Set keycloak with http instead https for traefik and keep https for users (external
This commit is contained in:
parent
d490cd1386
commit
b6ea4d2615
@ -18,12 +18,7 @@ proxyHeaders: xforwarded
|
|||||||
replicaCount: 1
|
replicaCount: 1
|
||||||
|
|
||||||
tls:
|
tls:
|
||||||
enabled: true
|
enabled: false
|
||||||
usePem: true
|
|
||||||
autoGenerated: true
|
|
||||||
# existingSecret: keycloak-crt # Removed - using auto-generated certificate instead
|
|
||||||
certFilename: tls.crt
|
|
||||||
certKeyFilename: tls.key
|
|
||||||
|
|
||||||
service:
|
service:
|
||||||
type: ClusterIP
|
type: ClusterIP
|
||||||
@ -36,12 +31,10 @@ ingress:
|
|||||||
ingressClassName: traefik
|
ingressClassName: traefik
|
||||||
hostname: keycloak.dvirlabs.com
|
hostname: keycloak.dvirlabs.com
|
||||||
path: /
|
path: /
|
||||||
servicePort: https
|
servicePort: http
|
||||||
annotations:
|
annotations:
|
||||||
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
||||||
traefik.ingress.kubernetes.io/router.tls: "true"
|
traefik.ingress.kubernetes.io/router.tls: "true"
|
||||||
traefik.ingress.kubernetes.io/service.serversscheme: https
|
|
||||||
traefik.ingress.kubernetes.io/service.serverstransport: infra-keycloak-insecure@kubernetescrd
|
|
||||||
tls: true
|
tls: true
|
||||||
|
|
||||||
postgresql:
|
postgresql:
|
||||||
@ -62,8 +55,8 @@ postgresql:
|
|||||||
customStartupProbe:
|
customStartupProbe:
|
||||||
httpGet:
|
httpGet:
|
||||||
path: /realms/master
|
path: /realms/master
|
||||||
port: https
|
port: http
|
||||||
scheme: HTTPS
|
scheme: HTTP
|
||||||
initialDelaySeconds: 30
|
initialDelaySeconds: 30
|
||||||
periodSeconds: 10
|
periodSeconds: 10
|
||||||
timeoutSeconds: 5
|
timeoutSeconds: 5
|
||||||
@ -73,8 +66,8 @@ customStartupProbe:
|
|||||||
customLivenessProbe:
|
customLivenessProbe:
|
||||||
httpGet:
|
httpGet:
|
||||||
path: /realms/master
|
path: /realms/master
|
||||||
port: https
|
port: http
|
||||||
scheme: HTTPS
|
scheme: HTTP
|
||||||
initialDelaySeconds: 120
|
initialDelaySeconds: 120
|
||||||
periodSeconds: 10
|
periodSeconds: 10
|
||||||
timeoutSeconds: 5
|
timeoutSeconds: 5
|
||||||
@ -84,8 +77,8 @@ customLivenessProbe:
|
|||||||
customReadinessProbe:
|
customReadinessProbe:
|
||||||
httpGet:
|
httpGet:
|
||||||
path: /realms/master
|
path: /realms/master
|
||||||
port: https
|
port: http
|
||||||
scheme: HTTPS
|
scheme: HTTP
|
||||||
initialDelaySeconds: 60
|
initialDelaySeconds: 60
|
||||||
periodSeconds: 10
|
periodSeconds: 10
|
||||||
timeoutSeconds: 5
|
timeoutSeconds: 5
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user