diff --git a/k8s/infra/auth/keycloak-realms/homelab/builtin-objects.yaml b/k8s/infra/auth/keycloak-realms/homelab/builtin-objects.yaml deleted file mode 100644 index 4bd264e..0000000 --- a/k8s/infra/auth/keycloak-realms/homelab/builtin-objects.yaml +++ /dev/null @@ -1,20 +0,0 @@ -apiVersion: keycloak.crossplane.io/v1alpha1 -kind: XBuiltinObjects -metadata: - name: builtin-objects-homelab -spec: - providerConfigName: default - providerSecretName: crossplane-keycloak-credentials - realm: homelab - builtinAuthenticationFlows: - - browser - builtinClients: - - account - - account-console - - admin-cli - - broker - - realm-management - - security-admin-console - builtinRealmRoles: - - offline_access - - uma_authorization diff --git a/k8s/infra/auth/keycloak-realms/homelab/clients/cloudflare/client.yaml b/k8s/infra/auth/keycloak-realms/homelab/clients/cloudflare/client.yaml deleted file mode 100644 index b023275..0000000 --- a/k8s/infra/auth/keycloak-realms/homelab/clients/cloudflare/client.yaml +++ /dev/null @@ -1,20 +0,0 @@ -apiVersion: openidclient.keycloak.crossplane.io/v1alpha1 -kind: Client -metadata: - name: cloudflare -spec: - deletionPolicy: Delete - forProvider: - name: Cloudflare - accessType: CONFIDENTIAL - clientId: cloudflare - realmIdRef: - name: homelab - clientSecretSecretRef: - name: cloudflare-oidc-credentials - namespace: keycloak - key: secret - standardFlowEnabled: true - baseUrl: "https://stonegarden.cloudflareaccess.com" - validRedirectUris: - - "https://stonegarden.cloudflareaccess.com/cdn-cgi/access/callback" diff --git a/k8s/infra/auth/keycloak-realms/homelab/clients/cloudflare/credentials.yaml b/k8s/infra/auth/keycloak-realms/homelab/clients/cloudflare/credentials.yaml deleted file mode 100644 index b039d9a..0000000 --- a/k8s/infra/auth/keycloak-realms/homelab/clients/cloudflare/credentials.yaml +++ /dev/null @@ -1,14 +0,0 @@ -apiVersion: bitnami.com/v1alpha1 -kind: SealedSecret -metadata: - name: cloudflare-oidc-credentials - namespace: keycloak -spec: - encryptedData: - key: AgB1jFD1jq7ri58egGkilGnaULqMvx3V6nsOoJNrn10OshfyouMHKVaC+6LywQATe88/5AIW37PMwh1XfLFjXH4EFoqA/93S44gxHtLoJ08Im59MnGJStn3gr9ClxNmukOUVE25vUkcKqDvlUa7UqHwoeppr/QN2byuwXB/cRhoZnG/KJuI5358SBjl1QseXqm5R5Gk7g36pXUhlDnsVicN7uYwxOE0BlYHtdlihWyecBWOIxKkLXIeSALmKcxDpE5v08wmN1MARSV58YfZiTEFWFWmpnPvxWZS3fHhHpppZjD6uRrKnXQlNH1KjN5Ccs29LB/tBVD9qt4fvvISKzWCXRkb2BCgAZo2MyhScemIq3MkTG7lMD2hEW9TAviOqZKmLg1OILKTKG5bq84ygB5vsseVNtj+jfUCyzaHyCH2bANfTDZA0HyhQl1WFhpXOX8k3kBhhCKOnpYa2XYDEHMtnVXgqsIf1lMOrG9+PADjrVTLu0Zh+gxpRNvs8aIfrrLxOzoMi6jOzuj2NoydRNLkfn8cAGsoO4MQREZdytCLbU+dXcXSr+ZKJOpStR8fwmNZzoK92sU7ya+a3NceYjrIOwpG2EyWrdUDNmX5RcUPBnaenmPfFgm3ry6EivrILRG5VV8kn8uyOXHL3qNmzHe24Y8mm92UCPWAFSxYqhru/EXMGEMriHepJlaahdTLLI/uEcSwNRvleWFoS - secret: AgCLgiXGxb1QP79KDOJanMq/wt+yTU4kDfEqc1D0zwJZCJD0kSzplKiUPuWjazRfa8abkh02Hv9HnpxblF2GE9jSq/bLCdszp2QhJFoWJlCpyBikTnwZWeXJVPu7ho40R6MuRsQC4hf1uysQgrnQItY730npI1dfxl7VLbkZX0QNPagHTUT01LsQ9u1i1mmfh0S0SLIQw8BAiQfZR8FSDkEuxjmIWVvtgs1Ok3sC6IbSocVnzQ6DlCntkJVef2W6/S9F+GqOrEgNdIWZI/rPClFUPXdhWd+JsuEGiw51xgF6PApcxo2QTOQngXAITnsYR1pYWR/VaQ9wcx6jUYzkknzlU1sVZgcU9TxKofIXNPAP5uabPD3NX6ZmmXEpNa8DwO2h0LnXOOHEKmNhb+zAT5o8T4Bf9GmsGCP19+xc2+ebTV/bIvV9PDwEJjyBZ9sSXirXcfu04ToyKdLsDW28QTwHRD48fA10aWqxRbeKEFIQ9tfAWEdBZ2dhLnwhUMvyEVKiCGAi0AeLNRlZFN/IMEq+WoZu4iugSgm1GRjQnTYROdxJWBC/gL2OVMWpGFhr9We0ZeuH79OtMQrvOdfopqk7d7sCWAhiSk3iCbupnyOpkQKRSvYxD5mwD0DteFc1gABBdSdK03qcG+d4MsiC98F9OFZguaOtEHlIFHa4wSIOWdGPAQK4GhuVTkHm9oAp4PXQSKwqFOi4PLoL37A8gGSWAr/Z3aYuRrcwDi8U+42HHz8rEmpc8y8c - template: - metadata: - name: cloudflare-oidc-credentials - namespace: keycloak - type: Opaque diff --git a/k8s/infra/auth/keycloak-realms/homelab/clients/cloudflare/kustomization.yaml b/k8s/infra/auth/keycloak-realms/homelab/clients/cloudflare/kustomization.yaml deleted file mode 100644 index cf883b1..0000000 --- a/k8s/infra/auth/keycloak-realms/homelab/clients/cloudflare/kustomization.yaml +++ /dev/null @@ -1,6 +0,0 @@ -apiVersion: kustomize.config.k8s.io/v1beta1 -kind: Kustomization - -resources: - - client.yaml - - credentials.yaml diff --git a/k8s/infra/auth/keycloak-realms/homelab/clients/kustomization.yaml b/k8s/infra/auth/keycloak-realms/homelab/clients/kustomization.yaml deleted file mode 100644 index b30b0cb..0000000 --- a/k8s/infra/auth/keycloak-realms/homelab/clients/kustomization.yaml +++ /dev/null @@ -1,5 +0,0 @@ -apiVersion: kustomize.config.k8s.io/v1beta1 -kind: Kustomization - -resources: - - cloudflare diff --git a/k8s/infra/auth/keycloak-realms/homelab/kustomization.yaml b/k8s/infra/auth/keycloak-realms/homelab/kustomization.yaml deleted file mode 100644 index a6d03c8..0000000 --- a/k8s/infra/auth/keycloak-realms/homelab/kustomization.yaml +++ /dev/null @@ -1,8 +0,0 @@ -apiVersion: kustomize.config.k8s.io/v1beta1 -kind: Kustomization - -resources: - - realm.yaml - - builtin-objects.yaml - - clients - - users diff --git a/k8s/infra/auth/keycloak-realms/homelab/realm.yaml b/k8s/infra/auth/keycloak-realms/homelab/realm.yaml deleted file mode 100644 index 750f455..0000000 --- a/k8s/infra/auth/keycloak-realms/homelab/realm.yaml +++ /dev/null @@ -1,7 +0,0 @@ -apiVersion: realm.keycloak.crossplane.io/v1alpha1 -kind: Realm -metadata: - name: homelab -spec: - forProvider: - realm: homelab diff --git a/k8s/infra/auth/keycloak-realms/homelab/users/kustomization.yaml b/k8s/infra/auth/keycloak-realms/homelab/users/kustomization.yaml deleted file mode 100644 index efc255a..0000000 --- a/k8s/infra/auth/keycloak-realms/homelab/users/kustomization.yaml +++ /dev/null @@ -1,5 +0,0 @@ -apiVersion: kustomize.config.k8s.io/v1beta1 -kind: Kustomization - -resources: - - veh.yaml diff --git a/k8s/infra/auth/keycloak-realms/homelab/users/veh.yaml b/k8s/infra/auth/keycloak-realms/homelab/users/veh.yaml deleted file mode 100644 index 93d1723..0000000 --- a/k8s/infra/auth/keycloak-realms/homelab/users/veh.yaml +++ /dev/null @@ -1,13 +0,0 @@ -apiVersion: user.keycloak.crossplane.io/v1alpha1 -kind: User -metadata: - name: veh -spec: - forProvider: - enabled: true - email: vegard@stonegarden.dev - firstName: Vegard - lastName: Hagen - username: veh - realmIdRef: - name: homelab \ No newline at end of file diff --git a/k8s/infra/auth/keycloak-realms/kustomization.yaml b/k8s/infra/auth/keycloak-realms/kustomization.yaml deleted file mode 100644 index fd67ad6..0000000 --- a/k8s/infra/auth/keycloak-realms/kustomization.yaml +++ /dev/null @@ -1,5 +0,0 @@ -apiVersion: kustomize.config.k8s.io/v1beta1 -kind: Kustomization - -resources: - - homelab diff --git a/k8s/infra/auth/keycloak/crossplane-provider-config.yaml b/k8s/infra/auth/keycloak/crossplane-provider-config.yaml deleted file mode 100644 index cef348e..0000000 --- a/k8s/infra/auth/keycloak/crossplane-provider-config.yaml +++ /dev/null @@ -1,11 +0,0 @@ -apiVersion: keycloak.crossplane.io/v1beta1 -kind: ProviderConfig -metadata: - name: default -spec: - credentials: - source: Secret - secretRef: - name: crossplane-keycloak-credentials - namespace: keycloak - key: credentials diff --git a/k8s/infra/auth/keycloak/http-route.yaml b/k8s/infra/auth/keycloak/http-route.yaml deleted file mode 100644 index 65a68e5..0000000 --- a/k8s/infra/auth/keycloak/http-route.yaml +++ /dev/null @@ -1,42 +0,0 @@ -apiVersion: gateway.networking.k8s.io/v1 -kind: HTTPRoute -metadata: - name: external - namespace: keycloak -spec: - parentRefs: - - name: external - namespace: gateway - hostnames: - - "keycloak.stonegarden.dev" - rules: - - matches: - - path: - type: PathPrefix - value: /realms/homelab - - path: - type: PathPrefix - value: /resources - backendRefs: - - name: keycloak - port: 80 ---- -apiVersion: gateway.networking.k8s.io/v1 -kind: HTTPRoute -metadata: - name: internal - namespace: keycloak -spec: - parentRefs: - - name: internal - namespace: gateway - hostnames: - - "keycloak.stonegarden.dev" - rules: - - matches: - - path: - type: PathPrefix - value: / - backendRefs: - - name: keycloak - port: 80 diff --git a/k8s/infra/auth/keycloak/kustomization.yaml b/k8s/infra/auth/keycloak/kustomization.yaml deleted file mode 100644 index c7ee272..0000000 --- a/k8s/infra/auth/keycloak/kustomization.yaml +++ /dev/null @@ -1,19 +0,0 @@ -apiVersion: kustomize.config.k8s.io/v1beta1 -kind: Kustomization - -resources: - - ns.yaml - - pvc.yaml - - secret-keycloak-admin.yaml - - secret-keycloak-db-credentials.yaml - - secret-crossplane-keycloak-credentials.yaml - - http-route.yaml - - crossplane-provider-config.yaml - -helmCharts: - - name: keycloak - repo: oci://registry-1.docker.io/bitnamicharts - releaseName: keycloak - namespace: keycloak - version: 24.5.2 - valuesFile: values.yaml diff --git a/k8s/infra/auth/keycloak/ns.yaml b/k8s/infra/auth/keycloak/ns.yaml deleted file mode 100644 index 80e7888..0000000 --- a/k8s/infra/auth/keycloak/ns.yaml +++ /dev/null @@ -1,4 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: keycloak diff --git a/k8s/infra/auth/keycloak/pvc.yaml b/k8s/infra/auth/keycloak/pvc.yaml deleted file mode 100644 index dca84a2..0000000 --- a/k8s/infra/auth/keycloak/pvc.yaml +++ /dev/null @@ -1,13 +0,0 @@ -apiVersion: v1 -kind: PersistentVolumeClaim -metadata: - name: keycloak-postgres - namespace: keycloak -spec: - storageClassName: proxmox-csi - volumeName: pv-keycloak-postgres - accessModes: - - ReadWriteOnce - resources: - requests: - storage: 2G diff --git a/k8s/infra/auth/keycloak/secret-crossplane-keycloak-credentials.yaml b/k8s/infra/auth/keycloak/secret-crossplane-keycloak-credentials.yaml deleted file mode 100644 index 215d629..0000000 --- a/k8s/infra/auth/keycloak/secret-crossplane-keycloak-credentials.yaml +++ /dev/null @@ -1,15 +0,0 @@ -apiVersion: bitnami.com/v1alpha1 -kind: SealedSecret -metadata: - name: crossplane-keycloak-credentials - namespace: keycloak -spec: - encryptedData: - credentials: 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 - template: - metadata: - labels: - type: provider-credentials - name: crossplane-keycloak-credentials - namespace: keycloak - type: Opaque diff --git a/k8s/infra/auth/keycloak/secret-keycloak-admin.yaml b/k8s/infra/auth/keycloak/secret-keycloak-admin.yaml deleted file mode 100644 index d0dc88d..0000000 --- a/k8s/infra/auth/keycloak/secret-keycloak-admin.yaml +++ /dev/null @@ -1,13 +0,0 @@ -apiVersion: bitnami.com/v1alpha1 -kind: SealedSecret -metadata: - name: keycloak-admin-password - namespace: keycloak -spec: - encryptedData: - password: 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 - template: - metadata: - name: keycloak-admin-password - namespace: keycloak - type: Opaque diff --git a/k8s/infra/auth/keycloak/secret-keycloak-db-credentials.yaml b/k8s/infra/auth/keycloak/secret-keycloak-db-credentials.yaml deleted file mode 100644 index a2b5729..0000000 --- a/k8s/infra/auth/keycloak/secret-keycloak-db-credentials.yaml +++ /dev/null @@ -1,15 +0,0 @@ -apiVersion: bitnami.com/v1alpha1 -kind: SealedSecret -metadata: - name: keycloak-db-credentials - namespace: keycloak -spec: - encryptedData: - password: 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 - postgres-password: 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 - username: AgC7mQo1QGCJNu0vw4cL5eztm3O1BQbF8PxFyO95izYl8YZHbtqbWBrlfbQ+8mftAxVpIpPQ3SB7veTppNumrtNiHXR2yx6IiVNKYXTRPj/hlwA+qdkHS8NWcdvyoE/5+tKgUj+nmkjHBwnpRQsahdzehqL8K0WOIKyHGPfWx3+JZhSyId/SIGRRhem59OwOQ5yKeNVMxfxbLnldEEI1tAVJYBFyyXZixK5UB4MD97/+5dDh/FEtE1vII93n7iDqDsgdMf2D/NNYFrxMCXs6iEKGov+VGKXOUXTJPS0RRk7eGlVFplz4sO8n29gV/kxe3IcIhWIrQrudF0I+YbUJhYCau373xdDROH0FJboJ/HuyudS1gHdIy5ofjibxwvRnpEfma/FD6L6r3a4ZG1Yyz+a1QmR1XDiXcuK1M6kjWVWVeX3uoLywT9PcSxDLARUuVmg+X2CEZkwvxLfu7HD5JRb2ggwA++giLR8u6LsNOm7drWTFjlGNsATqcGA7FtzoIhk8haYHdlT/sQEx7FLvPimht7tyEwuKwsykBwekpXr8FdjIyIzj2SEmR6M8sHlZNY0dop9wlEzy4/HXDXX2KSGMnLdmZDRhkZcizdiDopD+8tOipIfxBDWscYM7kraUmtySAOZ8gldtlBRC6UJwgryebtjsivyZeIzn70Q7HapNGv/Uc0/f3AxJLy6l64+mZCN4nDh/2+V1CLgY9w== - template: - metadata: - name: keycloak-db-credentials - namespace: keycloak - type: Opaque diff --git a/k8s/infra/auth/keycloak/values.yaml b/k8s/infra/auth/keycloak/values.yaml deleted file mode 100644 index a66d476..0000000 --- a/k8s/infra/auth/keycloak/values.yaml +++ /dev/null @@ -1,36 +0,0 @@ -# https://github.com/bitnami/charts/blob/main/bitnami/keycloak/values.yaml -auth: - adminUser: admin - existingSecret: keycloak-admin-password - passwordSecretKey: password - -production: true - -nodeSelector: - topology.kubernetes.io/zone: euclid - -proxy: edge - -ingress: - enabled: false - -resources: - requests: - cpu: 200m - memory: 640Mi - limits: - memory: 3Gi - -postgresql: - enabled: true - auth: - existingSecret: keycloak-db-credentials - # https://github.com/bitnami/charts/blob/main/bitnami/postgresql/values.yaml - primary: - nodeAffinityPreset: - type: hard - key: topology.kubernetes.io/zone - values: [ euclid ] - persistence: - enabled: true - existingClaim: keycloak-postgres