Se xforwardedfor

keycloak/base/keycloak-ingress.yaml

@@ -6,6 +6,8 @@ metadata:
   annotations:
     cert-manager.io/issuer: "letsencrypt"
     acme.cert-manager.io/http01-edit-in-place: "true"
+    nginx.ingress.kubernetes.io/configuration-snippet: |
+      more_set_headers "X-Forwarded-For $http_x_forwarded_for";
 spec:
   ingressClassName: nginx
   defaultBackend:
@@ -17,9 +19,6 @@ spec:
     - hosts:
         - keycloak.streams.sunet.se
       secretName: keycloak-tls
-    - hosts:
-        - kcadmin.streams.sunet.se
-      secretName: kcadmin-tls
   rules:
     - host: keycloak.streams.sunet.se
       http:
@@ -31,13 +30,3 @@ spec:
                 name: keycloak
                 port:
                   number: 80
-    - host: kcadmin.streams.sunet.se
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: keycloak
-                port:
-                  number: 80

keycloak/keycloak-application.yaml

@@ -7,7 +7,7 @@ spec:
   project: default
   source:
     repoURL: https://platform.sunet.se/streams/streams-manifests.git
-    targetRevision: streams-manifests-2025-01-31-v23
+    targetRevision: streams-manifests-2025-01-31-v24
     path: keycloak/overlays/test
   destination:
     server: https://kubernetes.default.svc

keycloak/overlays/test/keycloak-ingress.yaml

@@ -6,6 +6,8 @@ metadata:
   annotations:
     cert-manager.io/issuer: "letsencrypt"
     acme.cert-manager.io/http01-edit-in-place: "true"
+    nginx.ingress.kubernetes.io/configuration-snippet: |
+      more_set_headers "X-Forwarded-For $http_x_forwarded_for";
 spec:
   ingressClassName: nginx
   defaultBackend:
@@ -17,9 +19,6 @@ spec:
     - hosts:
         - keycloak-test.streams.sunet.se
       secretName: keycloak-tls
-    - hosts:
-        - kcadmin-test.streams.sunet.se
-      secretName: kcadmin-tls
   rules:
     - host: keycloak-test.streams.sunet.se
       http:
@@ -31,13 +30,3 @@ spec:
                 name: keycloak
                 port:
                   number: 80
-    - host: kcadmin-test.streams.sunet.se
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: keycloak
-                port:
-                  number: 80