add kc

clusters/yc-k8s-test/infrastructure/kustomization.yaml

@@ -119,4 +119,11 @@ patches:
       version: v2
       kind: HelmRelease
       name: zitadel
-      namespace: zitadel    
+      namespace: zitadel
+  - path: ./patches/keycloak.yaml
+    target:
+      group: helm.toolkit.fluxcd.io
+      version: v2
+      kind: HelmRelease
+      name: keycloak
+      namespace: keycloak

clusters/yc-k8s-test/infrastructure/patches/keycloak.yaml

@@ -0,0 +1,22 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: keycloak
+  namespace: keycloak
+spec:
+  interval: 5m
+  timeout: 15m
+  values:
+    global:
+      defaultStorageClass: local-path
+    persistence:
+      enabled: true
+      storageClass: local-path
+      size: 10Gi
+    postgresql:
+      enabled: false
+    externalDatabase:
+      host: "postgresql.postgresql.svc.cluster.local"
+      port: 5432
+      user: keycloak
+      database: keycloak

infrastructure/keycloak/base/helmrelease.yaml

@@ -0,0 +1,22 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: keycloak
+  namespace: keycloak
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: keycloak-contour
+      version: "22.2.6"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3

infrastructure/keycloak/base/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: keycloak
+resources:
+  - helmrelease.yaml
+  - namespace.yaml

infrastructure/keycloak/base/namespace.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: keycloak
+  labels:
+    istio-injection: enabled

infrastructure/keycloak/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - base

infrastructure/kustomization.yaml

@@ -6,6 +6,7 @@ resources:
   - cert-manager
   - dashboard
   - kafka
+  - keycloak
   - local-path-provisioner
   - minio
   - postgresql