Howto traefik->keycloak gatekeeper->service? The Next CEO of Stack OverflowCannot access...
Why is there a PLL in CPU?
Can a caster that cast Polymorph on themselves stop concentrating at any point even if their Int is low?
How to be diplomatic in refusing to write code that breaches the privacy of our users
Why does C# sound extremely flat when saxophone is tuned to G?
If I blow insulation everywhere in my attic except the door trap, will heat escape through it?
What can we do to stop prior company from asking us questions?
What is the purpose of the Evocation wizard's Potent Cantrip feature?
How did people program for Consoles with multiple CPUs?
Why doesn't a table tennis ball float on the surface? How do we calculate buoyancy here?
Should I tutor a student who I know has cheated on their homework?
Apart from "berlinern", do any other German dialects have a corresponding verb?
How long to clear the 'suck zone' of a turbofan after start is initiated?
How to safely derail a train during transit?
Why did we only see the N-1 starfighters in one film?
Science fiction (dystopian) short story set after WWIII
Why didn't Khan get resurrected in the Genesis Explosion?
What is the point of a new vote on May's deal when the indicative votes suggest she will not win?
What does "Its cash flow is deeply negative" mean?
The King's new dress
Failed to fetch jessie backports repository
Is it my responsibility to learn a new technology in my own time my employer wants to implement?
Visit to the USA with ESTA approved before trip to Iran
Implement the Thanos sorting algorithm
Is HostGator storing my password in plaintext?
Howto traefik->keycloak gatekeeper->service?
The Next CEO of Stack OverflowCannot access server shares over VPNHow do you handle authentication across domains?Creative IP/subnet/dns schemesHow to set a static route for an external IP addressbest approach for small network cut off from main domainWhat do the OS X authorization mechanisms actually do?No internet access, but DHCP gives out IP?Simple reverse proxy with TraefikTraefik can't access containersHow to setup Traefik for HA? Need a reverse-proxy in front of Traefik?
My question is:
Specifically, how do I configure traefik to double proxy through keycloak gatekeepr to authenticate my services as outlined below?
I know my authentication chain looks like the title suggests but I'm completely missing the configuration requirements for traefik to point to keycloak gatekeeper, et al.
background:
I'm building a fairly complicated development home lab and trying to implement keycloak authentication/authorization behind a traefik proxy. My network layout is such that I'm afforded name resolution via local dnsmasq -so IP/name resolution is not a problem. See here for my network setup.
The basic Layout is like this-ish:
- dnsmasq listens on localhost and dhcp (when connected) and a private network (i.e. 127.0.0.1, 10.x.x.x and optionally 192.x.x.x)
- traefik listens on :80/443 and routes to my services on the private (10.x.x.x) network just fine -similarly over my docker custom netwok. No problems.
- keycloak works just fine routing to services on it's own (when traefik is shutdown and I use keycloak.js or other mechanisms)
There are a lot of moving parts here so I've tried to simplify this question as much as possible.
Any and all help is welcome.
networking reverse-proxy authentication proxypass
asked 5 mins ago
Karl N. RedmanKarl N. Redman
12
New contributor
Karl N. Redman is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
My question is:
Specifically, how do I configure traefik to double proxy through keycloak gatekeepr to authenticate my services as outlined below?
I know my authentication chain looks like the title suggests but I'm completely missing the configuration requirements for traefik to point to keycloak gatekeeper, et al.
background:
I'm building a fairly complicated development home lab and trying to implement keycloak authentication/authorization behind a traefik proxy. My network layout is such that I'm afforded name resolution via local dnsmasq -so IP/name resolution is not a problem. See here for my network setup.
The basic Layout is like this-ish:
- dnsmasq listens on localhost and dhcp (when connected) and a private network (i.e. 127.0.0.1, 10.x.x.x and optionally 192.x.x.x)
- traefik listens on :80/443 and routes to my services on the private (10.x.x.x) network just fine -similarly over my docker custom netwok. No problems.
- keycloak works just fine routing to services on it's own (when traefik is shutdown and I use keycloak.js or other mechanisms)
There are a lot of moving parts here so I've tried to simplify this question as much as possible.
Any and all help is welcome.
networking reverse-proxy authentication proxypass
asked 5 mins ago
Karl N. RedmanKarl N. Redman
12
New contributor
Karl N. Redman is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
My question is:
Specifically, how do I configure traefik to double proxy through keycloak gatekeepr to authenticate my services as outlined below?
I know my authentication chain looks like the title suggests but I'm completely missing the configuration requirements for traefik to point to keycloak gatekeeper, et al.
background:
I'm building a fairly complicated development home lab and trying to implement keycloak authentication/authorization behind a traefik proxy. My network layout is such that I'm afforded name resolution via local dnsmasq -so IP/name resolution is not a problem. See here for my network setup.
The basic Layout is like this-ish:
- dnsmasq listens on localhost and dhcp (when connected) and a private network (i.e. 127.0.0.1, 10.x.x.x and optionally 192.x.x.x)
- traefik listens on :80/443 and routes to my services on the private (10.x.x.x) network just fine -similarly over my docker custom netwok. No problems.
- keycloak works just fine routing to services on it's own (when traefik is shutdown and I use keycloak.js or other mechanisms)
There are a lot of moving parts here so I've tried to simplify this question as much as possible.
Any and all help is welcome.
networking reverse-proxy authentication proxypass
asked 5 mins ago
Karl N. RedmanKarl N. Redman
12
New contributor
Karl N. Redman is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
My question is:
Specifically, how do I configure traefik to double proxy through keycloak gatekeepr to authenticate my services as outlined below?
I know my authentication chain looks like the title suggests but I'm completely missing the configuration requirements for traefik to point to keycloak gatekeeper, et al.
background:
I'm building a fairly complicated development home lab and trying to implement keycloak authentication/authorization behind a traefik proxy. My network layout is such that I'm afforded name resolution via local dnsmasq -so IP/name resolution is not a problem. See here for my network setup.
The basic Layout is like this-ish:
- dnsmasq listens on localhost and dhcp (when connected) and a private network (i.e. 127.0.0.1, 10.x.x.x and optionally 192.x.x.x)
- traefik listens on :80/443 and routes to my services on the private (10.x.x.x) network just fine -similarly over my docker custom netwok. No problems.
- keycloak works just fine routing to services on it's own (when traefik is shutdown and I use keycloak.js or other mechanisms)
There are a lot of moving parts here so I've tried to simplify this question as much as possible.
Any and all help is welcome.
networking reverse-proxy authentication proxypass
networking reverse-proxy authentication proxypass
asked 5 mins ago
Karl N. RedmanKarl N. Redman
12
New contributor
Karl N. Redman is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 5 mins ago
Karl N. RedmanKarl N. Redman
12
New contributor
Karl N. Redman is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 5 mins ago
Karl N. RedmanKarl N. Redman
12
New contributor
Karl N. Redman is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 5 mins ago
Karl N. RedmanKarl N. Redman
12
asked 5 mins ago
Karl N. RedmanKarl N. Redman
12
12
New contributor
Karl N. Redman is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
Karl N. Redman is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
Karl N. Redman is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "2"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Karl N. Redman is a new contributor. Be nice, and check out our Code of Conduct.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f960563%2fhowto-traefik-keycloak-gatekeeper-service%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Karl N. Redman is a new contributor. Be nice, and check out our Code of Conduct.
Karl N. Redman is a new contributor. Be nice, and check out our Code of Conduct.
Karl N. Redman is a new contributor. Be nice, and check out our Code of Conduct.
Karl N. Redman is a new contributor. Be nice, and check out our Code of Conduct.
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f960563%2fhowto-traefik-keycloak-gatekeeper-service%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
