Repository navigation

Commit a953399

committed

fix(keycloak): bind HTTPRoute to the https listener only

Address review feedback from kitsunoff on packages/system/keycloak/templates/httproute.yaml:11: same HTTP->HTTPS redirect regression as dashboard's HTTPRoute — without sectionName, the route attached to both listeners and a specific-hostname route on port 80 won the precedence contest against the generic redirect HTTPRoute. Pin sectionName: https so the keycloak route stays on the TLS-terminating listener exclusively. Assisted-By: Claude <[email protected]> Signed-off-by: Aleksei Sviridkin <[email protected]>

1 parent 476ecfc commit a953399Copy full SHA for a953399

1 file changed

packages/system/keycloak/templates
- httproute.yaml

`‎packages/system/keycloak/templates/httproute.yaml‎`

-Original file line number
+Diff line change
     kind: Gateway
     name: cozystack
     namespace: {{ $exposeIngress }}
 +    sectionName: https
   hostnames:
   - {{ $ingressHost | quote }}
   rules:

Comments

(0)