meissa/c4k-keycloak
6
0
Fork 0
Code Issues Pull requests Projects Releases 3 Packages Wiki Activity

Fix keycloak weird logins

Browse source
This commit is contained in:
patdyn 2024-08-30 16:56:59 +02:00
parent 81cc7510c1
commit e7bd7fc964
3 changed files with 7 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
src/main/cljc/dda/c4k_keycloak/keycloak.cljc
View file

@ -62,7 +62,7 @@
(-> (->
(yaml/load-as-edn "keycloak/configmap.yaml") (yaml/load-as-edn "keycloak/configmap.yaml")
(cm/replace-all-matching "NAMESPACE" namespace) (cm/replace-all-matching "NAMESPACE" namespace)
(cm/replace-all-matching "FQDN" (str "https://" fqdn))))) (cm/replace-all-matching "FQDN" fqdn))))
(defn-spec generate-service cp/map-or-seq? (defn-spec generate-service cp/map-or-seq?
[config config?] [config config?]

6
src/main/resources/keycloak/configmap.yaml
View file

@ -8,9 +8,11 @@ metadata:
data: data:
KC_HTTPS_CERTIFICATE_FILE: /etc/certs/tls.crt KC_HTTPS_CERTIFICATE_FILE: /etc/certs/tls.crt
KC_HTTPS_CERTIFICATE_KEY_FILE: /etc/certs/tls.key KC_HTTPS_CERTIFICATE_KEY_FILE: /etc/certs/tls.key
# This is the hostname under which the keycloak is accessible on the internet # We trust our traefik to properly set headers
# This hostname actually needs to an url specifying a scheme from which a port is derived # see: https://www.keycloak.org/server/reverseproxy & https://www.keycloak.org/server/hostname
# and: https://doc.traefik.io/traefik/getting-started/faq/#what-are-the-forwarded-headers-when-proxying-http-requests
KC_HOSTNAME: FQDN KC_HOSTNAME: FQDN
KC_PROXY_HEADERS: xforwarded
KC_DB: postgres KC_DB: postgres
KC_DB_URL_HOST: postgresql-service KC_DB_URL_HOST: postgresql-service
KC_DB_URL_PORT: "5432" KC_DB_URL_PORT: "5432"

3
src/test/cljc/dda/c4k_keycloak/keycloak_test.cljc
View file

@ -29,7 +29,8 @@
:data :data
{:KC_HTTPS_CERTIFICATE_FILE "/etc/certs/tls.crt", {:KC_HTTPS_CERTIFICATE_FILE "/etc/certs/tls.crt",
:KC_HTTPS_CERTIFICATE_KEY_FILE "/etc/certs/tls.key", :KC_HTTPS_CERTIFICATE_KEY_FILE "/etc/certs/tls.key",
:KC_HOSTNAME "https://test.de" , :KC_HOSTNAME "test.de" ,
:KC_PROXY_HEADERS "xforwarded" ,
:KC_DB "postgres", :KC_DB "postgres",
:KC_DB_URL_HOST "postgresql-service", :KC_DB_URL_HOST "postgresql-service",
:KC_DB_URL_PORT "5432", :KC_DB_URL_PORT "5432",