---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: keycloak
  namespace: personal-services
  labels:
    app.kubernetes.io/created-by: tyil
    app.kubernetes.io/managed-by: manual
    app.kubernetes.io/name: keycloak
    app.kubernetes.io/part-of: keycloak
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/created-by: tyil
      app.kubernetes.io/managed-by: manual
      app.kubernetes.io/name: keycloak
      app.kubernetes.io/part-of: keycloak
  template:
    metadata:
      labels:
        app.kubernetes.io/created-by: tyil
        app.kubernetes.io/managed-by: manual
        app.kubernetes.io/name: keycloak
        app.kubernetes.io/part-of: keycloak
    spec:
      containers:
      - name: keycloak
        image: quay.io/keycloak/keycloak:21.0.2
        args: ["start-dev"]
        env:
        - name: KEYCLOAK_ADMIN
          valueFrom:
            secretKeyRef:
              name: keycloak-credentials
              key: username
        - name: KEYCLOAK_ADMIN_PASSWORD
          valueFrom:
            secretKeyRef:
              name: keycloak-credentials
              key: password
        - name: KC_PROXY
          value: "edge"
        ports:
        - name: http
          containerPort: 8080
        readinessProbe:
          httpGet:
            path: /realms/master
            port: 8080
        resources:
          limits:
            memory: 512Mi
...