refactor(gitops): establish platform ownership boundaries

2026-07-26 01:34:29 +09:00
parent 293ee6fc97
commit a6f6c663e0
121 changed files with 2801 additions and 1204 deletions
@@ -0,0 +1,22 @@
+{
+  "realm": "project-auth",
+  "enabled": true,
+  "displayName": "Project Auth",
+  "sslRequired": "NONE",
+  "registrationAllowed": false,
+  "loginWithEmailAllowed": true,
+  "duplicateEmailsAllowed": false,
+  "resetPasswordAllowed": true,
+  "clients": [
+    {
+      "clientId": "project-auth-server",
+      "name": "project-auth-server",
+      "enabled": true,
+      "protocol": "openid-connect",
+      "publicClient": false,
+      "standardFlowEnabled": true,
+      "directAccessGrantsEnabled": false,
+      "serviceAccountsEnabled": false
+    }
+  ]
+}
@@ -0,0 +1,19 @@
+#!/bin/sh
+set -eu
+
+psql \
+  -v ON_ERROR_STOP=1 \
+  --set=auth_db_user="${AUTH_DB_USER}" \
+  --set=auth_db_password="${AUTH_DB_PASSWORD}" \
+  --set=auth_db_name="${AUTH_DB_NAME}" \
+  --set=keycloak_db_user="${KEYCLOAK_DB_USER}" \
+  --set=keycloak_db_password="${KEYCLOAK_DB_PASSWORD}" \
+  --set=keycloak_db_name="${KEYCLOAK_DB_NAME}" \
+  --username "${POSTGRES_USER}" \
+  --dbname "${POSTGRES_DB}" <<-'EOSQL'
+  CREATE USER :"auth_db_user" WITH PASSWORD :'auth_db_password';
+  CREATE DATABASE :"auth_db_name" OWNER :"auth_db_user";
+
+  CREATE USER :"keycloak_db_user" WITH PASSWORD :'keycloak_db_password';
+  CREATE DATABASE :"keycloak_db_name" OWNER :"keycloak_db_user";
+EOSQL