|
|
|
@ -43,20 +43,7 @@ spec: |
|
|
|
|
subPath: app-quarkus-dir |
|
|
|
|
containers: |
|
|
|
|
- args: |
|
|
|
|
- /opt/bitnami/keycloak/bin/kc.sh |
|
|
|
|
- export |
|
|
|
|
- --file |
|
|
|
|
- /backup/realm-export.json |
|
|
|
|
- --realm |
|
|
|
|
- avril |
|
|
|
|
- --db |
|
|
|
|
- postgres |
|
|
|
|
- --db-url |
|
|
|
|
- jdbc:postgresql://keycloak-postgresql-hl/bitnami_keycloak |
|
|
|
|
- --db-password |
|
|
|
|
- $(KEYCLOAK_DATABASE_PASSWORD) |
|
|
|
|
- --db-username |
|
|
|
|
- bn_keycloak |
|
|
|
|
- /script/backup_keycloak.sh |
|
|
|
|
env: |
|
|
|
|
- name: KUBERNETES_NAMESPACE |
|
|
|
|
valueFrom: |
|
|
|
@ -104,6 +91,8 @@ spec: |
|
|
|
|
subPath: app-quarkus-dir |
|
|
|
|
- mountPath: /backup |
|
|
|
|
name: backup-dir |
|
|
|
|
- mountPath: /script |
|
|
|
|
name: script-volume |
|
|
|
|
restartPolicy: Never |
|
|
|
|
securityContext: |
|
|
|
|
# https://stackoverflow.com/questions/50156124/kubernetes-nfs-persistent-volumes-permission-denied |
|
|
|
@ -115,6 +104,10 @@ spec: |
|
|
|
|
- name: backup-dir |
|
|
|
|
persistentVolumeClaim: |
|
|
|
|
claimName: backup-dir-pvc |
|
|
|
|
- name: script-volume |
|
|
|
|
configMap: |
|
|
|
|
name: keycloak-backup-script |
|
|
|
|
defaultMode: 0777 |
|
|
|
|
--- |
|
|
|
|
apiVersion: v1 |
|
|
|
|
kind: PersistentVolume |
|
|
|
@ -146,3 +139,19 @@ spec: |
|
|
|
|
resources: |
|
|
|
|
requests: |
|
|
|
|
storage: 2M |
|
|
|
|
--- |
|
|
|
|
apiVersion: v1 |
|
|
|
|
kind: ConfigMap |
|
|
|
|
metadata: |
|
|
|
|
creationTimestamp: "2024-04-20T04:14:45Z" |
|
|
|
|
name: keycloak-backup-script |
|
|
|
|
namespace: keycloak |
|
|
|
|
data: |
|
|
|
|
backup_keycloak.sh: |+ |
|
|
|
|
/opt/bitnami/keycloak/bin/kc.sh export \ |
|
|
|
|
--file "/backup/realm-export-$(date '+%Y-%m-%d').json" \ |
|
|
|
|
--realm avril \ |
|
|
|
|
--db postgres \ |
|
|
|
|
--db-url jdbc:postgresql://keycloak-postgresql-hl/bitnami_keycloak \ |
|
|
|
|
--db-password $(KEYCLOAK_DATABASE_PASSWORD) \ |
|
|
|
|
--db-username bn_keycloak |
|
|
|
|