---
apiVersion: v1
kind: Namespace
metadata:
  name: keycloak
---
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: keycloak
  namespace: keycloak
spec:
  interval: 10m
  timeout: 10m
  chart:
    spec:
      chart: keycloak
      version: "24.0.x"
      sourceRef:
        kind: HelmRepository
        name: bitnami
        namespace: flux-system
  values:
    global:
      imageRegistry: ""
    image:
      registry: registry.hub.docker.com
      repository: bitnami/keycloak
      pullPolicy: Always
    replicaCount: 1
    auth:
      existingSecret: keycloak-admin-secret
    postgresql:
      enabled: false
    externalDatabase:
      host: pgbouncer.default.svc.cluster.local
      port: 6432
      database: keycloak
      existingSecret: keycloak-db-secret
    ingress:
      enabled: true
      annotations:
        cert-manager.io/cluster-issuer: "n0ball-tw-issuer"
      hostname: keycloak.n0ball.tw
      tls: true
    extraEnvVars:
      - name: KC_PROXY
        value: edge