Hlela i-proxy ephumayo ye-Keycloak yokuhwebelana ngobunikazi

Setha indawo ye-proxy ephumayo yesiphakeli futhi usebenzise ukubaluleka okuguquguqukayo kwe-Keycloak lapho uhlola ukushintshwa kwethokheni.

Isiphequluli sifika ekhasini lokungena lomhlinzeki wobunikazi; isiphakeli se-Keycloak sishintshanisa ikhodi ebuyisiwe. Uma lokho kushintshana kwakamuva kungakwazi ukuxhuma, beka indlela ye-proxy ku-Keycloak process noma endaweni ye-container ngaphambi kokuqala:

HTTPS_PROXY=http://proxy.example:8080
NO_PROXY=localhost,internal.example

Ngendlela yomphakathi ye-HTTP, ikheli elivela kuhlu lwama-proxy e-HTTP lifakwa ku-HTTPS_PROXY; gcina izindawo zokweqa ezihlosiwe. I-URL yethokheni ihlala iyindawo yokugcina yomhlinzeki wobunikazi, hhayi ikheli le-proxy.

Ukubaluleka kwe-Keycloak kuhlukile kumephu ngokohlelo lwendawo ekuyiwa kuyo:

  • Uma kokubili HTTP_PROXY ne-HTTPS_PROXY kuchaziwe, HTTPS_PROXY iyawina.
  • Amajamo ezinhlamvu ezincane anokubaluleka ngaphezu kwamajamo ezinhlamvu ezinkulu.
  • NO_PROXY ihlukaniswe ngamakhefu, futhi i-host eqanjiwe ayifaki nezizinda zayo ezingaphansi.

Hlola zonke lezi zokufaka uma isiphakeli sikhetha indlela engalindelekile. Izilungiselelo ze-proxy zesiphequluli azinikeli le ndawo.

Lapho ukuxhumana kusebenza, ukwehluleka kokuqinisekisa i-TLS kungokwesilungiselelo sokwethemba ngokusebenzisa isixhumanisi se-truststore se-Keycloak. Ukushintsha indlela akukwazi ukusungula ukwethenjwa kwesitifiketi esingekho.

Izihloko ezihlobene