User Tools
сервис_keycloak
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
сервис_keycloak [2025/01/05 11:57] val [Kubernetes] |
сервис_keycloak [2025/05/13 16:34] (current) val [Kubernetes] |
||
|---|---|---|---|
| Line 13: | Line 13: | ||
| server# wget https://github.com/keycloak/keycloak/releases/download/22.0.5/keycloak-22.0.5.zip | server# wget https://github.com/keycloak/keycloak/releases/download/22.0.5/keycloak-22.0.5.zip | ||
| - | server:~/keycloak-22.0.5# KEYCLOAK_ADMIN=root KEYCLOAK_ADMIN_PASSWORD='strongpassword' bin/kc.sh start-dev --https-certificate-file=/root/server.crt --https-certificate-key-file=/root/server.key | + | server:~/keycloak-22.0.5# KEYCLOAK_ADMIN=admin KEYCLOAK_ADMIN_PASSWORD='strongpassword' bin/kc.sh start-dev --https-certificate-file=/root/server.crt --https-certificate-key-file=/root/server.key |
| </code> | </code> | ||
| + | |||
| + | * [[http://192.168.X.10:8080/]] | ||
| ==== docker-compose ==== | ==== docker-compose ==== | ||
| Line 46: | Line 48: | ||
| # cat keycloak.yml | # cat keycloak.yml | ||
| </code><code> | </code><code> | ||
| - | version: '3' | + | #version: '3' |
| services: | services: | ||
| Line 64: | Line 66: | ||
| #- "/etc/krb5.keytab:/etc/krb5.keytab" | #- "/etc/krb5.keytab:/etc/krb5.keytab" | ||
| environment: | environment: | ||
| - | - KEYCLOAK_ADMIN=root | + | - KEYCLOAK_ADMIN=admin |
| - KEYCLOAK_ADMIN_PASSWORD=strongpassword | - KEYCLOAK_ADMIN_PASSWORD=strongpassword | ||
| - KC_HTTPS_CERTIFICATE_FILE=/wild.crt | - KC_HTTPS_CERTIFICATE_FILE=/wild.crt | ||
| - KC_HTTPS_CERTIFICATE_KEY_FILE=/wild.key | - KC_HTTPS_CERTIFICATE_KEY_FILE=/wild.key | ||
| + | # - KC_DB=postgres | ||
| + | # - KC_DB_URL=jdbc:postgresql://postgres:5432/keycloak | ||
| + | # - KC_DB_USERNAME=keycloak | ||
| + | # - KC_DB_PASSWORD=strongpassword | ||
| command: | command: | ||
| - start-dev | - start-dev | ||
| + | # depends_on: | ||
| + | # - postgres | ||
| + | # postgres: | ||
| + | # image: postgres:15.6 | ||
| + | # container_name: postgres_db | ||
| + | # volumes: | ||
| + | # - postgres_data:/var/lib/postgresql/data | ||
| + | # environment: | ||
| + | # POSTGRES_DB: keycloak | ||
| + | # POSTGRES_USER: keycloak | ||
| + | # POSTGRES_PASSWORD: strongpassword | ||
| + | #volumes: | ||
| + | # postgres_data: | ||
| </code><code> | </code><code> | ||
| # docker-compose -f keycloak.yml up -d | # docker-compose -f keycloak.yml up -d | ||
| # docker logs keycloak -f | # docker logs keycloak -f | ||
| + | |||
| + | # ###docker exec -ti postgres_db psql -U keycloak | ||
| + | |||
| + | # ###docker-compose -f keycloak.yml down | ||
| </code> | </code> | ||
| Line 110: | Line 133: | ||
| ingressClassName: nginx | ingressClassName: nginx | ||
| hostname: keycloak.corp13.un | hostname: keycloak.corp13.un | ||
| + | #replicaCount: 2 | ||
| + | |||
| #global: | #global: | ||
| # storageClass: local-path | # storageClass: local-path | ||
| # storageClass: longhorn | # storageClass: longhorn | ||
| - | #replicaCount: 2 | ||
| - | #postgresql: | ||
| - | # enabled: true | ||
| # auth: | # auth: | ||
| # postgresPassword: "strongpassword" | # postgresPassword: "strongpassword" | ||
| # username: bn_keycloak | # username: bn_keycloak | ||
| # password: "strongpassword" | # password: "strongpassword" | ||
| + | |||
| + | #postgresql: | ||
| + | # enabled: false | ||
| + | #externalDatabase: | ||
| + | # host: "my-postgres-postgresql.my-postgres-ns" | ||
| + | # host: "my-pgcluster-rw.my-pgcluster-ns" | ||
| + | # host: "my-pgpooler.my-pgcluster-ns" | ||
| + | # port: 5432 | ||
| + | # user: keycloak | ||
| + | # database: keycloak | ||
| + | # password: strongpassword | ||
| #extraVolumeMounts: | #extraVolumeMounts: | ||
| Line 148: | Line 181: | ||
| ~/keycloak$ kubectl -n my-keycloak-ns get pods -o wide --watch | ~/keycloak$ kubectl -n my-keycloak-ns get pods -o wide --watch | ||
| - | ~/keycloak$ curl -v http://nodeN/ -H "Host: keycloak.corp13.un" | + | ~/keycloak# kubectl -n my-keycloak-ns logs statefulsets/my-keycloak -f |
| - | ~/keycloak$ ###kubectl -n my-keycloak-ns exec -ti my-keycloak-postgresql-0 -- psql -U postgres | + | ~/keycloak$ curl -v http://kubeN/ -H "Host: keycloak.corp13.un" |
| + | ~/keycloak$ ###kubectl -n my-keycloak-ns exec -ti my-keycloak-postgresql-0 -- psql -U postgres | ||
| + | </code> | ||
| + | * [[Система Kubernetes#Остановка сервиса]] | ||
| + | <code> | ||
| $ ###helm delete my-keycloak -n my-keycloak-ns | $ ###helm delete my-keycloak -n my-keycloak-ns | ||
| $ ###kubectl delete ns my-keycloak-ns | $ ###kubectl delete ns my-keycloak-ns | ||
сервис_keycloak.1736067447.txt.gz · Last modified: 2025/01/05 11:57 by val
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
