---
  apiVersion: "apps/v1"
  kind: "Deployment"
  metadata: 
    name: "keycloak"
    namespace: "infra-environment"
  spec: 
    selector: 
      matchLabels: 
        app: "keycloak"
    replicas: 1
    template: 
      metadata: 
        labels: 
          app: "keycloak"
      spec: 
        containers: 
          - name: "keycloak-prod"
            image: "jboss/keycloak"
            resources:
              requests:
                memory: "512Mi"
                cpu: "100m"
              limits:
                memory: "1Gi"
                cpu: "4"
            imagePullPolicy: "Always"
            env: 
              - name: "KEYCLOAK_USER"
                value: "admin" 
              - name: "KEYCLOAK_PASSWORD"
                value: "admin"
              - name: DB_VENDOR
                value: postgres
              - name: DB_ADDR
                value: psql.semprod.local
              - name: DB_DATABASE
                value: keycloak_db
              - name: DB_USER
                value: keycloak
              - name: DB_PASSWORD
                value: e7ov7xx45qr1erk9
            ports: 
              - name: keycloak-http
                containerPort: 8080
---
apiVersion: v1
kind: Service
metadata:
  name: keycloak-srv
  namespace: infra-environment
spec:
  selector:
    app: keycloak
  ports:
    - name: keycloak-http
      port: 8080
      targetPort: keycloak-http
  type: NodePort

---
apiVersion: networking.k8s.io/v1beta1
kind: Ingress
metadata:
  name: keycloak-ingress
  namespace: infra-environment
  annotations:
    kubernetes.io/ingress.class: "traefik"
spec:
  rules:
  - host: keycloak.k8s.semprod.local
    http:
      paths:
      - path: /
        backend:
          serviceName: keycloak-srv
          servicePort: 8080
  - host: keycloak.semprod.local
    http:
      paths:
      - path: /
        backend:
          serviceName: keycloak-srv
          servicePort: 8080