Skip to content

Deploy keycloak with one hardcoded admin user, one hardcoded non-admin user with a changeable realm name that can be set using a environment variable #2

@VigneshVSV

Description

@VigneshVSV

Soon we would like to integrate user accounts in Thing control panel (which needs a new name as well).

The purpose of user accounts would be store and sync some app settings, saved devices, scripts (when we start supporting jupyter) and finally, dashboards (when they are developed)

None of it is ready and may take a real while to be supported, but integrating a user management system is a work in itself.

For this, we would like to setup keycloak in a development mode to attempt to integrate it.

Rough steps:

  • use bitnami keycloak helm chart, integrate that into skaffold
  • 8GB persistent volume claim
  • create a realm file with one admin user and one hardcoded end user, with a script to overwrite the realm name only (dont git commit the realm)
  • Add some way to securely fetch the realm file from outside of git while deploying keycloak (not clear what to do about this)
  • try hot reloading the realm with skaffold (optional)

We should be able to deploy/upgrade keycloak with skaffold run --module keycloak or something like that, in an isolated fashion.

Sub-issues

Metadata

Metadata

Assignees

No one assigned

    Labels

    good first issueGood for newcomersintermediateintermediate level good first issues, might be little harder to completespeculative

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions