Skip to content

Keycloak doesn't work behind HTTP_PROXY #94

@semik

Description

@semik

When appliance is installed behind HTTP proxy. Keycloak doesn't work and after clicking on Login button I receive only error message:

 No providers for OAuth2 Login have been set. Please set a provider or use different form of authentication. 

This is caused by fact that some component responsible for configuring keycloak ignores NO_PROXY setting and try to reach endpoint http://keycloak-internal-service.czertainly.svc.cluster.local:8080/kc/realms/CZERTAINLY/protocol/openid-connect/certs outside of the cluster. Complete error message from Squid HTTP proxy:

1756472351.181      0 192.168.56.102 TCP_DENIED/403 4166 GET http://keycloak-internal-service.czertainly.svc.cluster.local:8080/kc/realms/CZERTAINLY/protocol/openid-connect/certs - HIER_NONE/- text/html

This error also might be caused by some bug in Helm Charts, I'm doubtful that Jobs and initContainers have ENV set in way that they will propagate HTTP_PROXY related environment variables.

related to CZERTAINLY/CZERTAINLY-Appliance-Tools#128

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions