chore: replace drone by github actions, restructure source

.github/settings.yml

@@ -77,7 +77,8 @@ branches:
       required_status_checks:
         strict: true
         contexts:
-          - continuous-integration/drone/pr
+          - build
+          - linter
       enforce_admins: false
       restrictions:
         apps:

.github/workflows/build.yml

@@ -0,0 +1,25 @@
+---
+name: build
+
+'on':
+  push:
+    branches:
+      - master
+  pull_request:
+    branches:
+      - master
+
+jobs:
+  kustomize:
+    runs-on: ubuntu-20.04
+
+    steps:
+      - name: Checkout source
+        uses: actions/checkout@v2
+
+      - name: Build manifest
+        uses: actionhippie/kustomize@v1
+        with:
+          version: 4.4.0
+
+...

.github/workflows/linter.yml

@@ -0,0 +1,25 @@
+---
+name: linter
+
+'on':
+  push:
+    branches:
+      - master
+  pull_request:
+    branches:
+      - master
+
+jobs:
+  yamllint:
+    runs-on: ubuntu-20.04
+
+    steps:
+      - name: Checkout source
+        uses: actions/checkout@v2
+
+      - name: Lint manifest
+        uses: actionhippie/yamllint@v1
+        with:
+          strict: true
+
+...

.github/workflows/lock.yml

@@ -0,0 +1,23 @@
+---
+name: lock
+
+'on':
+  schedule:
+    - cron: '0 0 * * *'
+
+permissions:
+  actions: write
+  issues: write
+  pull-requests: write
+
+concurrency:
+  group: lock
+
+jobs:
+  execute:
+    runs-on: ubuntu-20.04
+
+    steps:
+      - uses: dessant/lock-threads@v3
+
+...

.github/workflows/react.yml

@@ -0,0 +1,31 @@
+---
+name: react
+
+'on':
+  issue_comment:
+    types:
+      - created
+      - edited
+  pull_request_review_comment:
+    types:
+      - created
+      - edited
+  schedule:
+    - cron: '0 0 * * *'
+
+permissions:
+  actions: write
+  issues: write
+  pull-requests: write
+
+concurrency:
+  group: react
+
+jobs:
+  execute:
+    runs-on: ubuntu-20.04
+
+    steps:
+      - uses: dessant/reaction-comments@v2
+
+...

.gitignore

@@ -1 +0,0 @@
-.drone.yml

README.md

@@ -1,7 +1,6 @@
 # keycloak
 
-[![Build Status](http://drone.webhippie.de/api/badges/kustomhippie/keycloak/status.svg)](http://drone.webhippie.de/kustomhippie/keycloak)
-[![Join the Matrix chat at https://matrix.to/#/#webhippie:matrix.org](https://img.shields.io/badge/matrix-%23webhippie%3Amatrix.org-7bc9a4.svg)](https://matrix.to/#/#webhippie:matrix.org)
+[![Kustomize Build](https://github.com/kustomhippie/keycloak/workflows/build/badge.svg)](https://github.com/kustomhippie/keycloak/actions?query=workflow%3Abuild) [![Linting Build](https://github.com/kustomhippie/keycloak/workflows/linter/badge.svg)](https://github.com/kustomhippie/keycloak/actions?query=workflow%3Alinter) [![Join the Matrix chat at https://matrix.to/#/#webhippie:matrix.org](https://img.shields.io/badge/matrix-%23webhippie%3Amatrix.org-7bc9a4.svg)](https://matrix.to/#/#webhippie:matrix.org)
 
 This repository defines a [Kustomize](https://kustomize.io/) manifest which could be used by other repositories to generate a [Kubernetes](https://kubernetes.io/) manifest for the installation of [keycloak](https://github.com/keycloak/keycloak).
 

kustomization.yml

@@ -5,19 +5,15 @@ kind: Kustomization
 resources:
   - server/
 
-commonLabels:
-  app.kubernetes.io/name: keycloak
-
 images:
   - name: keycloak-checks
     newName: quay.io/webhippie/alpine
     newTag: "3.14"
-
-  - name: keycloak-server
-    newName: quay.io/keycloak/keycloak
-    newTag: "12.0.4"
   - name: keycloak-extensions
     newName: quay.io/keycloak/keycloak-init-container
-    newTag: "12.0.4"
+    newTag: "15.0.2"
+  - name: keycloak-server
+    newName: quay.io/keycloak/keycloak
+    newTag: "15.0.2"
 
 ...

server/kustomization.yml

@@ -3,25 +3,41 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 resources:
-  - serviceaccount.yml
   - service.yml
   - statefulset.yml
 
-commonLabels:
-  app.kubernetes.io/component: server
-
 configMapGenerator:
   - name: keycloak-server
+    options:
+      labels:
+        app.kubernetes.io/name: keycloak
+        app.kubernetes.io/component: server
     literals:
       - DB_VENDOR=postgres
       - DB_ADDR=postgres-server
       - DB_PORT=5432
       - DB_DATABASE=keycloak
   - name: keycloak-extension
+    options:
+      labels:
+        app.kubernetes.io/name: keycloak
+        app.kubernetes.io/component: server
     literals:
-      - KEYCLOAK_EXTENSIONS=https://github.com/aerogear/keycloak-metrics-spi/releases/download/2.1.0/keycloak-metrics-spi-2.1.0.jar
+      - KEYCLOAK_EXTENSIONS=https://github.com/aerogear/keycloak-metrics-spi/releases/download/2.5.1/keycloak-metrics-spi-2.5.1.jar
   - name: keycloak-startup
+    options:
+      labels:
+        app.kubernetes.io/name: keycloak
+        app.kubernetes.io/component: server
     files:
-      - keycloak.cli=keycloak.cli
+      - configs/keycloak.cli
+
+secretGenerator:
+  - name: keycloak-server
+    options:
+      labels:
+        app.kubernetes.io/name: keycloak
+        app.kubernetes.io/component: server
+    literals: []
 
 ...

server/service.yml

@@ -4,8 +4,15 @@ kind: Service
 
 metadata:
   name: keycloak-server
+  labels:
+    app.kubernetes.io/name: keycloak
+    app.kubernetes.io/component: server
 
 spec:
+  selector:
+    app.kubernetes.io/name: keycloak
+    app.kubernetes.io/component: server
+
   ports:
     - name: http
       port: 8080

server/statefulset.yml

@@ -4,20 +4,31 @@ kind: StatefulSet
 
 metadata:
   name: keycloak-server
+  labels:
+    app.kubernetes.io/name: keycloak
+    app.kubernetes.io/component: server
 
 spec:
   replicas: 1
-
   serviceName: keycloak-server
   podManagementPolicy: Parallel
 
   updateStrategy:
     type: RollingUpdate
 
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: keycloak
+      app.kubernetes.io/component: server
+
   template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: keycloak
+        app.kubernetes.io/component: server
+
     spec:
-      serviceAccountName: keycloak-server
-      enableServiceLinks: true
+      enableServiceLinks: false
       restartPolicy: Always
       terminationGracePeriodSeconds: 60
 
@@ -111,6 +122,8 @@ spec:
           envFrom:
             - configMapRef:
                 name: keycloak-server
+            - secretRef:
+                name: keycloak-server
 
           ports:
             - name: http
@@ -137,14 +150,6 @@ spec:
               path: /auth/realms/master
               port: http
 
-          # resources:
-          #   requests:
-          #     cpu: 500m
-          #     memory: 1024Mi
-          #   limits:
-          #     cpu: 500m
-          #     memory: 4096Mi
-
           volumeMounts:
             - name: extensions
               mountPath: /opt/jboss/keycloak/providers