feat: manual only deployment

helm/keycloak/values.yaml

@@ -1,46 +1,54 @@
-httpRelativePath: "/auth"
+executor: KubernetesExecutor
 
-command:
+dags:
-  - "/opt/keycloak/bin/kc.sh"
+  gitSync:
-  - "start"
-
-proxy:
-  enabled: true
-  mode: xforwarded
-  http:
     enabled: true
-
+    repo: git@github.com:idirbfs/dags.git
-extraEnv: |
+    branch: main
-  - name: KEYCLOAK_ADMIN
+    rev: HEAD
-    value: admin
+    depth: 1
-  - name: KEYCLOAK_ADMIN_PASSWORD
+    maxFailures: 3
-    value: changeme
+    subPath: ""
-  - name: KC_HOSTNAME
+    sshKeySecret: airflow-gitsync-ssh
-    value: "https://keycloak.idir-belfares.fr/auth"
+    period: 60s
-  - name: KC_HOSTNAME_STRICT
-    value: "true"
-  - name: KC_HOSTNAME_BACKCHANNEL_DYNAMIC
-    value: "false"
-  - name: KC_DB
-    value: postgres
-  - name: KC_DB_URL
-    value: "jdbc:postgresql://keycloak-db-postgresql.keycloak.svc.cluster.local/keycloak"
-  - name: KC_DB_USERNAME
-    value: keycloak
-  - name: KC_DB_PASSWORD
-    value: keycloak
 
 ingress:
-  enabled: true
+  apiServer:
-  ingressClassName: nginx
+    enabled: true
-  annotations:
+    ingressClassName: nginx
-    cert-manager.io/cluster-issuer: letsencrypt-prod
+    annotations:
-  rules:
+      cert-manager.io/cluster-issuer: letsencrypt-prod
-    - host: keycloak.idir-belfares.fr
+    hosts:
-      paths:
+      - name: airflow.idir-belfares.fr
-        - path: /
+        tls:
-          pathType: Prefix
+          enabled: true
-  tls:
+          secretName: airflow-tls
-    - secretName: keycloak-tls
+    path: "/"
-      hosts:
+    pathType: "Prefix"
-        - keycloak.idir-belfares.fr
+
+apiServer:
+  apiServerConfig: |
+    from flask_appbuilder.security.manager import AUTH_OAUTH
+
+    AUTH_TYPE = AUTH_OAUTH
+    AUTH_USER_REGISTRATION = True
+    AUTH_USER_REGISTRATION_ROLE = "Viewer"
+
+    OAUTH_PROVIDERS = [
+      {
+        "name": "keycloak",
+        "token_key": "access_token",
+        "icon": "fa-key",
+        "remote_app": {
+          "client_id": "airflow",
+          "client_secret": "pE1GuIVBSmy0Wy2Tcf0QbLPVGg415D6r",
+          "authorize_url": "https://keycloak.idir-belfares.fr/auth/realms/k8s-apps/protocol/openid-connect/auth",
+          "access_token_url": "http://keycloak-keycloakx-http.keycloak.svc.cluster.local/auth/realms/k8s-apps/protocol/openid-connect/token",
+          "jwks_uri": "http://keycloak-keycloakx-http.keycloak.svc.cluster.local/auth/realms/k8s-apps/protocol/openid-connect/certs",
+          "client_kwargs": {
+            "scope": "openid email profile",
+            "token_endpoint_auth_method": "client_secret_post"
+          }
+        }
+      }
+    ]