KC_PROXY deprecated, use proxy-headers about charts HOT 9 CLOSED

One question I have about proxy: edge to proxyHeaders: xforwarded (or forwarded) is the arg --http-enabled true in the documentation.
Seems that the PR #27890 and #28530 don't address it by adding a flag for --http-enabled true.

https://www.keycloak.org/docs/latest/upgrading/index.html#deprecated-proxy-option

@lucasfcnunes See bitnami/containers#67957 (comment)

TLDR http-enabled is always true unconditionally in bitnami containers

from charts.

Hi, thank you for reporting this issue. I can reproduce it installing the bitnami/keycloak chart with default values:

$ helm install keycloak oci://registry-1.docker.io/bitnamicharts/keycloak --version 21.3.1
$ kubectl logs statefulset/keycloak

2024-05-27 09:49:32,273 WARN  [org.key.qua.run.cli.Picocli] (main) The following used options or option values are DEPRECATED and will be removed in a future release:
	- proxy: Use proxy-headers.

Although it's just a deprecation warning (for now), we can fix it in the container and chart configuration.

Some references:

• https://www.keycloak.org/server/reverseproxy

The support for setting proxy modes is deprecated and will be removed in a future Keycloak release. Consider configuring accepted reverse proxy headers instead [...]

• https://www.keycloak.org/docs/24.0.4/upgrading/index.html#deprecated-proxy-option

Would you like to contribute sending a PR with the changes to fix this issue? The Bitnami team will be more than happy to review your submission and offer feedback. You can find the contributing guidelines here.

Your contribution will greatly benefit the community. Feel free to reach out if you have any questions or need assistance.

from charts.

I guess fixing the chart will first require fixing the Docker image, as reported at bitnami/containers#65190.

Note that Keycloak 25 introduced even more changes when it comes to hostnames: https://www.keycloak.org/2024/06/keycloak-2500-released.html#_new_hostname_options.

from charts.

Thank you for linking both issues. You are correct, the container image needs to be adapted as well.

from charts.

This Issue has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thanks for the feedback.

from charts.

Still true

from charts.

I have just set the on-hold Issues or Pull Requests with this label will never be considered stale label as bitnami/containers#65190 needs to be fixed first.

from charts.

This should be fixed with #27890 and #28530

from charts.

One question I have about proxy: edge to proxyHeaders: xforwarded (or forwarded) is the arg --http-enabled true in the documentation.
Seems that the PR #27890 and #28530 don't address it by adding a flag for --http-enabled true.

https://www.keycloak.org/docs/latest/upgrading/index.html#deprecated-proxy-option

from charts.