Run Keycloak 19 with SQLServer in Azure WebApp #14204

marcelogmonteiro · 2022-09-05T20:42:51Z

marcelogmonteiro
Sep 5, 2022

Hi all,

I already have a v16 running in Azure. Now, I'm trying to run a Keycloak 19 in Azure WebApp (with Azure SQL Server), but the container always stop with timeout.

My dockerfile

FROM quay.io/keycloak/keycloak:latest as builder

ENV KC_HEALTH_ENABLED=true
ENV KC_METRICS_ENABLED=true
ENV KC_FEATURES=token-exchange

RUN curl -sL https://github.com/aerogear/keycloak-metrics-spi/releases/download/2.5.3/keycloak-metrics-spi-2.5.3.jar -o /opt/keycloak/providers/keycloak-metrics-spi-2.5.3.jar
RUN /opt/keycloak/bin/kc.sh \
  build \
  --db=mssql \
  --transaction-xa-enabled=false

FROM quay.io/keycloak/keycloak:latest
COPY --from=builder /opt/keycloak/ /opt/keycloak/
WORKDIR /opt/keycloak

RUN keytool -genkeypair -storepass password -storetype PKCS12 -keyalg RSA -keysize 2048 -dname "CN=server" -alias server -ext "SAN:c=DNS:localhost,IP:127.0.0.1" -keystore conf/server.keystore

ENV KC_DB=mssql
ENV KC_DB_URL=jdbc:sqlserver://[SERVER]:1433;databaseName=keycloak
ENV KC_DB_USERNAME=[USER]
ENV KC_DB_PASSWORD=[PASS]
ENV KC_HOSTNAME=localhost

EXPOSE 8443
EXPOSE 8080

ENTRYPOINT ["/opt/keycloak/bin/kc.sh", "start", "--optimized"]

I run locally normally, the problem only occurs in Azure

The container Log
2022-09-05T20:24:30.857Z INFO - Pulling image: marcem/keycloak:19.0.1 2022-09-05T20:24:32.468Z INFO - 19.0.1 Pulling from marcem/keycloak 2022-09-05T20:24:32.469Z INFO - Digest: sha256:459aea41a32e2c86c8d0f3d81fd6d214d5563c2e72f4a6a47f66642bb544a32c 2022-09-05T20:24:32.470Z INFO - Status: Image is up to date for marcem/keycloak:19.0.1 2022-09-05T20:24:32.472Z INFO - Pull Image successful, Time taken: 0 Minutes and 1 Seconds 2022-09-05T20:24:32.484Z INFO - Starting container for site 2022-09-05T20:24:32.486Z INFO - docker run -d --expose=8080 --name idteste19_0_a7e9bc1b -e WEBSITES_ENABLE_APP_SERVICE_STORAGE=false -e WEBSITE_SITE_NAME=idteste19 -e WEBSITE_AUTH_ENABLED=False -e PORT=8080 -e WEBSITE_ROLE_INSTANCE_ID=0 -e WEBSITE_HOSTNAME=idteste19.azurewebsites.net -e WEBSITE_INSTANCE_ID=d666afc5e23f437c473fe3731926e159eed3db588814c4ad67c48018d825c3c4 -e WEBSITE_USE_DIAGNOSTIC_SERVER=False marcem/keycloak:19.0.1 2022-09-05T20:24:32.487Z INFO - Logging is not enabled for this container. Please use https://aka.ms/linux-diagnostics to enable logging to see container logs here. 2022-09-05T20:24:34.032Z INFO - Initiating warmup request to container idteste19_0_a7e9bc1b for site idteste19 2022-09-05T20:24:49.214Z INFO - Waiting for response to warmup request for container idteste19_0_a7e9bc1b. Elapsed time = 15.1819077 sec 2022-09-05T20:25:04.985Z INFO - Waiting for response to warmup request for container idteste19_0_a7e9bc1b. Elapsed time = 30.9526637 sec 2022-09-05T20:25:20.364Z INFO - Waiting for response to warmup request for container idteste19_0_a7e9bc1b. Elapsed time = 46.3325265 sec 2022-09-05T20:25:35.500Z INFO - Waiting for response to warmup request for container idteste19_0_a7e9bc1b. Elapsed time = 61.4683108 sec 2022-09-05T20:25:50.890Z INFO - Waiting for response to warmup request for container idteste19_0_a7e9bc1b. Elapsed time = 76.8578355 sec 2022-09-05T20:26:08.903Z INFO - Waiting for response to warmup request for container idteste19_0_a7e9bc1b. Elapsed time = 94.8706851 sec 2022-09-05T20:26:24.017Z INFO - Waiting for response to warmup request for container idteste19_0_a7e9bc1b. Elapsed time = 109.9850142 sec 2022-09-05T20:26:39.971Z INFO - Waiting for response to warmup request for container idteste19_0_a7e9bc1b. Elapsed time = 125.9395605 sec 2022-09-05T20:26:55.079Z INFO - Waiting for response to warmup request for container idteste19_0_a7e9bc1b. Elapsed time = 141.0473632 sec 2022-09-05T20:27:10.475Z INFO - Waiting for response to warmup request for container idteste19_0_a7e9bc1b. Elapsed time = 156.4433032 sec 2022-09-05T20:27:25.579Z INFO - Waiting for response to warmup request for container idteste19_0_a7e9bc1b. Elapsed time = 171.5472323 sec 2022-09-05T20:27:41.896Z INFO - Waiting for response to warmup request for container idteste19_0_a7e9bc1b. Elapsed time = 187.864057 sec 2022-09-05T20:27:57.000Z INFO - Waiting for response to warmup request for container idteste19_0_a7e9bc1b. Elapsed time = 202.9680835 sec 2022-09-05T20:28:12.101Z INFO - Waiting for response to warmup request for container idteste19_0_a7e9bc1b. Elapsed time = 218.0692881 sec 2022-09-05T20:28:24.260Z ERROR - Container idteste19_0_a7e9bc1b for site idteste19 did not start within expected time limit. Elapsed time = 230.2278576 sec 2022-09-05T20:28:24.394Z ERROR - Container idteste19_0_a7e9bc1b didn't respond to HTTP pings on port: 8080, failing site start. See container logs for debugging. 2022-09-05T20:28:24.402Z INFO - Stopping site idteste19 because it failed during startup.

The keycloak log
2022-09-05T20:07:23.888923078Z 2022-09-05 20:07:19,285 INFO [org.keycloak.common.Profile] (main) Preview feature enabled: token_exchange 2022-09-05T20:07:23.890796482Z 2022-09-05 20:07:19,301 INFO [org.keycloak.quarkus.runtime.hostname.DefaultHostnameProvider] (main) Hostname settings: FrontEnd: localhost, Strict HTTPS: true, Path: <request>, Strict BackChannel: false, Admin: <request>, Port: -1, Proxied: false 2022-09-05T20:07:23.959737519Z 2022-09-05 20:07:22,363 INFO [org.keycloak.common.crypto.CryptoIntegration] (main) Detected crypto provider: org.keycloak.crypto.def.DefaultCryptoProvider 2022-09-05T20:07:26.408660323Z 2022-09-05 20:07:26,403 WARN [org.infinispan.CONFIG] (keycloak-cache-init) ISPN000569: Unable to persist Infinispan internal caches as no global state enabled 2022-09-05T20:07:26.518105251Z 2022-09-05 20:07:26,517 WARN [org.infinispan.PERSISTENCE] (keycloak-cache-init) ISPN000554: jboss-marshalling is deprecated and planned for removal 2022-09-05T20:07:26.579435179Z 2022-09-05 20:07:26,579 INFO [org.infinispan.CONTAINER] (keycloak-cache-init) ISPN000556: Starting user marshaller 'org.infinispan.jboss.marshalling.core.JBossUserMarshaller' 2022-09-05T20:07:27.632791871Z 2022-09-05 20:07:27,632 INFO [org.infinispan.CONTAINER] (keycloak-cache-init) ISPN000128: Infinispan version: Infinispan 'Triskaidekaphobia' 13.0.9.Final 2022-09-05T20:07:28.104286050Z 2022-09-05 20:07:28,103 INFO [org.infinispan.CLUSTER] (keycloak-cache-init) ISPN000078: Starting JGroups channel ISPN2022-09-05T20:07:28.106827255Z 2022-09-05 20:07:28,106 INFO [org.infinispan.CLUSTER] (keycloak-cache-init) ISPN000088: Unable to use any JGroups configuration mechanisms provided in properties {}. Using default JGroups configuration! 2022-09-05T20:07:28.345591650Z 2022-09-05 20:07:28,345 WARN [org.jgroups.protocols.UDP] (keycloak-cache-init) JGRP000015: the send buffer of socket MulticastSocket was set to 1.00MB, but the OS only allocated 212.99KB 2022-09-05T20:07:28.352680864Z 2022-09-05 20:07:28,352 WARN [org.jgroups.protocols.UDP] (keycloak-cache-init) JGRP000015: the receive buffer of socket MulticastSocket was set to 20.00MB, but the OS only allocated 212.99KB 2022-09-05T20:07:28.354005467Z 2022-09-05 20:07:28,353 WARN [org.jgroups.protocols.UDP] (keycloak-cache-init) JGRP000015: the send buffer of socket MulticastSocket was set to 1.00MB, but the OS only allocated 212.99KB 2022-09-05T20:07:28.355371370Z 2022-09-05 20:07:28,355 WARN [org.jgroups.protocols.UDP] (keycloak-cache-init) JGRP000015: the receive buffer of socket MulticastSocket was set to 25.00MB, but the OS only allocated 212.99KB 2022-09-05T20:07:30.382923553Z 2022-09-05 20:07:30,382 INFO [org.jgroups.protocols.pbcast.GMS] (keycloak-cache-init) aadc9fafa85e-42358: no members discovered after 2003 ms: creating cluster as coordinator 2022-09-05T20:07:30.401341791Z 2022-09-05 20:07:30,400 INFO [org.infinispan.CLUSTER] (keycloak-cache-init) ISPN000094: Received new cluster view for channel ISPN: [aadc9fafa85e-42358|0] (1) [aadc9fafa85e-42358] 2022-09-05T20:07:30.415002619Z 2022-09-05 20:07:30,414 INFO [org.infinispan.CLUSTER] (keycloak-cache-init) ISPN000079: ChannelISPNlocal address isaadc9fafa85e-42358, physical addresses are [169.254.129.2:40383] 2022-09-05T20:07:31.649353749Z 2022-09-05 20:07:31,648 INFO [org.keycloak.connections.infinispan.DefaultInfinispanConnectionProviderFactory] (main) Node name: aadc9fafa85e-42358, Site name: null 2022-09-05T20:07:34.196024890Z 2022-09-05 20:07:34,195 INFO [io.quarkus] (main) Keycloak 19.0.1 on JVM (powered by Quarkus 2.7.6.Final) started in 17.744s. Listening on: https://0.0.0.0:8443 2022-09-05T20:07:34.196959092Z 2022-09-05 20:07:34,196 INFO [io.quarkus] (main) Profile prod activated. 2022-09-05T20:07:34.198698996Z 2022-09-05 20:07:34,198 INFO [io.quarkus] (main) Installed features: [agroal, cdi, hibernate-orm, jdbc-h2, jdbc-mariadb, jdbc-mssql, jdbc-mysql, jdbc-oracle, jdbc-postgresql, keycloak, logging-gelf, narayana-jta, reactive-routes, resteasy, resteasy-jackson, smallrye-context-propagation, smallrye-health, smallrye-metrics, vault, vertx]

I tried change the KC_HOSTNAME (from localhost to xxx.azurewebsites.net), KC_HOSTNAME_PORT (to 443, 8443), PROXY_ADDRESS_FORWARDING (to false and true) and WEBSITES_PORT (to 80, 8080 and 8443). But unsuccessfully.

Any ideia?

Thanks a lot

ioemat · 2022-09-07T06:04:00Z

ioemat
Sep 7, 2022

When I read it right Azure Web App is checking port 8080 (... didn't respond to HTTP pings on port: 8080) while keycloak is starting on port 8443 ( Listening on: https://0.0.0.0:8443).

So I think you could either change the Web App configuration to check for port 8443, or set the environment variable KC_HTTP_ENABLED=true to have http enabled. (If you choose the latter you should take care not to expose the http port to the outside world)

1 reply

marcelogmonteiro Sep 7, 2022
Author

Thanks ioemat.

When you said to change de Web App configuration to check for port 8443, where, exactly I can change that?

If I change the HTTP_ENABLED, it works. But, like you said, my http port will exposed to the world

Navigation Menu

Repository navigation

Run Keycloak 19 with SQLServer in Azure WebApp #14204

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Replies: 1 comment 1 reply

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

Run Keycloak 19 with SQLServer in Azure WebApp #14204

Uh oh!

Uh oh!

marcelogmonteiro Sep 5, 2022

Replies: 1 comment · 1 reply

Uh oh!

ioemat Sep 7, 2022

Uh oh!

marcelogmonteiro Sep 7, 2022 Author

marcelogmonteiro
Sep 5, 2022

Replies: 1 comment 1 reply

ioemat
Sep 7, 2022

marcelogmonteiro Sep 7, 2022
Author