fix(keycloak): Use theme from gitea

values/keycloak/values/values-prod.yaml

@@ -1,22 +1,9 @@
 replicaCount: 2
 
-# NOTE(mrtz): Hack for working with bitnami legacy registry
-global:
-  security:
-    allowInsecureImages: true
-image:
-    repository: bitnamilegacy/keycloak
-
-production: true
-
-proxy: edge
-
 auth:
   adminPassword: en to tre fire
-  adminUser: admin
   existingSecret: ""
   managementPassword: ""
-  managementUser: manager
 
 postgresql:
   enabled: false
@@ -48,23 +35,9 @@ extraVolumes:
   name: theme
 
 ingress:
-  annotations:
-    cert-manager.io/cluster-issuer: letsencrypt-production
-    nginx.ingress.kubernetes.io/enable-cors: "true"
-    nginx.ingress.kubernetes.io/backend-protocol: HTTP
-    nginx.ingress.kubernetes.io/proxy-buffer-size: 128k
-    nginx.ingress.kubernetes.io/ssl-redirect: "true"
-  enabled: true
   hostname: auth.oceanbox.io
-  ingressClassName: nginx
-  path: /
-  pathType: ImplementationSpecific
-  selfSigned: false
-  servicePort: http
-  tls: true
 
 adminIngress:
-  enabled: false
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-production
     nginx.ingress.kubernetes.io/enable-cors: "true"
@@ -93,8 +66,8 @@ keycloakConfigCli:
 
 initContainers: |
   - name: keycloak-theme-provider
-    image: docker.io/juselius/oceanbox-theme:1.2
-    imagePullPolicy: Always
+    image: git.oceanbox.io/platform/keycloak-theme:latest
+    imagePullPolicy: IfNotPresent
     command:
       - sh
     args:

values/keycloak/values/values-staging.yaml

@@ -1,22 +1,7 @@
 replicaCount: 1
 
-# NOTE(mrtz): Hack for working with bitnami legacy registry
-global:
-  security:
-    allowInsecureImages: true
-image:
-    repository: bitnamilegacy/keycloak
-
-production: true
-
-proxy: edge
-
 auth:
   adminPassword: en to tre fire
-  adminUser: admin
-  existingSecret: ""
-  managementPassword: ""
-  managementUser: manager
 
 postgresql:
   enabled: true
@@ -24,32 +9,10 @@ postgresql:
     postgresPassword: "avatar mustiness economic"
     password: "punctured abstain facility"
 
-extraVolumeMounts:
-- mountPath: /opt/bitnami/keycloak/themes/oceanbox
-  name: theme
-
-extraVolumes:
-- emptyDir: {}
-  name: theme
-
 ingress:
-  annotations:
-    cert-manager.io/cluster-issuer: letsencrypt-production
-    nginx.ingress.kubernetes.io/enable-cors: "true"
-    nginx.ingress.kubernetes.io/backend-protocol: HTTP
-    nginx.ingress.kubernetes.io/proxy-buffer-size: 128k
-    nginx.ingress.kubernetes.io/ssl-redirect: "true"
-  enabled: true
   hostname: auth.srv.oceanbox.io
-  ingressClassName: nginx
-  path: /
-  pathType: ImplementationSpecific
-  selfSigned: false
-  servicePort: http
-  tls: true
 
 adminIngress:
-  enabled: false
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-production
     nginx.ingress.kubernetes.io/enable-cors: "true"
@@ -64,18 +27,3 @@ adminIngress:
   selfSigned: false
   servicePort: http
   tls: true
-
-initContainers: |
-  - name: keycloak-theme-provider
-    image: docker.io/juselius/oceanbox-theme:1.2
-    imagePullPolicy: Always
-    command:
-      - sh
-    args:
-      - -c
-      - |
-        echo "Copying theme..."
-        cp -R /theme/* /keycloak/themes/oceanbox
-    volumeMounts:
-      - name: theme
-        mountPath: /keycloak/themes/oceanbox

values/keycloak/values/values.yaml

@@ -0,0 +1,31 @@
+# NOTE(mrtz): Hack for working with bitnami legacy registry
+global:
+  security:
+    allowInsecureImages: true
+image:
+    repository: bitnamilegacy/keycloak
+
+production: true
+proxy: edge
+
+auth:
+  adminUser: admin
+  managementUser: manager
+
+ingress:
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-production
+    nginx.ingress.kubernetes.io/enable-cors: "true"
+    nginx.ingress.kubernetes.io/backend-protocol: HTTP
+    nginx.ingress.kubernetes.io/proxy-buffer-size: 128k
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+  enabled: true
+  ingressClassName: nginx
+  path: /
+  pathType: ImplementationSpecific
+  selfSigned: false
+  servicePort: http
+  tls: true
+
+adminIngress:
+  enabled: false