keycloak 20 running on k8s with reverse proxy #16971

v-kamerdinerov · 2023-02-09T12:10:38Z

v-kamerdinerov
Feb 9, 2023

Hello! I started discusion in #14683 but my problem not related to that tread. So i strarted a new one. @hmlnarik fyi

When i trying to deploy keycloak in a 3 replica configuration, mysql database and haproxy (as a reverse proxy with TLS termination on its side) I ran into a problem similar to the #14683.

For now, admin console looks like:

On base path url i got 404 error on some resources - https://keycloak-url/auth/

As i understand, keycloak by default generate a random seds number when starting the server which is secure but will lead to problems when a loadbalancer without sticky sessions.

If I reduce the number of replicas to 1, everything works fine.

As far as I understand, on the haproxy side I need to activate sticky session to bypass this problem, am I right?
example:

backend keycloak
  mode http
  option httplog
  option forwardfor header X-Real-IP
  option http-server-close
  capture request header x-req-id len 16
  capture request header Host len 32
  capture request header Referer len 32
  capture request header X-MCS-Request-Id len 64
  timeout client 2m
  timeout server 2m
  timeout http-request 10s
  cookie AUTH_SESSION_ID maxidle 30m maxlife 12h insert nocache indirect secure dynamic

Maybe you already have best practices for haproxy?

Or are there other ways around this problem?

Thank you in advance.

Navigation Menu

Repository navigation

keycloak 20 running on k8s with reverse proxy #16971

Uh oh!

{{title}}

Uh oh!

Replies: 0 comments

Select a reply

Uh oh!

keycloak 20 running on k8s with reverse proxy #16971

Uh oh!

v-kamerdinerov Feb 9, 2023

Replies: 0 comments

v-kamerdinerov
Feb 9, 2023