httpRelativePath: "/auth"

command:
  - "/opt/keycloak/bin/kc.sh"
  - "start"

proxy:
  enabled: true
  mode: xforwarded
  http:
    enabled: true

extraEnv: |
  - name: KEYCLOAK_ADMIN
    value: admin
  - name: KEYCLOAK_ADMIN_PASSWORD
    value: changeme
  - name: KC_HOSTNAME
    value: "https://keycloak.idir-belfares.fr/auth"
  - name: KC_HOSTNAME_STRICT
    value: "true"
  - name: KC_HOSTNAME_BACKCHANNEL_DYNAMIC
    value: "false"
  - name: KC_DB
    value: postgres
  - name: KC_DB_URL
    value: "jdbc:postgresql://keycloak-db-postgresql.keycloak.svc.cluster.local/keycloak"
  - name: KC_DB_USERNAME
    value: keycloak
  - name: KC_DB_PASSWORD
    value: keycloak

ingress:
  enabled: true
  ingressClassName: nginx
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-prod
  rules:
    - host: keycloak.idir-belfares.fr
      paths:
        - path: /
          pathType: Prefix
  tls:
    - secretName: keycloak-tls
      hosts:
        - keycloak.idir-belfares.fr