Repository navigation
Proxy: TLS reencryt and passthrough docs - #48037
Conversation
Closes keycloak#48002 Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
|
Also relates to some expansion / cleanup of docs being done for the operator #47565 |
|
@shawkins, thank you for sharing it. We haven't discussed any operator docs/code changes in our meetings. I'll bring this subject up in the next meeting. |
Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
|
I think the document will look better with 3 sections
I've confirmed that enabling the PROXY protocol does not affect the management endpoint, and HaProxy can check the Keycloak health. Both PROXYv1 and PROXYv2 work. |
|
@pruivo - thank you for the docs. I've added some notes about the PROXY protocol that is neither encrypted nor signed, and the IP spoofing for the "trusted" proxies. I also added a TODO about the mTLS between proxy and Keycloak. Maybe you can extend it based on the current state of the HAProxy blueprint? |
Closes #48002