tls ingress readiness

[dgn]

tls ingress readiness

[dgn]

Hi @y0zg, make sure to set the correct auth_cluster in your filter config. This has to be the cluster name generated by Istio that points to your Keycloak instance. You can see the clusters in your environment by running istioctl pc clusters <INGRESS_POD_NAME>

[y0zg]

@dgn Thank you for following up

checked both 80 and 8443 ports for keycloak available in clusters but still the same issue

 configuration: |
                {
                  "auth_cluster": "outbound|80||keycloak-http.keycloak.svc.cluster.local",
                  "auth_host": "keycloak-http.keycloak.svc.cluster.local:80",
                  "login_uri": "https://keycloak.example.com/auth/realms/istio/protocol/openid-connect/auth",
                  "token_uri": "https://keycloak.example.com/auth/realms/istio/protocol/openid-connect/token",
                  "client_id": "test",
                  "client_secret": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
                }

istioctl pc cluster <istio-ingressgateway> -n istio-system | grep keycloak
keycloak-headless.keycloak.svc.cluster.local                            80        -          outbound      EDS
keycloak-http.keycloak.svc.cluster.local                                80        -          outbound      EDS
keycloak-http.keycloak.svc.cluster.local                                8443      -          outbound      EDS
keycloak-http.keycloak.svc.cluster.local                                9990      -          outbound      EDS

[y0zg]

started working with 80 port! Cool!