search

aboullaite / kibana-keycloak

Secure kibana dashboards using keycloak
40 stars 26 forks source link

Docker container not showing Kibana #2

Open gdd1984 opened 6 years ago

gdd1984 commented 6 years ago

Hi, I tried starting the compose file but I get a error that state page not found after a redirect that sends me to the following URL "http://keycloak:8080/auth/realms/kibana/protocol/openid-connect/auth?response_type=code&client_id=kibana&redirect_uri=http%3A%2F%2Fkeycloak-proxy%3A8180%2F*&state=4bff939d-f1fd-431e-bacc-fdf7fbebdc8f&login=true&scope=openid"

The error states

WE'RE SORRY ...
Page not found

docker-compose ps show that all containers are up

docker-compose ps
     Name                   Command               State                Ports              
------------------------------------------------------------------------------------------
elasticsearch    /usr/local/bin/docker-entr ...   Up      9200/tcp, 9300/tcp              
keycloak         /opt/jboss/docker-entrypoi ...   Up      0.0.0.0:8080->8080/tcp          
keycloak-proxy   /opt/jboss/docker-entrypoi ...   Up      8080/tcp, 0.0.0.0:8180->8180/tcp
kibana           /bin/bash /usr/local/bin/k ...   Up      5601/tcp                        
postgres         docker-entrypoint.sh postgres    Up      5432/tcp

The docker logs are as follows

docker-compose up
Creating volume "downloads_postgres_data" with local driver
Creating postgres      ... done
Creating elasticsearch  ... done
Creating keycloak      ... done
Creating keycloak-proxy ... done
Creating kibana         ... done
Attaching to postgres, keycloak, elasticsearch, keycloak-proxy, kibana
postgres          | The files belonging to this database system will be owned by user "postgres".
postgres          | This user must also own the server process.
postgres          | 
postgres          | The database cluster will be initialized with locale "en_US.utf8".
postgres          | The default database encoding has accordingly been set to "UTF8".
postgres          | The default text search configuration will be set to "english".
postgres          | 
postgres          | Data page checksums are disabled.
postgres          | 
postgres          | fixing permissions on existing directory /var/lib/postgresql/data ... ok
postgres          | creating subdirectories ... ok
keycloak-proxy    | Home directory: /opt/jboss/keycloak-proxy
postgres          | selecting default max_connections ... 100
postgres          | selecting default shared_buffers ... 128MB
postgres          | selecting dynamic shared memory implementation ... posix
postgres          | creating configuration files ... ok
postgres          | running bootstrap script ... ok
postgres          | performing post-bootstrap initialization ... ok
postgres          | syncing data to disk ... ok
postgres          | 
postgres          | Success. You can now start the database server using:
postgres          | 
postgres          |     pg_ctl -D /var/lib/postgresql/data -l logfile start
postgres          | 
postgres          | 
postgres          | WARNING: enabling "trust" authentication for local connections
postgres          | You can change this by editing pg_hba.conf or using the option -A, or
postgres          | --auth-local and --auth-host, the next time you run initdb.
postgres          | waiting for server to start....2018-07-25 06:25:22.935 UTC [39] LOG:  listening on Unix socket "/var/run/postgresql/.s.PGSQL.5432"
postgres          | 2018-07-25 06:25:22.962 UTC [40] LOG:  database system was shut down at 2018-07-25 06:25:22 UTC
postgres          | 2018-07-25 06:25:22.972 UTC [39] LOG:  database system is ready to accept connections
postgres          |  done
postgres          | server started
postgres          | CREATE DATABASE
postgres          | 
postgres          | CREATE ROLE
postgres          | 
postgres          | 
postgres          | /usr/local/bin/docker-entrypoint.sh: ignoring /docker-entrypoint-initdb.d/*
postgres          | 
postgres          | waiting for server to shut down....2018-07-25 06:25:23.791 UTC [39] LOG:  received fast shutdown request
postgres          | 2018-07-25 06:25:23.794 UTC [39] LOG:  aborting any active transactions
postgres          | 2018-07-25 06:25:23.803 UTC [39] LOG:  worker process: logical replication launcher (PID 46) exited with exit code 1
postgres          | 2018-07-25 06:25:23.803 UTC [41] LOG:  shutting down
postgres          | 2018-07-25 06:25:23.830 UTC [39] LOG:  database system is shut down
postgres          |  done
postgres          | server stopped
postgres          | 
postgres          | PostgreSQL init process complete; ready for start up.
postgres          | 
postgres          | 2018-07-25 06:25:23.919 UTC [1] LOG:  listening on IPv4 address "0.0.0.0", port 5432
postgres          | 2018-07-25 06:25:23.920 UTC [1] LOG:  listening on IPv6 address "::", port 5432
postgres          | 2018-07-25 06:25:23.929 UTC [1] LOG:  listening on Unix socket "/var/run/postgresql/.s.PGSQL.5432"
postgres          | 2018-07-25 06:25:23.960 UTC [66] LOG:  database system was shut down at 2018-07-25 06:25:23 UTC
postgres          | 2018-07-25 06:25:24.001 UTC [1] LOG:  database system is ready to accept connections
keycloak-proxy    | Jul 25, 2018 6:25:23 AM org.keycloak.proxy.ProxyServerBuilder initConnections
keycloak-proxy    | WARN: Generating temporary SSL cert
keycloak          | Added 'admin' to '/opt/jboss/keycloak/standalone/configuration/keycloak-add-user.json', restart server to load user
keycloak          | [KEYCLOAK DOCKER IMAGE] Using the external postgres database
keycloak-proxy    | Jul 25, 2018 6:25:28 AM org.xnio.Xnio <clinit>
keycloak-proxy    | INFO: XNIO version 3.3.4.Final
keycloak-proxy    | Jul 25, 2018 6:25:29 AM org.xnio.nio.NioXnio <clinit>
keycloak-proxy    | INFO: XNIO NIO Implementation Version 3.3.4.Final
keycloak          | 06:25:32,586 INFO  [org.jboss.modules] (main) JBoss Modules version 1.6.1.Final
keycloak          | 06:25:33,206 INFO  [org.jboss.msc] (main) JBoss MSC version 1.2.7.SP1
elasticsearch     | [2018-07-25T06:25:34,990][INFO ][o.e.n.Node               ] [] initializing ...
kibana            | {"type":"log","@timestamp":"2018-07-25T06:25:35Z","tags":["status","plugin:kibana@6.2.2","info"],"pid":1,"state":"green","message":"Status changed from uninitialized to green - Ready","prevState":"uninitialized","prevMsg":"uninitialized"}
kibana            | {"type":"log","@timestamp":"2018-07-25T06:25:35Z","tags":["status","plugin:elasticsearch@6.2.2","info"],"pid":1,"state":"yellow","message":"Status changed from uninitialized to yellow - Waiting for Elasticsearch","prevState":"uninitialized","prevMsg":"uninitialized"}
kibana            | {"type":"log","@timestamp":"2018-07-25T06:25:35Z","tags":["status","plugin:console@6.2.2","info"],"pid":1,"state":"green","message":"Status changed from uninitialized to green - Ready","prevState":"uninitialized","prevMsg":"uninitialized"}
keycloak          | 06:25:35,212 INFO  [org.jboss.as] (MSC service thread 1-1) WFLYSRV0049: Keycloak 3.4.3.Final (WildFly Core 3.0.8.Final) starting
kibana            | {"type":"log","@timestamp":"2018-07-25T06:25:35Z","tags":["status","plugin:metrics@6.2.2","info"],"pid":1,"state":"green","message":"Status changed from uninitialized to green - Ready","prevState":"uninitialized","prevMsg":"uninitialized"}
elasticsearch     | [2018-07-25T06:25:35,349][INFO ][o.e.e.NodeEnvironment    ] [f4e-HY1] using [1] data paths, mounts [[/ (overlay)]], net usable_space [51.9gb], net total_space [58.4gb], types [overlay]
elasticsearch     | [2018-07-25T06:25:35,351][INFO ][o.e.e.NodeEnvironment    ] [f4e-HY1] heap size [1007.3mb], compressed ordinary object pointers [true]
elasticsearch     | [2018-07-25T06:25:35,354][INFO ][o.e.n.Node               ] node name [f4e-HY1] derived from node ID [f4e-HY1hSsqHF42ClB3gjA]; set [node.name] to override
elasticsearch     | [2018-07-25T06:25:35,356][INFO ][o.e.n.Node               ] version[6.2.2], pid[1], build[10b1edd/2018-02-16T19:01:30.685723Z], OS[Linux/4.9.87-linuxkit-aufs/amd64], JVM[Oracle Corporation/OpenJDK 64-Bit Server VM/1.8.0_161/25.161-b14]
elasticsearch     | [2018-07-25T06:25:35,358][INFO ][o.e.n.Node               ] JVM arguments [-Xms1g, -Xmx1g, -XX:+UseConcMarkSweepGC, -XX:CMSInitiatingOccupancyFraction=75, -XX:+UseCMSInitiatingOccupancyOnly, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Djava.io.tmpdir=/tmp/elasticsearch.AldUeTz9, -XX:+HeapDumpOnOutOfMemoryError, -XX:+PrintGCDetails, -XX:+PrintGCDateStamps, -XX:+PrintTenuringDistribution, -XX:+PrintGCApplicationStoppedTime, -Xloggc:logs/gc.log, -XX:+UseGCLogFileRotation, -XX:NumberOfGCLogFiles=32, -XX:GCLogFileSize=64m, -Des.cgroups.hierarchy.override=/, -Des.path.home=/usr/share/elasticsearch, -Des.path.conf=/usr/share/elasticsearch/config]
keycloak          | 06:25:35,535 INFO  [org.jboss.vfs] (MSC service thread 1-4) VFS000002: Failed to clean existing content for temp file provider of type temp. Enable DEBUG level log to find what caused this
kibana            | {"type":"log","@timestamp":"2018-07-25T06:25:35Z","tags":["status","plugin:timelion@6.2.2","info"],"pid":1,"state":"green","message":"Status changed from uninitialized to green - Ready","prevState":"uninitialized","prevMsg":"uninitialized"}
kibana            | {"type":"log","@timestamp":"2018-07-25T06:25:35Z","tags":["listening","info"],"pid":1,"message":"Server running at http://0:5601"}
kibana            | {"type":"log","@timestamp":"2018-07-25T06:25:35Z","tags":["error","elasticsearch","admin"],"pid":1,"message":"Request error, retrying\nHEAD http://elasticsearch:9200/ => connect ECONNREFUSED 172.18.0.2:9200"}
kibana            | {"type":"log","@timestamp":"2018-07-25T06:25:35Z","tags":["warning","elasticsearch","admin"],"pid":1,"message":"Unable to revive connection: http://elasticsearch:9200/"}
kibana            | {"type":"log","@timestamp":"2018-07-25T06:25:35Z","tags":["warning","elasticsearch","admin"],"pid":1,"message":"No living connections"}
kibana            | {"type":"log","@timestamp":"2018-07-25T06:25:35Z","tags":["status","plugin:elasticsearch@6.2.2","error"],"pid":1,"state":"red","message":"Status changed from yellow to red - Unable to connect to Elasticsearch at http://elasticsearch:9200.","prevState":"yellow","prevMsg":"Waiting for Elasticsearch"}
elasticsearch     | [2018-07-25T06:25:37,245][INFO ][o.e.p.PluginsService     ] [f4e-HY1] loaded module [aggs-matrix-stats]
elasticsearch     | [2018-07-25T06:25:37,245][INFO ][o.e.p.PluginsService     ] [f4e-HY1] loaded module [analysis-common]
elasticsearch     | [2018-07-25T06:25:37,246][INFO ][o.e.p.PluginsService     ] [f4e-HY1] loaded module [ingest-common]
elasticsearch     | [2018-07-25T06:25:37,250][INFO ][o.e.p.PluginsService     ] [f4e-HY1] loaded module [lang-expression]
elasticsearch     | [2018-07-25T06:25:37,251][INFO ][o.e.p.PluginsService     ] [f4e-HY1] loaded module [lang-mustache]
elasticsearch     | [2018-07-25T06:25:37,251][INFO ][o.e.p.PluginsService     ] [f4e-HY1] loaded module [lang-painless]
elasticsearch     | [2018-07-25T06:25:37,252][INFO ][o.e.p.PluginsService     ] [f4e-HY1] loaded module [mapper-extras]
elasticsearch     | [2018-07-25T06:25:37,252][INFO ][o.e.p.PluginsService     ] [f4e-HY1] loaded module [parent-join]
elasticsearch     | [2018-07-25T06:25:37,253][INFO ][o.e.p.PluginsService     ] [f4e-HY1] loaded module [percolator]
elasticsearch     | [2018-07-25T06:25:37,253][INFO ][o.e.p.PluginsService     ] [f4e-HY1] loaded module [rank-eval]
elasticsearch     | [2018-07-25T06:25:37,253][INFO ][o.e.p.PluginsService     ] [f4e-HY1] loaded module [reindex]
elasticsearch     | [2018-07-25T06:25:37,254][INFO ][o.e.p.PluginsService     ] [f4e-HY1] loaded module [repository-url]
elasticsearch     | [2018-07-25T06:25:37,254][INFO ][o.e.p.PluginsService     ] [f4e-HY1] loaded module [transport-netty4]
elasticsearch     | [2018-07-25T06:25:37,255][INFO ][o.e.p.PluginsService     ] [f4e-HY1] loaded module [tribe]
elasticsearch     | [2018-07-25T06:25:37,256][INFO ][o.e.p.PluginsService     ] [f4e-HY1] loaded plugin [ingest-geoip]
elasticsearch     | [2018-07-25T06:25:37,260][INFO ][o.e.p.PluginsService     ] [f4e-HY1] loaded plugin [ingest-user-agent]
kibana            | {"type":"log","@timestamp":"2018-07-25T06:25:38Z","tags":["warning","elasticsearch","admin"],"pid":1,"message":"Unable to revive connection: http://elasticsearch:9200/"}
kibana            | {"type":"log","@timestamp":"2018-07-25T06:25:38Z","tags":["warning","elasticsearch","admin"],"pid":1,"message":"No living connections"}
keycloak          | 06:25:40,260 INFO  [org.jboss.as.controller.management-deprecated] (Controller Boot Thread) WFLYCTL0028: Attribute 'security-realm' in the resource at address '/core-service=management/management-interface=http-interface' is deprecated, and may be removed in future version. See the attribute description in the output of the read-resource-description operation to learn more about the deprecation.
keycloak          | 06:25:40,410 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 1.1.6.Final
keycloak          | 06:25:40,461 INFO  [org.jboss.as.controller.management-deprecated] (Controller Boot Thread) WFLYCTL0028: Attribute 'security-realm' in the resource at address '/subsystem=undertow/server=default-server/https-listener=https' is deprecated, and may be removed in future version. See the attribute description in the output of the read-resource-description operation to learn more about the deprecation.
kibana            | {"type":"log","@timestamp":"2018-07-25T06:25:40Z","tags":["warning","elasticsearch","admin"],"pid":1,"message":"Unable to revive connection: http://elasticsearch:9200/"}
kibana            | {"type":"log","@timestamp":"2018-07-25T06:25:40Z","tags":["warning","elasticsearch","admin"],"pid":1,"message":"No living connections"}
keycloak          | 06:25:41,160 INFO  [org.jboss.as.patching] (MSC service thread 1-4) WFLYPAT0050: Keycloak cumulative patch ID is: base, one-off patches include: none
keycloak          | 06:25:41,285 WARN  [org.jboss.as.domain.management.security] (MSC service thread 1-1) WFLYDM0111: Keystore /opt/jboss/keycloak/standalone/configuration/application.keystore not found, it will be auto generated on first use with a self signed certificate for host localhost
keycloak          | 06:25:41,588 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
keycloak          | 06:25:41,591 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: Keycloak 3.4.3.Final (WildFly Core 3.0.8.Final) started in 8945ms - Started 64 of 78 services (25 services are lazy, passive or on-demand)
keycloak          | The batch executed successfully
keycloak          | 06:25:42,015 INFO  [org.jboss.as] (MSC service thread 1-3) WFLYSRV0050: Keycloak 3.4.3.Final (WildFly Core 3.0.8.Final) stopped in 22ms
kibana            | {"type":"log","@timestamp":"2018-07-25T06:25:43Z","tags":["warning","elasticsearch","admin"],"pid":1,"message":"Unable to revive connection: http://elasticsearch:9200/"}
kibana            | {"type":"log","@timestamp":"2018-07-25T06:25:43Z","tags":["warning","elasticsearch","admin"],"pid":1,"message":"No living connections"}
keycloak          | 06:25:44,469 INFO  [org.jboss.modules] (main) JBoss Modules version 1.6.1.Final
keycloak          | 06:25:44,708 INFO  [org.jboss.msc] (main) JBoss MSC version 1.2.7.SP1
elasticsearch     | [2018-07-25T06:25:45,234][INFO ][o.e.d.DiscoveryModule    ] [f4e-HY1] using discovery type [zen]
keycloak          | 06:25:45,294 INFO  [org.jboss.as] (MSC service thread 1-1) WFLYSRV0049: Keycloak 3.4.3.Final (WildFly Core 3.0.8.Final) starting
keycloak          | 06:25:45,802 INFO  [org.jboss.vfs] (MSC service thread 1-3) VFS000002: Failed to clean existing content for temp file provider of type temp. Enable DEBUG level log to find what caused this
kibana            | {"type":"log","@timestamp":"2018-07-25T06:25:45Z","tags":["warning","elasticsearch","admin"],"pid":1,"message":"Unable to revive connection: http://elasticsearch:9200/"}
kibana            | {"type":"log","@timestamp":"2018-07-25T06:25:45Z","tags":["warning","elasticsearch","admin"],"pid":1,"message":"No living connections"}
kibana            | {"type":"log","@timestamp":"2018-07-25T06:25:48Z","tags":["warning","elasticsearch","admin"],"pid":1,"message":"Unable to revive connection: http://elasticsearch:9200/"}
kibana            | {"type":"log","@timestamp":"2018-07-25T06:25:48Z","tags":["warning","elasticsearch","admin"],"pid":1,"message":"No living connections"}
elasticsearch     | [2018-07-25T06:25:48,955][INFO ][o.e.n.Node               ] initialized
elasticsearch     | [2018-07-25T06:25:48,961][INFO ][o.e.n.Node               ] [f4e-HY1] starting ...
elasticsearch     | [2018-07-25T06:25:50,803][INFO ][o.e.t.TransportService   ] [f4e-HY1] publish_address {127.0.0.1:9300}, bound_addresses {127.0.0.1:9300}
kibana            | {"type":"log","@timestamp":"2018-07-25T06:25:51Z","tags":["warning","elasticsearch","admin"],"pid":1,"message":"Unable to revive connection: http://elasticsearch:9200/"}
kibana            | {"type":"log","@timestamp":"2018-07-25T06:25:51Z","tags":["warning","elasticsearch","admin"],"pid":1,"message":"No living connections"}
elasticsearch     | [2018-07-25T06:25:51,972][INFO ][o.e.m.j.JvmGcMonitorService] [f4e-HY1] [gc][3] overhead, spent [283ms] collecting in the last [1s]
kibana            | {"type":"log","@timestamp":"2018-07-25T06:25:53Z","tags":["warning","elasticsearch","admin"],"pid":1,"message":"Unable to revive connection: http://elasticsearch:9200/"}
kibana            | {"type":"log","@timestamp":"2018-07-25T06:25:53Z","tags":["warning","elasticsearch","admin"],"pid":1,"message":"No living connections"}
elasticsearch     | [2018-07-25T06:25:54,346][INFO ][o.e.c.s.MasterService    ] [f4e-HY1] zen-disco-elected-as-master ([0] nodes joined), reason: new_master {f4e-HY1}{f4e-HY1hSsqHF42ClB3gjA}{ZYkEYgCnR8unHD1mfoCtrQ}{127.0.0.1}{127.0.0.1:9300}
elasticsearch     | [2018-07-25T06:25:54,391][INFO ][o.e.c.s.ClusterApplierService] [f4e-HY1] new_master {f4e-HY1}{f4e-HY1hSsqHF42ClB3gjA}{ZYkEYgCnR8unHD1mfoCtrQ}{127.0.0.1}{127.0.0.1:9300}, reason: apply cluster state (from master [master {f4e-HY1}{f4e-HY1hSsqHF42ClB3gjA}{ZYkEYgCnR8unHD1mfoCtrQ}{127.0.0.1}{127.0.0.1:9300} committed version [1] source [zen-disco-elected-as-master ([0] nodes joined)]])
keycloak          | 06:25:54,662 INFO  [org.jboss.as.controller.management-deprecated] (Controller Boot Thread) WFLYCTL0028: Attribute 'security-realm' in the resource at address '/core-service=management/management-interface=http-interface' is deprecated, and may be removed in future version. See the attribute description in the output of the read-resource-description operation to learn more about the deprecation.
elasticsearch     | [2018-07-25T06:25:54,765][INFO ][o.e.h.n.Netty4HttpServerTransport] [f4e-HY1] publish_address {172.18.0.2:9200}, bound_addresses {0.0.0.0:9200}
elasticsearch     | [2018-07-25T06:25:54,765][INFO ][o.e.n.Node               ] [f4e-HY1] started
elasticsearch     | [2018-07-25T06:25:54,816][INFO ][o.e.g.GatewayService     ] [f4e-HY1] recovered [0] indices into cluster_state
keycloak          | 06:25:55,023 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 1.1.6.Final
keycloak          | 06:25:55,133 INFO  [org.jboss.as.controller.management-deprecated] (Controller Boot Thread) WFLYCTL0028: Attribute 'security-realm' in the resource at address '/subsystem=undertow/server=default-server/https-listener=https' is deprecated, and may be removed in future version. See the attribute description in the output of the read-resource-description operation to learn more about the deprecation.
keycloak          | 06:25:56,232 INFO  [org.jboss.as.patching] (MSC service thread 1-4) WFLYPAT0050: Keycloak cumulative patch ID is: base, one-off patches include: none
keycloak          | 06:25:56,294 WARN  [org.jboss.as.domain.management.security] (MSC service thread 1-1) WFLYDM0111: Keystore /opt/jboss/keycloak/standalone/configuration/application.keystore not found, it will be auto generated on first use with a self signed certificate for host localhost
keycloak          | 06:25:56,802 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
keycloak          | 06:25:56,819 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: Keycloak 3.4.3.Final (WildFly Core 3.0.8.Final) started in 12334ms - Started 64 of 83 services (30 services are lazy, passive or on-demand)
kibana            | {"type":"log","@timestamp":"2018-07-25T06:25:57Z","tags":["status","plugin:elasticsearch@6.2.2","info"],"pid":1,"state":"green","message":"Status changed from red to green - Ready","prevState":"red","prevMsg":"Unable to connect to Elasticsearch at http://elasticsearch:9200."}
keycloak          | The batch executed successfully
keycloak          | 06:25:58,265 INFO  [org.jboss.as] (MSC service thread 1-4) WFLYSRV0050: Keycloak 3.4.3.Final (WildFly Core 3.0.8.Final) stopped in 144ms
keycloak          | =========================================================================
keycloak          | 
keycloak          |   JBoss Bootstrap Environment
keycloak          | 
keycloak          |   JBOSS_HOME: /opt/jboss/keycloak
keycloak          | 
keycloak          |   JAVA: /usr/lib/jvm/java/bin/java
keycloak          | 
keycloak          |   JAVA_OPTS:  -server -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true
keycloak          | 
keycloak          | =========================================================================
keycloak          | 
keycloak          | 06:26:00,360 INFO  [org.jboss.modules] (main) JBoss Modules version 1.6.1.Final
keycloak          | 06:26:01,655 INFO  [org.jboss.msc] (main) JBoss MSC version 1.2.7.SP1
keycloak          | 06:26:02,267 INFO  [org.jboss.as] (MSC service thread 1-1) WFLYSRV0049: Keycloak 3.4.3.Final (WildFly Core 3.0.8.Final) starting
keycloak          | 06:26:02,409 INFO  [org.jboss.vfs] (MSC service thread 1-3) VFS000002: Failed to clean existing content for temp file provider of type temp. Enable DEBUG level log to find what caused this
keycloak          | 06:26:06,153 INFO  [org.jboss.as.controller.management-deprecated] (Controller Boot Thread) WFLYCTL0028: Attribute 'security-realm' in the resource at address '/core-service=management/management-interface=http-interface' is deprecated, and may be removed in future version. See the attribute description in the output of the read-resource-description operation to learn more about the deprecation.
keycloak          | 06:26:06,241 INFO  [org.wildfly.security] (ServerService Thread Pool -- 3) ELY00001: WildFly Elytron version 1.1.6.Final
keycloak          | 06:26:06,412 INFO  [org.jboss.as.controller.management-deprecated] (ServerService Thread Pool -- 22) WFLYCTL0028: Attribute 'security-realm' in the resource at address '/subsystem=undertow/server=default-server/https-listener=https' is deprecated, and may be removed in future version. See the attribute description in the output of the read-resource-description operation to learn more about the deprecation.
keycloak          | 06:26:06,747 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
keycloak          | 06:26:06,946 INFO  [org.xnio] (MSC service thread 1-4) XNIO version 3.5.4.Final
keycloak          | 06:26:07,024 INFO  [org.xnio.nio] (MSC service thread 1-4) XNIO NIO Implementation Version 3.5.4.Final
keycloak          | 06:26:07,159 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 30) WFLYIO001: Worker 'default' has auto-configured to 4 core threads with 32 task threads based on your 2 available processors
keycloak          | 06:26:07,162 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 31) WFLYCLINF0001: Activating Infinispan subsystem.
keycloak          | 06:26:07,194 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 32) WFLYRS0016: RESTEasy version 3.0.24.Final
keycloak          | 06:26:07,329 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 37) WFLYNAM0001: Activating Naming Subsystem
keycloak          | 06:26:07,331 INFO  [org.jboss.as.security] (ServerService Thread Pool -- 42) WFLYSEC0002: Activating Security Subsystem
keycloak          | 06:26:07,374 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 43) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
keycloak          | 06:26:07,435 INFO  [org.jboss.as.security] (MSC service thread 1-2) WFLYSEC0001: Current PicketBox version=5.0.2.Final
keycloak          | 06:26:07,488 INFO  [org.jboss.as.connector] (MSC service thread 1-4) WFLYJCA0009: Starting JCA Subsystem (WildFly/IronJacamar 1.4.6.Final)
keycloak          | 06:26:07,504 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 26) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 1.4)
keycloak          | 06:26:07,645 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 26) WFLYJCA0005: Deploying non-JDBC-compliant driver class org.postgresql.Driver (version 42.1)
keycloak          | 06:26:07,806 INFO  [org.jboss.remoting] (MSC service thread 1-2) JBoss Remoting version 5.0.5.Final
keycloak          | 06:26:07,798 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0003: Undertow 1.4.18.Final starting
keycloak          | 06:26:08,349 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-2) WFLYJCA0018: Started Driver service with driver-name = postgresql
keycloak          | 06:26:08,369 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-2) WFLYJCA0018: Started Driver service with driver-name = h2
keycloak          | 06:26:08,451 INFO  [org.jboss.as.naming] (MSC service thread 1-3) WFLYNAM0003: Starting Naming Service
keycloak          | 06:26:08,473 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-4) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
keycloak          | 06:26:08,742 INFO  [org.jboss.as.ejb3] (MSC service thread 1-1) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 8 (per class), which is derived from the number of CPUs on this host.
keycloak          | 06:26:08,742 INFO  [org.jboss.as.ejb3] (MSC service thread 1-3) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 32 (per class), which is derived from thread worker pool sizing.
keycloak          | 06:26:08,920 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 44) WFLYUT0014: Creating file handler for path '/opt/jboss/keycloak/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
keycloak          | 06:26:09,172 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0012: Started server default-server.
keycloak          | 06:26:09,182 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0018: Host default-host starting
keycloak          | 06:26:09,563 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0006: Undertow HTTP listener default listening on 0.0.0.0:8080
keycloak          | 06:26:09,944 INFO  [org.jboss.as.ejb3] (MSC service thread 1-2) WFLYEJB0493: EJB subsystem suspension complete
keycloak          | 06:26:10,346 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-4) WFLYJCA0001: Bound data source [java:jboss/datasources/KeycloakDS]
keycloak          | 06:26:10,363 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-4) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
keycloak          | 06:26:10,394 INFO  [org.jboss.as.patching] (MSC service thread 1-2) WFLYPAT0050: Keycloak cumulative patch ID is: base, one-off patches include: none
keycloak          | 06:26:10,516 WARN  [org.jboss.as.domain.management.security] (MSC service thread 1-4) WFLYDM0111: Keystore /opt/jboss/keycloak/standalone/configuration/application.keystore not found, it will be auto generated on first use with a self signed certificate for host localhost
keycloak          | 06:26:10,607 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-3) WFLYDS0013: Started FileSystemDeploymentService for directory /opt/jboss/keycloak/standalone/deployments
keycloak          | 06:26:10,641 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-4) WFLYSRV0027: Starting deployment of "keycloak-server.war" (runtime-name: "keycloak-server.war")
keycloak          | 06:26:11,462 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0006: Undertow HTTPS listener https listening on 0.0.0.0:8443
keycloak          | 06:26:12,939 INFO  [org.infinispan.factories.GlobalComponentRegistry] (MSC service thread 1-4) ISPN000128: Infinispan version: Infinispan 'Chakra' 8.2.8.Final
keycloak          | 06:26:13,802 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 56) WFLYCLINF0002: Started offlineClientSessions cache from keycloak container
keycloak          | 06:26:13,807 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 46) WFLYCLINF0002: Started realms cache from keycloak container
keycloak          | 06:26:13,805 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 51) WFLYCLINF0002: Started sessions cache from keycloak container
keycloak          | 06:26:13,804 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 50) WFLYCLINF0002: Started clientSessions cache from keycloak container
keycloak          | 06:26:13,821 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 52) WFLYCLINF0002: Started loginFailures cache from keycloak container
keycloak          | 06:26:13,823 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 47) WFLYCLINF0002: Started offlineSessions cache from keycloak container
keycloak          | 06:26:13,825 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 49) WFLYCLINF0002: Started users cache from keycloak container
keycloak          | 06:26:13,828 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 57) WFLYCLINF0002: Started work cache from keycloak container
keycloak          | 06:26:13,828 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 54) WFLYCLINF0002: Started keys cache from keycloak container
keycloak          | 06:26:13,831 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 48) WFLYCLINF0002: Started authorization cache from keycloak container
keycloak          | 06:26:13,831 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 53) WFLYCLINF0002: Started actionTokens cache from keycloak container
keycloak          | 06:26:13,833 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0002: Started authenticationSessions cache from keycloak container
keycloak          | 06:26:13,871 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 58) WFLYCLINF0002: Started client-mappings cache from ejb container
keycloak          | 06:26:16,150 INFO  [org.keycloak.services] (ServerService Thread Pool -- 53) KC-SERVICES0001: Loading config from standalone.xml or domain.xml
keycloak          | 06:26:17,053 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 53) WFLYCLINF0002: Started realmRevisions cache from keycloak container
keycloak          | 06:26:17,068 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 53) WFLYCLINF0002: Started userRevisions cache from keycloak container
keycloak          | 06:26:17,098 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 53) WFLYCLINF0002: Started authorizationRevisions cache from keycloak container
keycloak          | 06:26:17,099 INFO  [org.keycloak.connections.infinispan.DefaultInfinispanConnectionProviderFactory] (ServerService Thread Pool -- 53) Node name: 15459c4a81d3, Site name: null
postgres          | 2018-07-25 06:26:17.976 UTC [73] ERROR:  relation "public.databasechangeloglock" does not exist at character 22
postgres          | 2018-07-25 06:26:17.976 UTC [73] STATEMENT:  select count(*) from public.databasechangeloglock
postgres          | 2018-07-25 06:26:20.047 UTC [74] ERROR:  relation "public.databasechangelog" does not exist at character 22
postgres          | 2018-07-25 06:26:20.047 UTC [74] STATEMENT:  select count(*) from public.databasechangelog
postgres          | 2018-07-25 06:26:20.791 UTC [74] ERROR:  relation "public.databasechangelog" does not exist at character 22
postgres          | 2018-07-25 06:26:20.791 UTC [74] STATEMENT:  select count(*) from public.databasechangelog
keycloak          | 06:26:20,866 INFO  [org.keycloak.connections.jpa.updater.liquibase.LiquibaseJpaUpdaterProvider] (ServerService Thread Pool -- 53) Initializing database schema. Using changelog META-INF/jpa-changelog-master.xml
keycloak          | 06:26:22,980 INFO  [org.hibernate.jpa.internal.util.LogHelper] (ServerService Thread Pool -- 53) HHH000204: Processing PersistenceUnitInfo [
keycloak          |     name: keycloak-default
keycloak          |     ...]
keycloak          | 06:26:23,119 INFO  [org.hibernate.Version] (ServerService Thread Pool -- 53) HHH000412: Hibernate Core {5.1.10.Final}
keycloak          | 06:26:23,125 INFO  [org.hibernate.cfg.Environment] (ServerService Thread Pool -- 53) HHH000206: hibernate.properties not found
keycloak          | 06:26:23,127 INFO  [org.hibernate.cfg.Environment] (ServerService Thread Pool -- 53) HHH000021: Bytecode provider name : javassist
keycloak          | 06:26:23,214 INFO  [org.hibernate.annotations.common.Version] (ServerService Thread Pool -- 53) HCANN000001: Hibernate Commons Annotations {5.0.1.Final}
keycloak          | 06:26:23,427 INFO  [org.hibernate.dialect.Dialect] (ServerService Thread Pool -- 53) HHH000400: Using dialect: org.hibernate.dialect.PostgreSQL81Dialect
keycloak          | 06:26:23,653 INFO  [org.hibernate.engine.jdbc.env.internal.LobCreatorBuilderImpl] (ServerService Thread Pool -- 53) HHH000424: Disabling contextual LOB creation as createClob() method threw error : java.lang.reflect.InvocationTargetException
keycloak          | 06:26:23,682 INFO  [org.hibernate.envers.boot.internal.EnversServiceImpl] (ServerService Thread Pool -- 53) Envers integration enabled? : true
keycloak          | 06:26:24,793 INFO  [org.hibernate.validator.internal.util.Version] (ServerService Thread Pool -- 53) HV000001: Hibernate Validator 5.3.5.Final
keycloak          | 06:26:25,789 INFO  [org.hibernate.hql.internal.QueryTranslatorFactoryInitiator] (ServerService Thread Pool -- 53) HHH000397: Using ASTQueryTranslatorFactory
keycloak          | 06:26:26,972 INFO  [org.keycloak.services] (ServerService Thread Pool -- 53) KC-SERVICES0050: Initializing master realm
keycloak          | 06:26:28,027 INFO  [org.keycloak.services] (ServerService Thread Pool -- 53) KC-SERVICES0006: Importing users from '/opt/jboss/keycloak/standalone/configuration/keycloak-add-user.json'
keycloak          | 06:26:28,612 INFO  [org.keycloak.services] (ServerService Thread Pool -- 53) KC-SERVICES0009: Added user 'admin' to realm 'master'
keycloak          | 06:26:28,678 INFO  [org.jboss.resteasy.resteasy_jaxrs.i18n] (ServerService Thread Pool -- 53) RESTEASY002225: Deploying javax.ws.rs.core.Application: class org.keycloak.services.resources.KeycloakApplication
keycloak          | 06:26:28,681 INFO  [org.jboss.resteasy.resteasy_jaxrs.i18n] (ServerService Thread Pool -- 53) RESTEASY002205: Adding provider class org.keycloak.services.error.KeycloakErrorHandler from Application class org.keycloak.services.resources.KeycloakApplication
keycloak          | 06:26:28,683 INFO  [org.jboss.resteasy.resteasy_jaxrs.i18n] (ServerService Thread Pool -- 53) RESTEASY002200: Adding class resource org.keycloak.services.resources.JsResource from Application class org.keycloak.services.resources.KeycloakApplication
keycloak          | 06:26:28,684 INFO  [org.jboss.resteasy.resteasy_jaxrs.i18n] (ServerService Thread Pool -- 53) RESTEASY002205: Adding provider class org.keycloak.services.filters.KeycloakTransactionCommitter from Application class org.keycloak.services.resources.KeycloakApplication
keycloak          | 06:26:28,684 INFO  [org.jboss.resteasy.resteasy_jaxrs.i18n] (ServerService Thread Pool -- 53) RESTEASY002200: Adding class resource org.keycloak.services.resources.ThemeResource from Application class org.keycloak.services.resources.KeycloakApplication
keycloak          | 06:26:28,685 INFO  [org.jboss.resteasy.resteasy_jaxrs.i18n] (ServerService Thread Pool -- 53) RESTEASY002210: Adding provider singleton org.keycloak.services.util.ObjectMapperResolver from Application class org.keycloak.services.resources.KeycloakApplication
keycloak          | 06:26:28,685 INFO  [org.jboss.resteasy.resteasy_jaxrs.i18n] (ServerService Thread Pool -- 53) RESTEASY002220: Adding singleton resource org.keycloak.services.resources.RealmsResource from Application class org.keycloak.services.resources.KeycloakApplication
keycloak          | 06:26:28,686 INFO  [org.jboss.resteasy.resteasy_jaxrs.i18n] (ServerService Thread Pool -- 53) RESTEASY002220: Adding singleton resource org.keycloak.services.resources.admin.AdminRoot from Application class org.keycloak.services.resources.KeycloakApplication
keycloak          | 06:26:28,686 INFO  [org.jboss.resteasy.resteasy_jaxrs.i18n] (ServerService Thread Pool -- 53) RESTEASY002220: Adding singleton resource org.keycloak.services.resources.RobotsResource from Application class org.keycloak.services.resources.KeycloakApplication
keycloak          | 06:26:28,687 INFO  [org.jboss.resteasy.resteasy_jaxrs.i18n] (ServerService Thread Pool -- 53) RESTEASY002220: Adding singleton resource org.keycloak.services.resources.ServerVersionResource from Application class org.keycloak.services.resources.KeycloakApplication
keycloak          | 06:26:28,688 INFO  [org.jboss.resteasy.resteasy_jaxrs.i18n] (ServerService Thread Pool -- 53) RESTEASY002220: Adding singleton resource org.keycloak.services.resources.WelcomeResource from Application class org.keycloak.services.resources.KeycloakApplication
keycloak          | 06:26:28,837 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 53) WFLYUT0021: Registered web context: '/auth' for server 'default-server'
keycloak          | 06:26:28,870 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "keycloak-server.war" (runtime-name : "keycloak-server.war")
keycloak          | 06:26:28,943 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
keycloak          | 06:26:28,946 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
keycloak          | 06:26:28,947 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
keycloak          | 06:26:28,948 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: Keycloak 3.4.3.Final (WildFly Core 3.0.8.Final) started in 30099ms - Started 546 of 882 services (604 services are lazy, passive or on-demand)
elasticsearch     | [2018-07-25T06:50:55,617][INFO ][o.e.m.j.JvmGcMonitorService] [f4e-HY1] [gc][1503] overhead, spent [465ms] collecting in the last [1s]

The docker-compose.yml is as follows:

version: '3'

services:
  postgres:
      image: postgres
      container_name: postgres
      volumes:
        - postgres_data:/var/lib/postgresql
      environment:
        POSTGRES_DB: keycloak
        POSTGRES_USER: keycloak
        POSTGRES_PASSWORD: password
  keycloak:
      image: jboss/keycloak:3.4.3.Final
      container_name: keycloak
      environment: 
        POSTGRES_PORT_5432_TCP_ADDR: postgres
        POSTGRES_DATABASE: keycloak
        POSTGRES_USER: keycloak
        POSTGRES_PASSWORD: password
        KEYCLOAK_USER: admin
        KEYCLOAK_PASSWORD: password
      ports:
        - 8080:8080
      depends_on:
        - postgres
  keycloak-proxy:
      image: jboss/keycloak-proxy:3.4.2.Final
      container_name: keycloak-proxy
      environment: 
        TARGET_URL: http://kibana:5601
        HTTP_PORT: 8180
        HTTPS_PORT: 8443
        BASE_PATH: /
        REALM_NAME: kibana
        AUTH_SERVER_URL: http://keycloak:8080/auth
        CLIENT_ID: kibana
        ROLE_ALLOWED: user
        SSL_REQUIRED: external
      volumes: 
        - $PWD/conf:/opt/jboss/conf
      ports:
        - 8180:8180
      depends_on:
        - keycloak
  elasticsearch:
      image: docker.elastic.co/elasticsearch/elasticsearch-oss:6.2.2
      container_name: elasticsearch
      environment: ['http.host=0.0.0.0', 'transport.host=127.0.0.1', 'ELASTIC_PASSWORD=elastic']

  kibana:
      image: docker.elastic.co/kibana/kibana-oss:6.2.2
      container_name: kibana
      environment:
        - ELASTICSEARCH_USERNAME=elasticsearch
        - ELASTICSEARCH_PASSWORD=elastic
        - ELASTICSEARCH_HOST=elasticsearch
        - ELASTICSEARCH_PORT=9200
      depends_on: ['elasticsearch']        

volumes:
  postgres_data:
      driver: local

and the conf/proxy.json is as follows:

{
    "target-url": "${env.TARGET_URL}",
    "bind-address": "0.0.0.0",
    "http-port": "${env.HTTP_PORT}",
    "https-port": "${env.HTTPS_PORT}",
    "applications": [
        {
            "base-path": "${env.BASE_PATH}",
            "adapter-config": {
                "realm": "${env.REALM_NAME}",
                "auth-server-url": "${env.AUTH_SERVER_URL}",
                "public-client": true,
                "resource": "${env.CLIENT_ID}",
                "ssl-required": "${env.SSL_REQUIRED}"
            },
            "constraints": [
                {
                    "pattern": "/*",
                    "roles-allowed": [
                        "${env.ROLE_ALLOWED}"
                    ]
                }
            ]
        }
    ]
}

Any help to get the kibana login would be much appreciated.

My ultimate goal would be to point this to my own kibana deployment. Is this possible?

Cheers.

Arkoprabho commented 5 years ago

@gdd1984 Could you get it working?

efrigar commented 5 years ago

I am having the same error. Do you know any way to resolve that?

ruifigueiredo commented 5 years ago

Hia, Can you paste the log infos of keycloak and keycloak-proxy container?

aychamahdi commented 4 years ago

I am having the same error. Do you know any way to resolve that?

luisGumucio commented 3 years ago

It's working for me.