-
-
Notifications
You must be signed in to change notification settings - Fork 2
Open
Labels
bugSomething isn't workingSomething isn't working
Description
When appliance is installed behind HTTP proxy. Keycloak doesn't work and after clicking on Login button I receive only error message:
No providers for OAuth2 Login have been set. Please set a provider or use different form of authentication.
This is caused by fact that some component responsible for configuring keycloak ignores NO_PROXY setting and try to reach endpoint http://keycloak-internal-service.czertainly.svc.cluster.local:8080/kc/realms/CZERTAINLY/protocol/openid-connect/certs
outside of the cluster. Complete error message from Squid HTTP proxy:
1756472351.181 0 192.168.56.102 TCP_DENIED/403 4166 GET http://keycloak-internal-service.czertainly.svc.cluster.local:8080/kc/realms/CZERTAINLY/protocol/openid-connect/certs - HIER_NONE/- text/html
This error also might be caused by some bug in Helm Charts, I'm doubtful that Jobs and initContainers have ENV set in way that they will propagate HTTP_PROXY related environment variables.
related to CZERTAINLY/CZERTAINLY-Appliance-Tools#128
Metadata
Metadata
Assignees
Labels
bugSomething isn't workingSomething isn't working