search

nokia / kong-oidc

OIDC plugin for Kong
Apache License 2.0
467 stars 331 forks source link

Anormal level of request on the open id provider (keycloak) #142

Open samsja opened 4 years ago

samsja commented 4 years ago

Hey,

i am testing this open id plugin and it worked great !

I am using keycloak as the open id provider in a gce cluster with k8s ( v1.1.2) and kong (1.3) with ingress controller (0.6.0)

However, with this plugin enable I am seeing a constant 1 request per seconds activity on my keycloak service. I thought that this plugin would make some request only when it needed to do some authentification when someone try to use a protected service .

Screenshot from 2019-12-11 15-04-37

the period where there are'nt any request is when I stoped the plugin.

My plugin conf:


apiVersion: configuration.konghq.com/v1
kind: KongPlugin
metadata:
  name: oid
config:
  client_id: CLIENT_NAME
  client_secret: CLIENT_SECRET
  discovery: https://path_to_my_keycloak.com/auth/realms/my_realm/.well-known/openid-configuration
plugin: oidc

Thanks in advance !

andrew-landsverk-win commented 4 years ago

@samsja I have an unrelated question :) Did you have to do anything special to add the "oidc" plugin to your kong setup for kubernetes?