Setting up MijnBureau on Kubernetes

See also: Setting up a Harbor proxy to help with docker rate limits

helmfile/environments/demo/mijnbureau.yaml.gotmpl

global:
  domain: "mijnbureau.rabevcqhguoovcu.xyz"
  resourcePreset: "small"
  hostname:
    keycloak: "id"

application:
  grist:
    enabled: true
  ollama:
    enabled: true
  keycloak:
    enabled: true
  chat:
    enabled: true

secret: # Store these securely in an encrypted file
  keycloak:
    adminUser: admin
    adminPassword: mypassword

authentication:
  oidc:
    issuer: "https://id.mijnbureau.rabevcqhguoovcu.xyz/realms/mijnbureau"
    authorization_endpoint: "https://id.mijnbureau.rabevcqhguoovcu.xyz/realms/mijnbureau/protocol/openid-connect/auth"
    token_endpoint: "https://id.mijnbureau.rabevcqhguoovcu.xyz/realms/mijnbureau/protocol/openid-connect/token"
    introspection_endpoint: "https://id.mijnbureau.rabevcqhguoovcu.xyz/realms/mijnbureau/protocol/openid-connect/token/introspect"
    userinfo_endpoint: "https://id.mijnbureau.rabevcqhguoovcu.xyz/realms/mijnbureau/protocol/openid-connect/userinfo"
    end_session_endpoint: "https://id.mijnbureau.rabevcqhguoovcu.xyz/realms/mijnbureau/protocol/openid-connect/logout"
    jwks_uri: "https://id.mijnbureau.rabevcqhguoovcu.xyz/realms/mijnbureau/protocol/openid-connect/certs"


user:
  - email: [email protected]
    username: johndoe
    firstname: John
    lastname: Doe
    password: myStrongPassword123
  - email: [email protected]
    username: janedoe
    firstname: Jane
    lastname: Doe
    password: myStrongPassword123


cluster:
  ingress:
    type: nginx
    className: ~
    annotations:
      cert-manager.io/cluster-issuer: letsencrypt-prod


tls:
  keycloak:
    - hosts:
        - keycloak.mijnbureau.rabevcqhguoovcu.xyz

Leave a Reply

Your email address will not be published. Required fields are marked *