Repository metrics
- Stars
- (34,398 個のスター)
- PR merge metrics
- (平均マージ 6d 19h) (30d で 384 merged PRs)
説明
Description
Add a mechanism to configure a keytab and any other requirement to configure Keycloak to integrate with FreeIPA
Discussion
No response
Motivation
From https://www.keycloak.org/operator/advanced-configuration#_pod_template :+1:
This field is intended to be used as a temporary workaround if there is no officially supported field at the top level of the CR to cover your use-case. Please consider opening an issue on GitHub to help us make the experience better.
I'm using the operator to install Keycloak on a plain Kubernetes cluster. I wish to connect Keycloak to my FreeIPA instance and allow authentication using Kerberos. Reading the documentation I see that I need to include (at least) a relevant keytab in the Keycloak pod for this to work.
I assume I can do this with podTemplate, so I suppose I should ask for some "supported" configuration option to do this? I could build my own image and do everything with supported configuration, but it seems overkill.
Details
If I can dream, you could have parameters for an IPA domain, allowed user and some way to get a password and the Keycloak operator would install Keycloak with FreeIPA integrated to the default realm. That would be truly awesome!
(And this is the experience that Ipsilon had- setting it up with FreeIPA was really smooth.)