Skip to content

Commit

Permalink
keycloak: add KC_HTTPS_TRUST_STORE_TYPE
Browse files Browse the repository at this point in the history
It looks like recent version of keycloak require that the
KC_HTTPS_TRUST_STORE_TYPE environment variable is set. Otherwise an
error like "kc.sh[54]: Unable to determine 'https-trust-store-type'
automatically. Adjust the file extension or specify the property." might
occur and keycloak fails to start.
  • Loading branch information
sumit-bose authored and ikerexxe committed Dec 12, 2024
1 parent 2b5c825 commit 572bbf9
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions src/ansible/roles/keycloak/tasks/main.yml
Original file line number Diff line number Diff line change
Expand Up @@ -63,6 +63,7 @@
export KC_HTTPS_CERTIFICATE_KEY_FILE=/data/certs/master.keycloak.test.key
export KC_HTTPS_TRUST_STORE_FILE=/data/certs/master.keycloak.test.keystore
export KC_HTTPS_TRUST_STORE_PASSWORD={{ service.keycloak.admin_password }}
export KC_HTTPS_TRUST_STORE_TYPE=JKS
export KC_HTTP_RELATIVE_PATH=/auth
/opt/keycloak/bin/kc.sh build
'''
Expand All @@ -77,6 +78,7 @@
KC_HTTPS_CERTIFICATE_KEY_FILE=/data/certs/master.keycloak.test.key
KC_HTTPS_TRUST_STORE_FILE=/data/certs/master.keycloak.test.keystore
KC_HTTPS_TRUST_STORE_PASSWORD={{ service.keycloak.admin_password }}
KC_HTTPS_TRUST_STORE_TYPE=JKS
KC_HTTP_RELATIVE_PATH=/auth
dest: /etc/keycloak.env

Expand Down

0 comments on commit 572bbf9

Please sign in to comment.