This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
var TokenSet | |
passport.use('oidc', new Strategy({client}, (tokenSet, userinfo, done)=>{ | |
TokenSet = tokenSet; | |
return done(null, tokenSet.claims()); | |
}) | |
) | |
//And on logout we can set the id_token_hint parameter | |
app.get('/logout', (req, res) => { | |
res.redirect(client.endSessionUrl({ | |
id_token_hint: TokenSet.id_token |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
// start logout request | |
app.get('/logout', (req, res) => { | |
res.redirect(client.endSessionUrl({ | |
client_id: "keycloak-express" | |
} | |
)); | |
}); |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
const keycloakIssuer = await Issuer.discover("http://127.0.0.1:8080/realms/keycloak-express") | |
// I just comment out the line in the client | |
const client = new keycloakIssuer.Client({ | |
client_id: 'keycloak-express', | |
client_secret: 'long_secret-here', | |
redirect_uris: ['http://127.0.0.1:3000/auth/callback'], | |
//post_logout_redirect_uris: ['http://127.0.0.1:3000/logout/callback'], | |
response_types: ['code'], | |
}); |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
2022-09-16 13:00:28,208 WARN [org.keycloak.events] (executor-thread-57) type=LOGOUT_ERROR, realmId=1bfc6eb7-ffa8-497f-96cc-69840b6c3f39, clientId=null, userId=null, ipAddress=127.0.0.1, error=invalid_request | |
2022-09-16 13:11:48,730 WARN [org.keycloak.protocol.oidc.endpoints.LogoutEndpoint] (executor-thread-75) Either the parameter 'client_id' or the parameter 'id_token_hint' is required when 'post_logout_redirect_uri' is used. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
2022-09-16 11:56:37,512 WARN [org.keycloak.events] (executor-thread-0) type=LOGIN_ERROR, realmId=78ae1441-0616-4745-b021-5ca93fc9f779, clientId=null, userId=null, ipAddress=127.0.0.1, error=invalid_code | |
2022-09-16 11:58:56,673 ERROR [org.keycloak.services] (executor-thread-3) KC-SERVICES0095: Client is not allowed to initiate browser login with given response_type. Standard flow is disabled for the client. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# get the service | |
oc get service | |
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE | |
podroute-service ClusterIP 10.217.5.14 <none> 8080/TCP 4m38s | |
# get the route | |
oc get route | |
NAME HOST/PORT PATH SERVICES PORT TERMINATION WILDCARD | |
podroute-route podroute-route-podroute.apps-crc.testing podroute-service 8080 None | |
# should be 3 pod replicas | |
oc get pods |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
spec: {} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
spec: | |
targetNamespaces: | |
- whatever_WATCH_NAMESPACES_is |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
installModes: | |
- supported: true | |
type: OwnNamespace | |
- supported: true | |
type: SingleNamespace | |
- supported: false | |
type: MultiNamespace | |
- supported: true | |
type: AllNamespaces |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
// check the WATCH_NAMESPACE env var to see if populated | |
var watchNamespaceEnvVar = "WATCH_NAMESPACE" | |
watchNamespace, found := os.LookupEnv(watchNamespaceEnvVar) | |
if !found { | |
return "", fmt.Errorf("%s must be set", watchNamespaceEnvVar) | |
} | |
mgr, err := ctrl.NewManager(ctrl.GetConfigOrDie(), ctrl.Options{ | |
Scheme: scheme, | |
MetricsBindAddress: metricsAddr, | |
Port: 9443, |
NewerOlder