col-panic opened a new issue, #271:
URL: https://github.com/apache/openserverless/issues/271

   I want to use Keycloak as external IdP for users to the system, such that I 
don't have to manually create those.
   
   Documentation I found is here 
https://github.com/apache/openserverless-cli/blob/main/docs/SSO.md and given by 
the ops tool itself as documented in issue 
https://github.com/apache/openserverless/issues/195 which is about integrating 
Keycloak into openservless.
   
   I created a keycloak client and tried setting it up with
   ```
   ops config sso keycloak --enable 
--issuer-url=https://keycloak.something.com/realms/something 
--jwks-url=https://keycloak.something.com/realms/something/protocol/openid-connect/certs
 --required-group=admin  --client-id=openserverless --client-secret=somesecret
   ```
   which left me with
   ```
   error: error validating "STDIN": error validating data: failed to download 
openapi: Get "http://localhost:8080/openapi/v2?timeout=32s": dial tcp 
[::1]:8080: connect: connection refused; if you choose to ignore these errors, 
turn validation off with --validate=false
   error: kubectl apply -f - failed with exit code 1: error: error validating 
"STDIN": error validating data: failed to download openapi: Get 
"http://localhost:8080/openapi/v2?timeout=32s": dial tcp [::1]:8080: connect: 
connection refused; if you choose to ignore these errors, turn validation off 
with --validate=false
   ops: Failed to run task "keycloak": exit status 1
   ```
   Not really sure what to do here. 
   
   When fixing the state and getting it running, I'll gladly offer to do a 
documentation page on this!


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to