fix keycloak limits

Author: Your Name

charts/opencloud-microservices/deployments/helm/helmfile.yaml

@@ -33,16 +33,16 @@ releases:
             persistence:
               size: "40Gi"
               accessModes:
-                - ReadWriteMany
-              storageClassName: ceph-cephfs
+                - ReadWriteOnce
+              storageClassName: 
       - onlyoffice:
           enabled: false
           domain: onlyoffice.opencloud.test # Domain for OnlyOffice.
           persistence:
             size: "2Gi"
             accessModes:
-              - ReadWriteMany
-            storageClassName: ceph-cephfs
+              - ReadWriteOnce
+            storageClassName: 
 
       - collabora:
           enabled: true
@@ -125,31 +125,31 @@ releases:
               enabled: true
               size: "10Gi"
               accessModes:
-                - ReadWriteMany
-              storageClassName: ceph-cephfs
+                - ReadWriteOnce
+              storageClassName: 
           search:
             persistence:
               enabled: true
               size: "10Gi"
               accessModes:
-                - ReadWriteMany
-              storageClassName: ceph-cephfs
+                - ReadWriteOnce
+              storageClassName: 
             extractor:
               type: tika
           storagesystem:
             persistence:
               enabled: true
               size: "5Gi"
               accessModes:
-                - ReadWriteMany
-              storageClassName: ceph-cephfs
+                - ReadWriteOnce
+              storageClassName: 
           storageusers:
             persistence:
               enabled: true
               size: "60Gi"
               accessModes:
-                - ReadWriteMany
-              storageClassName: ceph-cephfs
+                - ReadWriteOnce
+              storageClassName: 
             storageBackend:
               driver: posix
 
@@ -158,15 +158,15 @@ releases:
               enabled: true
               size: "10Gi"
               accessModes:
-                - ReadWriteMany
-              storageClassName: ceph-cephfs
+                - ReadWriteOnce
+              storageClassName: 
           web:
             persistence:
               enabled: true
               size: "1Gi"
               accessModes:
-                - ReadWriteMany
-              storageClassName: ceph-cephfs
+                - ReadWriteOnce
+              storageClassName: 
             config:
               oidc:
                 webClientID: web
@@ -240,15 +240,15 @@ releases:
               enabled: false
               size: "10Gi"
               accessModes:
-                - ReadWriteMany
-              storageClassName: ceph-cephfs
+                - ReadWriteOnce
+              storageClassName: 
           ocm:
             persistence:
               enabled: false
               size: "1Gi"
               accessModes:
-                - ReadWriteMany
-              storageClassName: ceph-cephfs
+                - ReadWriteOnce
+              storageClassName: 
       - extraResources:
           - |
             apiVersion: v1

charts/opencloud-microservices/deployments/timoni/configmap.yaml

@@ -46,6 +46,28 @@ data:
   # Comma-separated for runtime to split into a list, e.g. "ReadWriteMany" or "ReadWriteOnce,ReadOnlyMany"
   PERSISTENCE_ACCESS_MODES: "ReadWriteMany"
 
+  ###############################################################################
+  # Persistence (service PVC sizes and toggles)
+  ###############################################################################
+  IDM_PERSISTENCE_ENABLED: "false"
+  IDM_PERSISTENCE_SIZE: "10Gi"
+  NATS_PERSISTENCE_ENABLED: "true"
+  NATS_PERSISTENCE_SIZE: "10Gi"
+  OCM_PERSISTENCE_ENABLED: "false"
+  OCM_PERSISTENCE_SIZE: "1Gi"
+  ONLYOFFICE_PERSISTENCE_SIZE: "2Gi"
+  SEARCH_PERSISTENCE_ENABLED: "true"
+  SEARCH_PERSISTENCE_SIZE: "10Gi"
+  STORAGE_USERS_BACKEND_DRIVER: "posix"
+  STORAGE_SYSTEM_PERSISTENCE_ENABLED: "true"
+  STORAGE_SYSTEM_PERSISTENCE_SIZE: "5Gi"
+  STORAGE_USERS_PERSISTENCE_ENABLED: "true"
+  STORAGE_USERS_PERSISTENCE_SIZE: "50Gi"
+  THUMBNAILS_PERSISTENCE_ENABLED: "true"
+  THUMBNAILS_PERSISTENCE_SIZE: "10Gi"
+  WEB_PERSISTENCE_ENABLED: "true"
+  WEB_PERSISTENCE_SIZE: "1Gi"
+
   # NATS specific persistence options
   # When true, a root init container will chown the NATS data volume before the main container starts.
   NATS_PERSISTENCE_CHOWN_INIT_CONTAINER: "false"
@@ -90,6 +112,11 @@ data:
   OIDC_USER_ID_CLAIM_ATTRIBUTE_MAPPING: "username"
   OIDC_ROLE_ASSIGNMENT_CLAIM: "roles"
 
+  ###############################################################################
+  # Search Configuration
+  ###############################################################################
+  SEARCH_EXTRACTOR_TYPE: "tika"
+
   ###############################################################################
   # Collabora Configuration
   ###############################################################################

charts/opencloud-microservices/deployments/timoni/opencloud.cue

@@ -21,11 +21,11 @@ bundle: {
             namespace: "opencloud"
             values: {
                 repository: {
-                    url: "oci://ghcr.io/opencloud-eu/helm-charts"
+                    url: "oci://ghcr.io/suse-coder/helm-charts"
                 }
                 chart: {
                     name:    "opencloud-microservices"
-                    version: "0.1.0"
+                    version: "0.2.0"
                 }
                 sync: {
                     timeout: 10

charts/opencloud-microservices/templates/keycloak/deployment.yaml

@@ -80,23 +80,33 @@ spec:
               subPath: opencloud-realm.json
           resources:
             limits:
-              cpu: 1000m
-              memory: 1Gi
+              cpu: 3000m
+              memory: 5Gi
             requests:
               cpu: 500m
               memory: 512Mi
+          startupProbe:
+            httpGet:
+              path: /health/ready
+              port: http
+            periodSeconds: 10
+            failureThreshold: 30
           readinessProbe:
             httpGet:
-              path: /realms/master
+              path: /health/ready
               port: http
             initialDelaySeconds: 30
+            periodSeconds: 10
             timeoutSeconds: 5
+            failureThreshold: 12
           livenessProbe:
             httpGet:
-              path: /realms/master
+              path: /health/live
               port: http
-            initialDelaySeconds: 60
+            initialDelaySeconds: 90
+            periodSeconds: 10
             timeoutSeconds: 5
+            failureThreshold: 6
       volumes:
         - name: script
           configMap: