Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Unable to complete SAML auth for AMG as keycloak service is inaccessible through service Load Balancer URL #242

Open
iamsouravin opened this issue Sep 4, 2023 · 0 comments
Open

Unable to complete SAML auth for AMG as keycloak service is inaccessible through service Load Balancer URL #242

iamsouravin opened this issue Sep 4, 2023 · 0 comments

Comments

@iamsouravin
Copy link

Issue Description:

  1. The IRSA policy for AWS Load Balancer controller is missing permissions for AddTags action which is causing the NLB service association to fail.
  2. The service definition for the keycloak service is using default configuration for NLB scheme leading to internal load balancer endpoint.
  3. The keycloak version needs to be upgraded.

Solution:

  1. Add missing permissions to AWS Load Balancer controller IRSA policy
  2. Add service annotation to set the service scheme to internet-facing.
  3. Upgrade keycloak version to latest 22.0.1
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Add keycloak SAML auth automation for AMG iamsouravin/one-observability-demo
1 participant
@iamsouravin