-
Notifications
You must be signed in to change notification settings - Fork 7.9k
Closed
Labels
area/operatorKeycloak.X OperatorKeycloak.X Operatorkind/bugCategorizes a PR related to a bugCategorizes a PR related to a bugpriority/importantMust be worked on very soonMust be worked on very soonrelease/25.0.3release/26.0.0team/cloud-native
Description
Before reporting an issue
- I have read and understood the above terms for submitting issues, and I understand that my issue may be closed without action if I do not follow them.
Area
operator
Describe the bug
The operator adds by default :
| new ValueOrSecret("proxy", "passthrough") |
This feature is deprecated and breaks my deployment even though I am using hostname:v2 which in the docs:
https://www.keycloak.org/server/hostname#_using_edge_tls_termination
doesn't specify that I need to use neither proxy nor proxy-headers. (as the hostname is strict).
This breaks the config and I am unable to use keycloak. The only fix was adding:
additionalOptions:
- name: proxy
value: edge
Version
25.0.1
Regression
- The issue is a regression
Expected behavior
Operator not to break config and use deprecated feature.
Actual behavior
Operator forces me to use KX_PROXY=edge which deprecated.
How to Reproduce?
- install the oprator
- create a keycloak CRD
- view the logs:
The following used options or option values are DEPRECATED and will be removed or their behaviour changed in a future release:
- proxy: Use proxy-headers. - and check that unless you override edge with passthourgh you can not use TLS termination with hostname:v2
Anything else?
No response
Metadata
Metadata
Assignees
Labels
area/operatorKeycloak.X OperatorKeycloak.X Operatorkind/bugCategorizes a PR related to a bugCategorizes a PR related to a bugpriority/importantMust be worked on very soonMust be worked on very soonrelease/25.0.3release/26.0.0team/cloud-native