apiVersion: catalyst.openova.io/v1alpha1
kind: Blueprint
metadata:
  name: bp-keycloak
  labels:
    catalyst.openova.io/section: pts-2-3-per-sovereign-supporting-services
spec:
  version: 1.5.0
  card:
    title: keycloak
    summary: Keycloak — user identity. Topology decided by Sovereign CRD spec.keycloakTopology (per-organization for SME, shared-sovereign for corporate).
  visibility: unlisted              # mandatory infra, auto-installed by bootstrap kit
  manifests:
    chart: ./chart
  depends: []
