Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Keycloak operator adds proxy by default which is depreacted #30945

@yelhouti

Description

@yelhouti

Before reporting an issue

  • I have read and understood the above terms for submitting issues, and I understand that my issue may be closed without action if I do not follow them.

Area

operator

Describe the bug

The operator adds by default :

new ValueOrSecret("proxy", "passthrough")

This feature is deprecated and breaks my deployment even though I am using hostname:v2 which in the docs:
https://www.keycloak.org/server/hostname#_using_edge_tls_termination
doesn't specify that I need to use neither proxy nor proxy-headers. (as the hostname is strict).
This breaks the config and I am unable to use keycloak. The only fix was adding:

 additionalOptions:
 - name: proxy
   value: edge

Version

25.0.1

Regression

  • The issue is a regression

Expected behavior

Operator not to break config and use deprecated feature.

Actual behavior

Operator forces me to use KX_PROXY=edge which deprecated.

How to Reproduce?

  1. install the oprator
  2. create a keycloak CRD
  3. view the logs:

    The following used options or option values are DEPRECATED and will be removed or their behaviour changed in a future release:
    - proxy: Use proxy-headers.

  4. and check that unless you override edge with passthourgh you can not use TLS termination with hostname:v2

Anything else?

No response

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions