From ee08fd47b5468244fb01950e782c3e522941f44a Mon Sep 17 00:00:00 2001
From: Danny Bessems <danny@bessems.eu>
Date: Tue, 11 Apr 2023 10:40:33 +0200
Subject: [PATCH] Configure keycloakx;Convert output to yaml

---
 .../bootstrap/roles/workloadcluster/tasks/gitops.yml |  2 +-
 ansible/vars/metacluster.yml                         | 12 +++++++++++-
 2 files changed, 12 insertions(+), 2 deletions(-)

diff --git a/ansible/roles/firstboot/files/ansible_payload/bootstrap/roles/workloadcluster/tasks/gitops.yml b/ansible/roles/firstboot/files/ansible_payload/bootstrap/roles/workloadcluster/tasks/gitops.yml
index 31e5585..e426700 100644
--- a/ansible/roles/firstboot/files/ansible_payload/bootstrap/roles/workloadcluster/tasks/gitops.yml
+++ b/ansible/roles/firstboot/files/ansible_payload/bootstrap/roles/workloadcluster/tasks/gitops.yml
@@ -24,7 +24,7 @@
 - name: Write chart values to file
   ansible.builtin.copy:
     dest: /opt/workloadcluster/git-repositories/gitops/values/{{ item.key }}/values.yaml
-    content: "{{ item.value.chart_values | default('# Empty') }}"
+    content: "{{ item.value.chart_values | default('# Empty') | to_nice_yaml(indent=2, width=4096) }}"
   loop: "{{ query('ansible.builtin.dict', downstream_components) }}"
   loop_control:
     label: "{{ item.key }}"
diff --git a/ansible/vars/metacluster.yml b/ansible/vars/metacluster.yml
index 01ef0cc..7a71c83 100644
--- a/ansible/vars/metacluster.yml
+++ b/ansible/vars/metacluster.yml
@@ -221,9 +221,19 @@ components:
             value: admin
           - name: KEYCLOAK_ADMIN_PASSWORD
             value: {{ vapp['metacluster.password'] }}
+          - name: KC_PROXY
+            value: "passthrough"
           - name: JAVA_OPTS_APPEND
             value: >-
-              -Djgroups.dns.query={{ include "keycloak.fullname" . }}-headless
+              -Djgroups.dns.query={% raw %}{{ include "keycloak.fullname" . }}{% endraw %}-headless
+        ingress:
+          enabled: true
+          rules:
+            - host: keycloak.{{ vapp['metacluster.fqdn'] }}
+              paths:
+                - path: /
+                  pathType: Prefix
+          tls: []
 
   kube-prometheus-stack:
     helm: