konveyor / tackle-pathfinder

Tackle Pathfinder application
Apache License 2.0
16 stars 23 forks source link

tackle-pathfinder-rest expecting to connect to tackle-keycloak using HTTPS #159

Open ooteniya1 opened 2 years ago

ooteniya1 commented 2 years ago

The tackle-pathfinder-rest is expecting to connect to tackle-keycloak using https.

Nov 30, 2021 4:33:25 PM io.quarkus.runtime.ApplicationLifecycleManager run ERROR: Failed to start application (with profile prod) io.vertx.core.impl.NoStackTraceThrowable: Forbidden: {"error":"invalid_request","error_description":"HTTPS required"}

Unfortunately, the environment variable QUARKUS_OIDC_AUTH_SERVER_URL points to http://tackle-keycloak:8080/auth/realms/tackle.

Workaround:

  1. expose port 8443 on the tackle-keycload service in addition to port 8080 spec: ports:
    • name: https protocol: TCP port: 8443 targetPort: 8443
    • name: http protocol: TCP port: 8080 targetPort: 8080 selector: app.kubernetes.io/name: tackle-keycloak
  2. change QUARKUS_OIDC_AUTH_SERVER_URL=https://tackle-keycloak:8443/auth/realms/tackle

This needs to be fixed.