404 errors when going via Nginx Ingress #10542

devopstom-user · 2022-03-02T17:09:26Z

devopstom-user
Mar 2, 2022

Hi,

deployed keycloak v17.0.0 to my minikube and it works fine when I use port-forward directly to the SVC IP, like this:
kubectl port-forward svc/keycloak-svc 8080:8080 &
However going via Nginx Ingress results in a number of 404 errors for some of the page resources(seen in browser dev tools net panel), but some get 200 OK. This results page doesn't load correctly and looks completely broken. Probably missing something somewhere in the cfg, would appreciate any hints on this!

I start the container with the following options:

      - args:
        - start-dev
        - --hostname=keycloak.10.96.38.235.nip.io
        - --http-enabled=true
        - --http-relative-path="/auth"
        - --proxy=edge

I tried various options for proxy from the below link, but I always see same problem with many 404
https://www.keycloak.org/server/reverseproxy

The Ingress resource looks like this:

kind: Ingress
metadata:
  annotations:
    ingress.kubernetes.io/proxy-body-size: 128M
    kubernetes.io/ingress.class: nginx
  name: test-keycloak-ingress
  namespace: test-keycloak
spec:
  rules:
  - host: keycloak.10.96.38.235.nip.io
    http:
      paths:
      - backend:
          service:
            name: keycloak-svc
            port:
              number: 8080
        path: /
        pathType: Prefix

Many thanks!

devopstom-user · 2022-03-03T11:16:01Z

devopstom-user
Mar 3, 2022
Author

surprisingly it starts to work fine, when I change replica count from 2 to 1 for the sts:
kubectl -n test-keycloak scale statefulset test-keycloak --replicas=1
so it seem this has to do with session affinity but nothing is mentioned in the guide wrt using reverse proxy.
I tried with these annotations but it did not help:

    nginx.ingress.kubernetes.io/affinity: cookie
    nginx.ingress.kubernetes.io/session-cookie-name: AUTH_SESSION_ID_LEGACY

any suggestions how this should be setup for clustered ha like setup with multiple pods?

1 reply

fabiogoma Sep 8, 2022

Have you tried this:

JAVA_OPTS_APPEND: "-Djgroups.dns.query=keycloak.default.svc.cluster.local"

https://www.keycloak.org/server/caching#_available_transport_stacks

Navigation Menu

Repository navigation

404 errors when going via Nginx Ingress #10542

Uh oh!

{{title}}

Uh oh!

Replies: 1 comment 1 reply

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

404 errors when going via Nginx Ingress #10542

Uh oh!

devopstom-user Mar 2, 2022

Replies: 1 comment · 1 reply

Uh oh!

Uh oh!

devopstom-user Mar 3, 2022 Author

Uh oh!

fabiogoma Sep 8, 2022

devopstom-user
Mar 2, 2022

Replies: 1 comment 1 reply

devopstom-user
Mar 3, 2022
Author