Skip to content

Commit 7e206e2

Browse files
kvapskvaps
authored
fix(keycloak): point HTTPRoute backends at the service port (#3235)
## Summary With `gateway-enabled: "true"`, every Keycloak hostname answers 503 from envoy. The `keycloak-http` Service exposes a single port, 8080: ```yaml ports: - name: http port: 8080 ``` but all three HTTPRoute backendRefs in `packages/system/keycloak/templates/httproute.yaml` reference `port: 80`. Gateway API resolves a backendRef against the Service's declared ports, so no backend resolves and the route serves 503. The Ingress template is unaffected because it references the port by name (`http`). Observed live on the freedom dev cluster: all Keycloak hosts returned 503 via the Gateway; hand-patching the route's backend port to 8080 restored service. ## Change Point the three backendRefs (public route, its no-adminHost variant, and the admin route) at port 8080. Verified with `helm template -s templates/httproute.yaml` (with and without `ingress.adminHost`): both routes render with `port: 8080`. <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Bug Fixes** * Updated Keycloak HTTP routing so both the main and admin routes forward traffic to the correct backend service port (from 80 to 8080), improving reliability and access. <!-- end of auto-generated comment: release notes by coderabbit.ai -->
2 parents 28a59da + 7475491 commit 7e206e2

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

‎packages/system/keycloak/templates/httproute.yaml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -36,11 +36,11 @@ spec:
3636
value: /.well-known
3737
backendRefs:
3838
- name: keycloak-http
39-
port: 80
39+
port: 8080
4040
{{- else }}
4141
- backendRefs:
4242
- name: keycloak-http
43-
port: 80
43+
port: 8080
4444
{{- end }}
4545
{{- if $adminHost }}
4646
---
@@ -62,6 +62,6 @@ spec:
6262
rules:
6363
- backendRefs:
6464
- name: keycloak-http
65-
port: 80
65+
port: 8080
6666
{{- end }}
6767
{{- end }}

0 commit comments

Comments
 (0)