fix: add apisix route for keycloak

hyperledger · Nov 15, 2023 · bfabd31 · bfabd31
1 parent 0b82839
commit bfabd31
Showing 1 changed file with 39 additions and 0 deletions.
diff --git a/infrastructure/charts/agent/templates/apisixroute.yaml b/infrastructure/charts/agent/templates/apisixroute.yaml
@@ -166,4 +166,43 @@ spec:
     {{ template "headers.security" . }}
 
 ---
+
+{{- if .Values.keycloak.enabled }}
+
+apiVersion: apisix.apache.org/v2
+kind: ApisixRoute
+metadata:
+  name: keycloak-oidc-route
+  namespace: "{{ .Release.Namespace }}"
+  labels:
+    {{ template "labels.common" . }}
+spec:
+  http:
+  - name: keycloak-well-known-rule
+    match:
+      hosts:
+      {{- range .Values.ingress.applicationUrls }}
+        - {{ . }}
+      {{- end }}
+      paths:
+      - /realms/*
+      - /resources/*
+    backends:
+       - serviceName: "{{ .Release.Namespace }}-keycloak"
+         servicePort: 443
+    plugins:
+    - name: proxy-rewrite
+      enable: true
+      config:
+        regex_uri: ["^/realms/(.*)","/realms/$1"]
+        headers:
+          set:
+            X-Forwarded-Proto: https
+
+    - name:
+    {{ template "cors" . }}
+
+---
+{{- end }}
+
 {{- end }}