8000 Keycloak instance does not recover if `spec.http.tlsSecret` is created later · Issue #23087 · keycloak/keycloak · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
10000
Skip to content
Keycloak instance does not recover if spec.http.tlsSecret is created later #23087
Closed as not planned
@rickysway

Description

@rickysway

Before reporting an issue

Area

dependencies

Describe the bug

If a Keycloak instance with spec.http.tlsSecret points to a Secret that does not exist yet, the Keycloak instance doesn't recover from the error below even after the Secret it created, I had to bounced the Keycloak operator pod to get past the issue below
image

Version

22.0.1

Expected behavior

When the Secret becomes available, the Operator should continue reconciling the Keycloak instance and proceed past the previous error

Actual behavior

The Keycloak instance becomes stuck in Error state as the Operator stops reconciling it

How to Reproduce?

  1. Install and setup database (We use Postgres)
  2. Install Keycloak Operator
  3. Create Keycloak instance with the TLS Secret pointing to:
spec:
  http:
    tlsSecret: certificate-secret
  1. Keycloak Instance should error with the screenshot earlier above
  2. Setup TLS config (We use Cert Manager), this should eventually lead to the creation of Secret "certificate-secret"
  3. Keycloak Instance stays in error

Anything else?

We noted this previous issue which was marked resolved, however we're looking for a more permanent solution
#22170

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      0