WIP Test with keycloak HA #9
Open
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
…wn load balancing (in kubernetes too)
…dex.html#_tcp, though original conf clearly matches:" This reverts commit b4660b1.
…s with: Property assignment of initial_hosts in TCPPING with original property value keycloak[7600],keycloak2[7600] and converted to null could not be assigned
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Did initial experiments on mod_auth_openidc to validate a Keycloak HA setup. Turns out that while docker images from this module behave predictably in kubernetes too, the same is not true for keycloak HA configuration. It must be tested in kubernetes, due to JGroups' heavy dependence on networks and naming.
Because Kubernetes isn't in scope in this repository we'll probably never merge this branch. We could howerer switch to keycloak-ha-mysql if a PR from https://github.com/Reposoft/keycloak-ha-kubernetes gets into an official such image, because mysql is a better fit for keycloak-ha in kubernetes than postgres is.
HA docs
https://keycloak.gitbooks.io/server-installation-and-configuration/content/v/2.3/topics/clustering/troubleshooting.html
http://jgroups.org/manual4/index.html#protlist
Possibly something like https://kb.novaordis.com/index.php/WildFly_Clustering_without_Multicast