one-observability-demo
one-observability-demo copied to clipboard
Unable to complete SAML auth for AMG as keycloak service is inaccessible through service Load Balancer URL
Issue Description:
- The IRSA policy for AWS Load Balancer controller is missing permissions for AddTags action which is causing the NLB service association to fail.
- The service definition for the keycloak service is using default configuration for NLB scheme leading to
internal
load balancer endpoint. - The keycloak version needs to be upgraded.
Solution:
- Add missing permissions to AWS Load Balancer controller IRSA policy
- Add service annotation to set the service scheme to
internet-facing
. - Upgrade keycloak version to latest 22.0.1