olb42/login
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: proxy.headers xforwarded not forwarded - Traefik sends X-Forwarded-* headers
Validate login GitOps repo / validate (push) Successful in 18s
Details

Browse Source 
Keycloak was seeing requests as non-secure (HTTP) because it was expecting
the RFC 7239 Forwarded: header but Traefik sends X-Forwarded-Proto/For/Host.
This caused CSP failures and cookie security warnings.
This commit is contained in:
olb042
2026-05-11 00:27:13 +01:00
parent 716ad61115
commit a2036c8381
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
manifest/overlays/production/keycloak-instance.yaml
+1 -1
View File
@@ -42,7 +42,7 @@ spec:
# ── Proxy: trust forwarded headers from Traefik ────────────────────────── # ── Proxy: trust forwarded headers from Traefik ──────────────────────────
proxy: proxy:
headers: forwarded headers: xforwarded
# ── Bootstrap admin credentials (sealed secret — see admin.sealed.secret.yaml) # ── Bootstrap admin credentials (sealed secret — see admin.sealed.secret.yaml)
bootstrapAdmin: bootstrapAdmin: