From 8eb517a47ef7ef0e4bdc00c881449a979f29fdf0 Mon Sep 17 00:00:00 2001 From: Fiete Ostkamp Date: Thu, 10 Apr 2025 11:03:17 +0200 Subject: [PATCH] Fix portal auth - adjust realm settings for portal-app client to make login possible Issue-ID: PORTALNG-143 Change-Id: I8a3f925dcaa31abd86a9681cfec98f49b41efaac Signed-off-by: Fiete Ostkamp --- docs/sections/resources/yaml/keycloak-server-values.yaml | 2 +- kubernetes/authentication/values.yaml | 7 +++++-- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/docs/sections/resources/yaml/keycloak-server-values.yaml b/docs/sections/resources/yaml/keycloak-server-values.yaml index 52bf5a9809..8f13e1fac6 100644 --- a/docs/sections/resources/yaml/keycloak-server-values.yaml +++ b/docs/sections/resources/yaml/keycloak-server-values.yaml @@ -54,4 +54,4 @@ secrets: http: # For backwards compatibility reasons we set this to the value used by previous Keycloak versions. - relativePath: "/" # "/auth" + relativePath: "" # "/auth" diff --git a/kubernetes/authentication/values.yaml b/kubernetes/authentication/values.yaml index 79f23295cd..89e6097ec8 100644 --- a/kubernetes/authentication/values.yaml +++ b/kubernetes/authentication/values.yaml @@ -27,7 +27,7 @@ global: keycloak: intURL: "http://keycloak-http.keycloak.svc.cluster.local/" - relativePath: "auth/" + relativePath: "" ingressAuthentication: enabled: false exceptions: @@ -57,7 +57,7 @@ onap-keycloak-config-cli: #existingSecret: "keycloak-keycloakx-admin-creds" env: # internal KC URL plus relative path - KEYCLOAK_URL: "http://keycloak-http.keycloak.svc.cluster.local/auth/" + KEYCLOAK_URL: "http://keycloak-http.keycloak.svc.cluster.local/" KEYCLOAK_SSLVERIFY: "false" KEYCLOAK_AVAILABILITYCHECK_ENABLED: "true" secrets: @@ -300,6 +300,9 @@ realmSettings: - 'https://{{ include "ingress.config.host" (dict "dot" . "baseaddr" "portal-ng-ui") }}/*' - 'http://localhost/*' protocol: openid-connect + webOrigins: + - "*" + publicClient: "true" additionalAttributes: post.logout.redirect.uris: 'https://{{ include "ingress.config.host" (dict "dot" . "baseaddr" "portal-ng-ui") }}/*' protocolMappers: -- 2.16.6