ed51d3e16e
Add securityContext to theme init containers matching the main container security posture. Add input validation for theme entries: required fields, DNS-1123 name sanitization, duplicate detection, and container name length limit. Add imagePullSecrets support for private registries and sizeLimit on the emptyDir volume. Assisted-By: Claude <noreply@anthropic.com> Signed-off-by: Aleksei Sviridkin <f@lex.la>
26 lines
970 B
YAML
26 lines
970 B
YAML
image: quay.io/keycloak/keycloak:26.5.2
|
|
|
|
ingress:
|
|
# Custom hostname for the Keycloak Ingress.
|
|
# If set, this value will be used as the Ingress hostname (e.g., "auth.example.com").
|
|
# If left empty, defaults to "keycloak.<root-host>" based on the cluster root-host setting.
|
|
host: ""
|
|
annotations:
|
|
nginx.ingress.kubernetes.io/affinity: "cookie"
|
|
nginx.ingress.kubernetes.io/session-cookie-expires: "86400"
|
|
nginx.ingress.kubernetes.io/session-cookie-max-age: "86400"
|
|
nginx.ingress.kubernetes.io/session-cookie-name: "keycloak-cookie"
|
|
resources:
|
|
requests:
|
|
memory: 500Mi
|
|
cpu: 100m
|
|
|
|
themes: []
|
|
# - name: my-theme
|
|
# image: my-registry/my-keycloak-theme:v1.0
|
|
# Theme images must contain theme files under /themes/ directory.
|
|
# Each theme is copied into Keycloak's /opt/keycloak/themes/ via init container.
|
|
# If multiple themes contain files with the same path, later entries take precedence.
|
|
|
|
imagePullSecrets: []
|
|
# - name: my-registry-secret
|