keycloak cluster on kubernetes with ssl and local DB !

keycloak cluster on kubernetes. keycloak on kubernetes. keycloak cluster. keycloak cluster over kubernetes. keycloak installation on kubernetes. keycloak in cluster mode. keycloak installation.
#keycloak #kubernetes #cluster #minikube #kubectl
Keycloak is an open source software product to allow single sign-on with Identity and Access Management aimed at modern applications and services.
Kubernetes, also known as K8s, is an open-source system for automating deployment, scaling, and management of containerized applications.
www.keycloak.org/
kubernetes.io/

[@MarwanHefny]

Very beneficial video Thank you

[@sgunay9657]

Great video and you made all the steps very clear . Cheers

[@computeriseasy]

its nice to hear that and thanks for your feedback.

[@bear4polar]

Good job. Thanks!

[@computeriseasy]

i am glad that i could help and thanks for your feedback.

[@mimkhatun4228]

Amazing vedio

[@computeriseasy]

thanks !

[@shilarani6811]

💜💜💞

[@computeriseasy]

thanks

[@emilmihailpop6162]

Its easy with minikube... Although you present this as for production. What you do if you have more than one node? ... I thought so ...

[@user-jn1hw4vs9i]

Hey thanks you for this video It is very useful... But I have a question, how can I verify that the cluster is working and the cache is being distributed between all the replicas? I configured kubernetes cache stack with "--cache-stack=kubernetes" parameter Thanks !

[@milanbhatt3608]

@computeriseasy Great video very easy to understand by your explanation. But I've question, how did we get that keystore.p12 file?

[@computeriseasy]

i am glad that it could help. it is a keystore for your certificate and private key. in this video kann you see how you could generate it: kzbin.info/www/bejne/o3nbo6aLq7xrrJY

[@milanbhatt3608]

Thanks for your kind response@@computeriseasy I've one more question and is that how do I configure hba file for mysql? It would be very helpful if you guide me in this area

[@computeriseasy]

@@milanbhatt3608 as far as i know, hba is more compatible with postgres. i have not use it with mysql.

[@milanbhatt3608]

@@computeriseasy I think you are right, I did not find hba file for mysql Thanks again

[@computeriseasy]

@@milanbhatt3608 its ok. I am glad that it could help.

[@user-jn1hw4vs9i]

Thank for this video, it is very useful. But I have a question: How can I verify that the cluster is working correctly and the cache is being distributed accross all the replicas. I configured the cache stack with kubernetes stack using "--cache-stack=kubernetes" parameter I've already done it but with docker swarm and jdbc-ping and i was able to see in the logs that the instance are "rebalancing" but with kubernetes, i don't see the same thing. Thank you for you answer

[@computeriseasy]

you can check if the pods run: kubectl get pods that is the simplest way to check, if cluster is working and the pods run . To the cashing : Unfortunately, the specific details of cache distribution might not be as visible in Kubernetes-based cache stacks as they were in Docker Swarm's jdbc-ping mechanism.

[@user-jn1hw4vs9i]

@@computeriseasy Thank you, I was able to set it up after updating my manifest and change the type of the service that anounces the instances IP addresses to ClusterIP.

[@computeriseasy]

@@user-jn1hw4vs9i very nice ! bravo ... i really glad to hear that !

[@samandamoon4076]

Is there any way to build ssl without DNS? But the video helped me a lot.

[@computeriseasy]

Thanks for your feedback. It is possible to create ssl for IP Address instead of domain name but it is not common, if you mean that.

[@samandamoon4076]

@@computeriseasy Unfortunately, I'm in that environment right now. Thank you for your comment.

[@computeriseasy]

@@samandamoon4076 Its ok and Best of luck !

[@MarwanHefny]

What are the workers requirements for prod keycloak?

[@gayankodithuwakku8262]

how did you generate tls.key and tls.crt?

[@computeriseasy]

in this video i showed how you can create self-signed tls certificates: kzbin.info/www/bejne/iXS8lZWZfcxkq68

[@haihoangpham6656]

Thanks for the video. I tried to generate tls.key and tls.crt files but it showed this error when I tried to run kubectl create secret tls: tls: failed to verify certificate: x509: certificate signed by unknown authority Do you know how to fix it? Thanks

[@computeriseasy]

maybe you are in a domain and you have trusted CA. And in this case you want to use self-signed certificate.

[@metindurmaz5173]

When I use the deployment with a single replica, everything works fine, but when I want to use 2 or more replicas, I get the "ERR_TOO_MANY_REDIRECTS" error.

[@computeriseasy]

check your ingress configs one more time. Maybe something is wrong . have you configured the configmap correctly?