---
# Keycloak - keycloak.kevisual.cn
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: keycloak-https
  namespace: default
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`keycloak.kevisual.cn`)
      kind: Rule
      services:
        - name: keycloak-external
          port: 8082
  tls:
    certResolver: letsencrypt

---
# Keycloak 服务 (端口 8082, 本地)
apiVersion: v1
kind: Service
metadata:
  name: keycloak-external
  namespace: default
spec:
  type: ClusterIP
  ports:
  - port: 8082
    targetPort: 8082
    protocol: TCP
    name: http
---
apiVersion: v1
kind: Endpoints
metadata:
  name: keycloak-external
  namespace: default
subsets:
- addresses:
  - ip: 118.196.32.29
  ports:
  - port: 8082
    name: http