[keycloak-user] keycloak helm chart SSL configuration

[Leigh Kennedy]

Hi,

I have been using keycloak for a while via the helm chart.  IT has been working find using http.  However I am trying to get it to use a certificate.  I have struggled to find any clear documentation on how to do this.  This is what I have at the moment (you can see commented out a few things I have tried.

keycloak:
  username: test
  password: xxx
  service:
    nodePort: 32666
    type: NodePort
  persistence:
    deployPostgres: false
    dbVendor: postgres
    dbName: keycloak
    dbHost: qmi-minikube.local.net
    dbPort: 5432
    dbUser: test
    dbPassword: xxx
  #extraEnv: |
  #  - name: PROXY_ADDRESS_FORWARDING
  #    value: "true"
  ingress:
    enabled: true
  #  annotations:
      #kubernetes.io/ingress.global-static-ip-name: "keycloak-static-ip"
  #    kubernetes.io/ingress.allow-http: "false"
  #    ingress.kubernetes.io/ssl-redirect: "true"
    path: /auth
    hosts:
      - keycloak.elastic.example
    tls:
      - hosts:
        - keycloak.elastic.example
        secretName: elastic-example-tls


Can anyone see what I am doing wrong here?  I know my certificate is ok as I use it in another nginx ingress config (not running while this one is) and It works fine.

Thanks.

Leigh Kennedy