search

istio-ecosystem / authservice

Move OIDC token acquisition out of your app code and into the Istio mesh
Apache License 2.0
220 stars 62 forks source link

Question on implementing multitenancy with istio/keycloak/authservice #236

Closed shivendra-bl closed 7 months ago

shivendra-bl commented 1 year ago

I want to create multi tenants with keycloak realms, so for authservice I have to add multiple realms jwks url's etc. in configmap. This is working correctly with this. Only problem I have is when I create a new realm , I update a new entry in configmap and then i have to restart authservice pod to use the configmap changes. If I have 100+ realms, restarting authservice pod effect all the logins until it get stabilized and also a scaling concern here for 100+ realms and and may be having 100+ users.

I was basically looking for creating authservice configmap and pod for each realm separately so it scale easily and one realm won't impact other realm.

nacx commented 7 months ago

I think this should be fixed by implementing the hot-reload of configuration as suggested in https://github.com/istio-ecosystem/authservice/issues/64 Let's close this one and implement the config hot reload.