Name:               keycloak
Namespace:          auth-system
CreationTimestamp:  Fri, 17 Apr 2026 04:39:26 +0000
Selector:           app.kubernetes.io/component=keycloak,app.kubernetes.io/instance=keycloak,app.kubernetes.io/name=keycloak
Labels:             app.kubernetes.io/component=keycloak
                    app.kubernetes.io/instance=keycloak
                    app.kubernetes.io/managed-by=Helm
                    app.kubernetes.io/name=keycloak
                    app.kubernetes.io/version=24.0.5
                    helm.sh/chart=keycloak-21.4.1
Annotations:        meta.helm.sh/release-name: keycloak
                    meta.helm.sh/release-namespace: auth-system
Replicas:           1 desired | 1 total
Update Strategy:    RollingUpdate
  Partition:        0
Pods Status:        1 Running / 0 Waiting / 0 Succeeded / 0 Failed
Pod Template:
  Labels:           app.kubernetes.io/component=keycloak
                    app.kubernetes.io/instance=keycloak
                    app.kubernetes.io/managed-by=Helm
                    app.kubernetes.io/name=keycloak
                    app.kubernetes.io/version=24.0.5
                    helm.sh/chart=keycloak-21.4.1
  Annotations:      checksum/configmap-env-vars: 5725d51a3ce4dc8f1207b43b33d37b63e19b8ce676cf98cc2e21826fc8ec8494
                    checksum/secrets: d2c90174eb64704b409218c625e9b0578406ab1e1ef277b5287fbe136e246ec1
  Service Account:  keycloak
  Containers:
   keycloak:
    Image:           harbor.atmosphere.dev/quay.io/keycloak/keycloak:24.0.5-0
    Ports:           8080/TCP, 7800/TCP
    Host Ports:      0/TCP, 0/TCP
    SeccompProfile:  RuntimeDefault
    Command:
      /opt/keycloak/bin/kc.sh
      --verbose
      start
      --health-enabled=true
      --http-enabled=true
      --http-port=8080
      --hostname-strict=false
      --spi-events-listener-jboss-logging-success-level=info
      --spi-events-listener-jboss-logging-error-level=warn
      --transaction-xa-enabled=false
      --metrics-enabled=true
    Limits:
      cpu:                750m
      ephemeral-storage:  1Gi
      memory:             768Mi
    Requests:
      cpu:                500m
      ephemeral-storage:  50Mi
      memory:             512Mi
    Liveness:             tcp-socket :http delay=300s timeout=5s period=1s #success=1 #failure=3
    Readiness:            http-get http://:http/realms/master delay=30s timeout=1s period=10s #success=1 #failure=3
    Startup:              http-get http://:http/ delay=5s timeout=1s period=5s #success=1 #failure=120
    Environment Variables from:
      keycloak-env-vars  ConfigMap  Optional: false
    Environment:
      KUBERNETES_NAMESPACE:          (v1:metadata.namespace)
      BITNAMI_DEBUG:                false
      KEYCLOAK_ADMIN_PASSWORD:      <set to the key 'admin-password' in secret 'keycloak'>          Optional: false
      KEYCLOAK_DATABASE_PASSWORD:   <set to the key 'db-password' in secret 'keycloak-externaldb'>  Optional: false
      KEYCLOAK_HTTP_RELATIVE_PATH:  /
      KC_FEATURES:                  token-exchange,admin-fine-grained-authz
      KC_PROXY:                     edge
      KC_DB:                        mysql
      KC_DB_URL:                    jdbc:mysql://percona-xtradb-haproxy.openstack:3306/keycloak
      KC_DB_USERNAME:               keycloak
      KC_DB_PASSWORD:               <set to the key 'db-password' in secret 'keycloak-externaldb'>  Optional: false
    Mounts:
      /opt/bitnami/keycloak/conf from empty-dir (rw,path="app-conf-dir")
      /opt/bitnami/keycloak/data from empty-dir (rw,path="app-data-dir")
      /opt/bitnami/keycloak/lib/quarkus from empty-dir (rw,path="app-quarkus-dir")
      /tmp from empty-dir (rw,path="tmp-dir")
  Volumes:
   empty-dir:
    Type:       EmptyDir (a temporary directory that shares a pod's lifetime)
    Medium:     
    SizeLimit:  <unset>
Volume Claims:  <none>
Events:
  Type    Reason            Age   From                    Message
  ----    ------            ----  ----                    -------
  Normal  SuccessfulCreate  36m   statefulset-controller  create Pod keycloak-0 in StatefulSet keycloak successful