The initial admin password is now provided to the deployment externally

andyuk1986 · Aug 4, 2023 · d0de303 · d0de303
1 parent d5fcbdc
commit d0de303
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 1 deletion.
diff --git a/provision/minikube/keycloak/templates/keycloak-initial-admin-secret.yaml b/provision/minikube/keycloak/templates/keycloak-initial-admin-secret.yaml
@@ -3,7 +3,7 @@ kind: Secret
 metadata:
   labels:
     app: keycloak
-  name: keycloak-initial-admin
+  name: keycloak-preconfigured-admin
   namespace: {{ .Values.namespace }}
 type: kubernetes.io/basic-auth
 data:

diff --git a/provision/minikube/keycloak/templates/keycloak.yaml b/provision/minikube/keycloak/templates/keycloak.yaml
@@ -164,6 +164,19 @@ spec:
               # See: https://github.com/keycloak/keycloak/issues/21962
               - name: 'QUARKUS_THREAD_POOL_QUEUE_SIZE'
                 value: '1000'
+              # We want to have an externally provided username and password, therefore, we override those two environment variables
+              - name: KEYCLOAK_ADMIN
+                valueFrom:
+                  secretKeyRef:
+                    name: keycloak-preconfigured-admin
+                    key: username
+                    optional: false
+              - name: KEYCLOAK_ADMIN_PASSWORD
+                valueFrom:
+                  secretKeyRef:
+                    name: keycloak-preconfigured-admin
+                    key: password
+                    optional: false
 {{ if .Values.otel }}
               # Instrumentation for the HTTP/2 protocol doesn't work yet - no metrics will be available, probably also no tracing
               # As a workaround, force downgrade to HTTP/1.1