<div dir="ltr">Hi Stian,<div><br></div><div>Andy found something that needed to be reconfigured within the OPENSHIFT ONLINE environment that I do not have access to. After his change, keycloak was immediately available. After idling all night, my instance of keycloak is still available this morning. He will update the case <a href="https://access.redhat.com/support/cases/#/case/01479959">https://access.redhat.com/support/cases/#/case/01479959</a> with his findings.</div><div><br></div><div>Thank you,</div><div>Mike</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Jul 24, 2015 at 3:08 AM, Stian Thorgersen <span dir="ltr"><<a href="mailto:stian@redhat.com" target="_blank">stian@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Did you find a solution?<br>
<span class=""><br>
----- Original Message -----<br>
> From: "Mike Hills" <<a href="mailto:mike.hills@sematree.com">mike.hills@sematree.com</a>><br>
> To: "Steven Pousty" <<a href="mailto:spousty@redhat.com">spousty@redhat.com</a>><br>
> Cc: "Stian Thorgersen" <<a href="mailto:stian@redhat.com">stian@redhat.com</a>>, "keycloak-user" <<a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a>><br>
> Sent: Thursday, 23 July, 2015 5:45:59 PM<br>
> Subject: Re: [keycloak-user] Keycloak OpenShift Cartridge updated to 1.3.1.Final<br>
><br>
</span><span class="">> I am on as mhills<br>
><br>
</span><div><div class="h5">> On Thu, Jul 23, 2015 at 11:31 AM, Steven Pousty <<a href="mailto:spousty@redhat.com">spousty@redhat.com</a>> wrote:<br>
><br>
> > Mike any chance you can get on irc on freenode in channel #openshift<br>
> > right now. I am there and I can try to get an ops person to help us<br>
> > diagnose<br>
> ><br>
> > Thanks<br>
> > Steve<br>
> ><br>
> ><br>
> > On 07/23/2015 08:14 AM, Mike Hills wrote:<br>
> ><br>
> > No on all accounts... I performed all of the steps and none of them<br>
> > allowed me to access keycloak.<br>
> ><br>
> > My keycloak server.log file<br>
> ><br>
> > 2015-07-23 11:11:04,640 INFO<br>
> > [org.hibernate.hql.internal.ast.ASTQueryTranslatorFactory] (ServerService<br>
> > Thread Pool -- 73) HHH000397: Using ASTQueryTranslatorFactory<br>
> ><br>
> > 2015-07-23 11:11:04,891 INFO<br>
> > [org.hibernate.validator.internal.util.Version] (ServerService Thread Pool<br>
> > -- 73) HV000001: Hibernate Validator 5.1.3.Final<br>
> ><br>
> > 2015-07-23 11:11:13,582 INFO [org.jboss.resteasy.spi.ResteasyDeployment]<br>
> > (ServerService Thread Pool -- 73) Deploying javax.ws.rs.core.Application:<br>
> > class org.keycloak.services.resources.KeycloakApplication<br>
> ><br>
> > 2015-07-23 11:11:13,585 INFO [org.jboss.resteasy.spi.ResteasyDeployment]<br>
> > (ServerService Thread Pool -- 73) Adding class resource<br>
> > org.keycloak.services.resources.ThemeResource from Application class<br>
> > org.keycloak.services.resources.KeycloakApplication<br>
> ><br>
> > 2015-07-23 11:11:13,585 INFO [org.jboss.resteasy.spi.ResteasyDeployment]<br>
> > (ServerService Thread Pool -- 73) Adding class resource<br>
> > org.keycloak.services.resources.JsResource from Application class<br>
> > org.keycloak.services.resources.KeycloakApplication<br>
> ><br>
> > 2015-07-23 11:11:13,585 INFO [org.jboss.resteasy.spi.ResteasyDeployment]<br>
> > (ServerService Thread Pool -- 73) Adding class resource<br>
> > org.keycloak.services.resources.WelcomeResource from Application class<br>
> > org.keycloak.services.resources.KeycloakApplication<br>
> ><br>
> > 2015-07-23 11:11:13,585 INFO [org.jboss.resteasy.spi.ResteasyDeployment]<br>
> > (ServerService Thread Pool -- 73) Adding class resource<br>
> > org.keycloak.services.resources.QRCodeResource from Application class<br>
> > org.keycloak.services.resources.KeycloakApplication<br>
> ><br>
> > 2015-07-23 11:11:13,586 INFO [org.jboss.resteasy.spi.ResteasyDeployment]<br>
> > (ServerService Thread Pool -- 73) Adding provider class<br>
> > org.keycloak.SkeletonKeyContextResolver from Application class<br>
> > org.keycloak.services.resources.KeycloakApplication<br>
> ><br>
> > 2015-07-23 11:11:13,586 INFO [org.jboss.resteasy.spi.ResteasyDeployment]<br>
> > (ServerService Thread Pool -- 73) Adding singleton resource<br>
> > org.keycloak.services.resources.ServerVersionResource from Application<br>
> > class org.keycloak.services.resources.KeycloakApplication<br>
> ><br>
> > 2015-07-23 11:11:13,586 INFO [org.jboss.resteasy.spi.ResteasyDeployment]<br>
> > (ServerService Thread Pool -- 73) Adding singleton resource<br>
> > org.keycloak.services.resources.admin.AdminRoot from Application class<br>
> > org.keycloak.services.resources.KeycloakApplication<br>
> ><br>
> > 2015-07-23 11:11:13,587 INFO [org.jboss.resteasy.spi.ResteasyDeployment]<br>
> > (ServerService Thread Pool -- 73) Adding provider singleton<br>
> > org.keycloak.services.resources.ModelExceptionMapper from Application class<br>
> > org.keycloak.services.resources.KeycloakApplication<br>
> ><br>
> > 2015-07-23 11:11:13,587 INFO [org.jboss.resteasy.spi.ResteasyDeployment]<br>
> > (ServerService Thread Pool -- 73) Adding singleton resource<br>
> > org.keycloak.services.resources.RealmsResource from Application class<br>
> > org.keycloak.services.resources.KeycloakApplication<br>
> ><br>
> > 2015-07-23 11:11:13,856 INFO [org.wildfly.extension.undertow]<br>
> > (ServerService Thread Pool -- 73) WFLYUT0021: Registered web context: /auth<br>
> ><br>
> > 2015-07-23 11:11:14,069 INFO [org.jboss.as.server] (ServerService Thread<br>
> > Pool -- 67) WFLYSRV0010: Deployed "keycloak-server.war" (runtime-name :<br>
> > "keycloak-server.war")<br>
> ><br>
</div></div>> > 2015-07-23 11:11:15,141 INFO [<a href="http://org.jboss.as" rel="noreferrer" target="_blank">org.jboss.as</a>] (Controller Boot Thread)<br>
<span class="">> > WFLYSRV0060: Http management interface listening on<br>
> > <a href="http://127.3.17.129:9990/management" rel="noreferrer" target="_blank">http://127.3.17.129:9990/management</a><br>
> ><br>
</span>> > 2015-07-23 11:11:15,142 INFO [<a href="http://org.jboss.as" rel="noreferrer" target="_blank">org.jboss.as</a>] (Controller Boot Thread)<br>
<span class="">> > WFLYSRV0051: Admin console listening on <a href="http://127.3.17.129:9990" rel="noreferrer" target="_blank">http://127.3.17.129:9990</a><br>
> ><br>
</span>> > 2015-07-23 11:11:15,143 INFO [<a href="http://org.jboss.as" rel="noreferrer" target="_blank">org.jboss.as</a>] (Controller Boot Thread)<br>
<span class="">> > WFLYSRV0025: WildFly Full 9.0.0.CR2 (WildFly Core 1.0.0.CR6) started in<br>
> > 58758ms - Started 334 of 553 services (271 services are lazy, passive or<br>
> > on-demand)<br>
> ><br>
> ><br>
> ><br>
</span>> > On Thu, Jul 23, 2015 at 11:05 AM, Steven Pousty <<a href="mailto:spousty@redhat.com">spousty@redhat.com</a>><br>
<span class="">> > wrote:<br>
> ><br>
> >> Does the keycloak cartridge hardwire ips when it is "installed" into a<br>
</span>> >> gear? Are these scalable applications, as in, were they created with*<br>
> >> rhc app create .... -s*<br>
<span class="">> >><br>
> >> What happens if you restart the gear<br>
> >><br>
</span>> >> *rhc app restart -a mykeycloakapp*<br>
<span class="">> >><br>
> >> if that doesn't fix it then try<br>
> >><br>
</span>> >> *rhc app force-stop -a mykeycloakapp*<br>
> >> *rhc app start -a mykeycloakapp*<br>
<span class="">> >><br>
> >> This could help narrow down the problem. Because it either of those work<br>
> >> it is something about return from idling that is not getting properly set<br>
> >> with the routing layer.<br>
> >><br>
> >> On 07/23/2015 04:15 AM, Mike Hills wrote:<br>
> >><br>
> >> It's good to know I am not alone :)<br>
> >><br>
> >> I consistently receive this error on both the 1.2 and 1.3 versions of<br>
> >> Keycloak running on OPENSHIFT ONLINE.<br>
> >><br>
> >> OPENSHIFT support had me validate that I could access my keycloak<br>
</span>> >> instance at <<a href="http://localhost:8080/auth" rel="noreferrer" target="_blank">http://localhost:8080/auth</a>><a href="http://localhost:8080/auth" rel="noreferrer" target="_blank">http://localhost:8080/auth</a> after<br>
> >> executing: *rhc port-forward keycloak.* (which I could). I have not<br>
<span class="">> >> had a follow-up support since I confirmed this.<br>
> >><br>
> >> <a href="https://access.redhat.com/support/cases/#/case/01479959" rel="noreferrer" target="_blank">https://access.redhat.com/support/cases/#/case/01479959</a><br>
> >><br>
> >><br>
</span>> >> On Thu, Jul 23, 2015 at 6:59 AM, Stian Thorgersen < <<a href="mailto:stian@redhat.com">stian@redhat.com</a>><br>
<span class="">> >> <a href="mailto:stian@redhat.com">stian@redhat.com</a>> wrote:<br>
> >><br>
> >>> Just got the same issue on my instance. Seems that after the instance is<br>
> >>> idled it returns this 502 even after the instance is restarted (confirmed<br>
> >>> in the log that it's up and running).<br>
> >>><br>
> >>> ----- Original Message -----<br>
</span>> >>> > From: "Ioan Eugen Stan" < <<a href="mailto:stan.ieugen@gmail.com">stan.ieugen@gmail.com</a>><a href="mailto:stan.ieugen@gmail.com">stan.ieugen@gmail.com</a><br>
> >>> ><br>
> >>> > To: "Stian Thorgersen" < <<a href="mailto:stian@redhat.com">stian@redhat.com</a>><a href="mailto:stian@redhat.com">stian@redhat.com</a>><br>
> >>> > Cc: "keycloak-user" < <<a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a>><br>
<span class="">> >>> <a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a>><br>
> >>> > Sent: Thursday, 23 July, 2015 12:45:56 PM<br>
> >>> > Subject: Re: [keycloak-user] Keycloak OpenShift Cartridge updated to<br>
> >>> 1.3.1.Final<br>
> >>> ><br>
> >>> > Thank you for the response. However, I think it's another beast<br>
> >>> altogether:<br>
> >>> ><br>
> >>> ><br>
> >>> > <a href="https://keycloak-ieugen.rhcloud.com/auth/admin/" rel="noreferrer" target="_blank">https://keycloak-ieugen.rhcloud.com/auth/admin/</a><br>
> >>> ><br>
</span><span class="">> >>> > Proxy Error<br>
> >>> ><br>
> >>> > The proxy server received an invalid response from an upstream server.<br>
> >>> > The proxy server could not handle the request GET /auth/admin/.<br>
> >>> ><br>
> >>> > Reason: DNS lookup failure for: 127.0.0.1:80auth<br>
> >>> ><br>
> >>> ><br>
> >>> _______________________________________________<br>
> >>> keycloak-user mailing list<br>
</span>> >>> <a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br>
<span class="">> >>> <a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br>
> >>><br>
> >><br>
> >><br>
> >><br>
> >> --<br>
> >> Michael J. Hills<br>
> >> Sr. CRM Architect<br>
> >><br>
</span>> >> Mobile: <a href="tel:603.475.5093" value="+16034755093">603.475.5093</a><br>
> >> Email : <a href="mailto:mike.hills@sematree.com">mike.hills@sematree.com</a><br>
<span class="">> >> Skype : mhills_sematree<br>
> >><br>
> >><br>
> >> _______________________________________________<br>
> >> keycloak-user mailing<br>
</span>> >> listkeycloak-user@lists.jboss.orghttps://<a href="http://lists.jboss.org/mailman/listinfo/keycloak-user" rel="noreferrer" target="_blank">lists.jboss.org/mailman/listinfo/keycloak-user</a><br>
<span class="">> >><br>
> >><br>
> >><br>
> ><br>
> ><br>
> > --<br>
> > Michael J. Hills<br>
> > Sr. CRM Architect<br>
> ><br>
</span>> > Mobile: <a href="tel:603.475.5093" value="+16034755093">603.475.5093</a><br>
> > Email : <a href="mailto:mike.hills@sematree.com">mike.hills@sematree.com</a><br>
<span class="im HOEnZb">> > Skype : mhills_sematree<br>
> ><br>
> ><br>
> ><br>
><br>
><br>
> --<br>
> Michael J. Hills<br>
> Sr. CRM Architect<br>
><br>
</span><div class="HOEnZb"><div class="h5">> Mobile: <a href="tel:603.475.5093" value="+16034755093">603.475.5093</a><br>
> Email : <a href="mailto:mike.hills@sematree.com">mike.hills@sematree.com</a><br>
> Skype : mhills_sematree<br>
><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature">Michael J. Hills<br>Sr. CRM Architect<br><br>Mobile: 603.475.5093<br>Email : <a href="mailto:mike.hills@sematree.com" target="_blank">mike.hills@sematree.com</a><br>Skype : mhills_sematree<br></div>
</div>