Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Wrong am service port in the helm chart and the new kustomize #687

Open
bendzsak-dpc opened this issue Jan 7, 2025 · 2 comments
Open

Wrong am service port in the helm chart and the new kustomize #687

bendzsak-dpc opened this issue Jan 7, 2025 · 2 comments
Assignees

Comments

@bendzsak-dpc
Copy link

The helm chart and the new customise am service is configured to forward the requests to the http (port):
https://github.com/ForgeRock/forgeops/blob/main/kustomize-ng/base/am/resources.yaml#L35
https://github.com/ForgeRock/forgeops/blob/main/charts/identity-platform/templates/am-service.yaml#L15

The old kustomize uses the 8081 port:
https://github.com/ForgeRock/forgeops/blob/main/kustomize/base/am/service.yaml#L10

After migrating the helm chart we found an issue with the base url detection. It detected the base url as http/80 instead of https/443. After changing the target port the issue was resolved.

@lee-baines lee-baines self-assigned this Jan 10, 2025
@lee-baines
Copy link
Contributor

Hi @bendzsak-dpc, I've raised a ticket on our side and will look into it over our next sprint and get back to you.
Do you have some more details of the issue your are seeing? When you say base url detection, do you mean in AM configuration or it just external connectivity?
Also, did you migrate from a previous version of Helm or from Kustomize?

@bendzsak-dpc
Copy link
Author

Thanks @lee-baines! There is an URL which gives you various AM endpoints:
FQDN/am/oauth2/realms/root/.well-known/openid-configuration
When we call this endpoint configuring http/80 as the service targetport it gives back the URL-s in http://FQDN:80 format. Then we use the 8081 port we get the URL-s https://FQDN:443 format.

We migrated from the kustomize instance.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

2 participants