feat: add keycloak secret

NaturalSelectionLabs · Oct 25, 2023 · 1796759 · 1796759
1 parent 5c45dee
commit 1796759
Show file tree

Hide file tree

Showing 4 changed files with 15 additions and 11 deletions.
diff --git a/application.tf b/application.tf
@@ -40,21 +40,13 @@ resource "argocd_application" "keycloak" {
     source {
       helm {
         release_name = "keycloak"
-        value_files = [
-          "$values/keycloak/prod/values.yaml"
-        ]
+        values = file("keycloak/prod/values.yaml")
       }
       repo_url        = "https://codecentric.github.io/helm-charts"
       target_revision = "18.x.x"
       chart           = "keycloak"
     }
 
-    source {
-      repo_url        = var.repo_url
-      target_revision = "HEAD"
-      ref             = "values"
-    }
-
     source {
       repo_url        = var.repo_url
       target_revision = "HEAD"

diff --git a/keycloak/prod/kustomization.yaml b/keycloak/prod/kustomization.yaml
@@ -1,2 +1,3 @@
 resources:
-  - route.yaml
+  - route.yaml
+  - secret.yaml
diff --git a/keycloak/prod/route.yaml b/keycloak/prod/route.yaml
@@ -9,7 +9,7 @@ spec:
     - websecure
   routes:
     - kind: Rule
-      match: Host(`account.nsl.xyz`) && PathPrefix(`/`)
+      match: Host(`account.nsl.xyz`)
       services:
         - name: keycloak-http
           port: 80

diff --git a/keycloak/prod/secret.yaml b/keycloak/prod/secret.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: keycloak-db-creds
+  namespace: guardian
+  annotations:
+    avp.kubernetes.io/path: "guardian/keycloak-db-creds"
+type: Opaque
+stringData:
+  username: "<username>"
+  password: "<password>"