global:
  security:
    allowInsecureImages: true

image:
  registry: public.ecr.aws
  repository: bitnami/keycloak
  tag: 26.5.5-debian-12-r0
  digest: ""

auth:
  adminUser: admin
  adminPassword: adminpassword

proxy: edge
production: true

tls:
  enabled: false

replicaCount: 1

service:
  type: ClusterIP
  ports:
    http: 8080
    https: 8443

ingress:
  enabled: true
  ingressClassName: traefik
  hostname: keycloak.dvirlabs.com
  path: /
  servicePort: http
  annotations:
    traefik.ingress.kubernetes.io/router.entrypoints: websecure
    traefik.ingress.kubernetes.io/router.tls: "true"
  tls: true

postgresql:
  enabled: true
  auth:
    postgresPassword: keycloak-postgres
    password: keycloakpassword
  persistence:
    enabled: true
    storageClass: nfs-client
    size: 8Gi

customReadinessProbe:
  httpGet:
    path: /realms/master
    port: http
    scheme: HTTP
  initialDelaySeconds: 30
  periodSeconds: 10
  timeoutSeconds: 1
  failureThreshold: 3
  successThreshold: 1

extraEnvVars:
  - name: KEYCLOAK_LOGLEVEL
    value: INFO