kind: ConfigMap
apiVersion: v1
metadata:
  name: atlas-keycloak-config
data:
  keycloak.json: |
    {
      "realm": "replace-with-keycloak-realm",
      "auth-server-url": "replace-with-keycloak-url/auth",
      "ssl-required": "none",
      "resource": "atlas",
      "credentials": {
        "secret": "replace-with-keycloak-atlas-client-secret"
       },
      "confidential-port": 443,
      "principal-attribute": "preferred_username",
      "autodetect-bearer-only": true,
      "use-resource-role-mappings": true
    }
