replicaCount: 1

# NOTE(mrtz): Hack for working with bitnami legacy registry
global:
  security:
    allowInsecureImages: true
image:
    repository: bitnamilegacy/keycloak

production: true

proxy: edge

auth:
  adminPassword: en to tre fire
  adminUser: admin
  existingSecret: ""
  managementPassword: ""
  managementUser: manager

postgresql:
  enabled: true
  auth:
    postgresPassword: "avatar mustiness economic"
    password: "punctured abstain facility"

extraVolumeMounts:
- mountPath: /opt/bitnami/keycloak/themes/oceanbox
  name: theme

extraVolumes:
- emptyDir: {}
  name: theme

ingress:
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-production
    nginx.ingress.kubernetes.io/enable-cors: "true"
    nginx.ingress.kubernetes.io/backend-protocol: HTTP
    nginx.ingress.kubernetes.io/proxy-buffer-size: 128k
    nginx.ingress.kubernetes.io/ssl-redirect: "true"
  enabled: true
  hostname: auth.srv.oceanbox.io
  ingressClassName: nginx
  path: /
  pathType: ImplementationSpecific
  selfSigned: false
  servicePort: http
  tls: true

adminIngress:
  enabled: false
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-production
    nginx.ingress.kubernetes.io/enable-cors: "true"
    nginx.ingress.kubernetes.io/backend-protocol: HTTP
    nginx.ingress.kubernetes.io/proxy-buffer-size: 128k
    nginx.ingress.kubernetes.io/ssl-redirect: "true"
    oceanbox.io/expose: internal
  hostname: auth.adm.oceanbox.io
  ingressClassName: nginx
  path: /
  pathType: ImplementationSpecific
  selfSigned: false
  servicePort: http
  tls: true

initContainers: |
  - name: keycloak-theme-provider
    image: docker.io/juselius/oceanbox-theme:1.2
    imagePullPolicy: Always
    command:
      - sh
    args:
      - -c
      - |
        echo "Copying theme..."
        cp -R /theme/* /keycloak/themes/oceanbox
    volumeMounts:
      - name: theme
        mountPath: /keycloak/themes/oceanbox
