apiVersion: k8s.keycloak.org/v2alpha1 kind: Keycloak metadata: name: keycloak spec: instances: 1 db: vendor: postgres host: keycloak-postgresdb port: 5432 usernameSecret: name: keycloak-postgresdb-creds key: POSTGRES_USER passwordSecret: name: keycloak-postgresdb-creds key: POSTGRES_PASSWORD http: httpEnabled: true httpPort: 8080 httpsPort: 8443 tlsSecret: reault-tech-cert hostname: hostname: iam.reault.tech proxy: headers: xforwarded # double check your reverse proxy sets and overwrites the X-Forwarded-* headers resources: requests: cpu: 1 memory: 300Mi limits: cpu: 2 memory: 500Mi