.developers.crunchydata.com/crunchydata/crunchy-postgres:ubi8-14.7-0
|
||||
postgresVersion: 14
|
||||
instances:
|
||||
- replicas: 2
|
||||
dataVolumeClaimSpec:
|
||||
accessModes:
|
||||
- "ReadWriteOnce"
|
||||
resources:
|
||||
requests:
|
||||
storage: 1Gi
|
||||
affinity:
|
||||
podAntiAffinity:
|
||||
preferredDuringSchedulingIgnoredDuringExecution:
|
||||
- weight: 1
|
||||
podAffinityTerm:
|
||||
topologyKey: kubernetes.io/hostname
|
||||
labelSelector:
|
||||
matchLabels:
|
||||
postgres-operator.crunchydata.com/cluster: keycloakdb
|
||||
postgres-operator.crunchydata.com/instance-set: "00"
|
||||
backups:
|
||||
pgbackrest:
|
||||
image: registry.developers.crunchydata.com/crunchydata/crunchy-pgbackrest:ubi8-2.41-4
|
||||
repos:
|
||||
- name: repo1
|
||||
volume:
|
||||
volumeClaimSpec:
|
||||
accessModes:
|
||||
- "ReadWriteOnce"
|
||||
resources:
|
||||
requests:
|
||||
storage: 1Gi
|
Reference in New Issue
Block a user