chore: configure ingress for Keycloak

api-platform · Nov 15, 2023 · 16cb00f · 16cb00f
1 parent ec87a83
commit 16cb00f
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 4 deletions.
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
@@ -130,8 +130,12 @@ jobs:
             --set=pwa.image.tag=${{ inputs.docker-images-version }} \
             --set=pwa.image.pullPolicy=Always \
             --set=ingress.hosts[0].host=${{ inputs.url }} \
-            --set=ingress.hosts[0].paths[0].path=/* \
-            --set=ingress.hosts[0].paths[0].pathType=ImplementationSpecific \
+            --set=ingress.hosts[0].paths[0].path=/oidc/* \
+            --set=ingress.hosts[0].paths[0].backend.serviceName=${{ inputs.namespace }}-keycloak \
+            --set=ingress.hosts[0].paths[0].backend.servicePort=80 \
+            --set=ingress.hosts[0].paths[1].path=/* \
+            --set=ingress.hosts[0].paths[1].backend.serviceName=${{ inputs.namespace }}-api-platform \
+            --set=ingress.hosts[0].paths[1].backend.servicePort=80 \
             --set=external-dns.cloudflare.apiToken=${{ secrets.cloudflare-api-token }} \
             --set=external-dns.domainFilters={"${{ inputs.url }}"} \
             --set=external-dns.zoneIdFilters={${{ secrets.cloudflare-zone-id }}} \

diff --git a/helm/api-platform/values.yaml b/helm/api-platform/values.yaml
@@ -101,7 +101,7 @@ keycloak:
     limits:
       memory: 500Mi
   service:
-    type: ClusterIP
+    type: NodePort
   extraEnvVars:
     # Must set KC_HOSTNAME_URL to force https + relative path
     - name: KC_HOSTNAME_URL
@@ -214,7 +214,15 @@ ingress:
     # kubernetes.io/tls-acme: "true"
   hosts:
     - host: chart-example.local
-      paths: []
+      paths:
+        - path: /oidc/*
+          backend:
+            serviceName: main-keycloak
+            servicePort: 80
+        - path: /*
+          backend:
+            serviceName: main-api-platform
+            servicePort: 80
   tls: []
   #  - secretName: chart-example-tls
   #    hosts: