带有外部身份提供者的 Keycloak 失败
[英]Keycloak with external Identity Provider fails
问题描述
I have setup keycloak using kubernetes with new realm created with google and github as external Identity Providers.
我已经使用 kubernetes 设置了 keycloak，新的 realm 是用 google 创建的，github 作为外部身份提供者。 I created a simple spring security app configuring the authorization with keycloak.我创建了一个简单的 spring 安全应用程序，使用 keycloak 配置授权。 I could authenticate with internal users and the flow is working as expected.我可以对内部用户进行身份验证，并且流程按预期工作。 But when using the external Identity providers google or github, it fails with similar exception.但是当使用外部身份提供商 google 或 github 时，它会失败并出现类似的异常。 In the log, it shows在日志中，它显示
ERROR [org.keycloak.broker.oidc.AbstractOAuth2IdentityProvider] (default task-33) Failed to make identity provider oauth callback: java.net.UnknownHostException: oauth2.googleapis.com : Name or service not known
at java.base/java.net.Inet4AddressImpl.lookupAllHostAddr(Native Method)
at java.base/java.net.InetAddress$PlatformNameService.lookupAllHostAddr(InetAddress.java:929) at java.base/java.net.InetAddress.getAddressesFromNameService(InetAddress.java:1515)
at java.base/java.net.InetAddress$NameServiceAddresses.get(InetAddress.java:848)
at java.base/java.net.InetAddress.getAllByName0(InetAddress.java:1505)
at java.base/java.net.InetAddress.getAllByName(InetAddress.java:1364)
at java.base/java.net.InetAddress.getAllByName(InetAddress.java:1298)
at org.apache.httpcomponents.core//org.apache.http.impl.conn.SystemDefaultDnsResolver.resolve(SystemDefaultDnsResolver.java:45) at org.apache.httpcomponents.core//org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:112) at org.apache.httpcomponents.core//org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:376) at org.apache.httpcomponents.core//org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.Z93F725A07423FE1C889F448B33
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.base/java.lang.reflect.Method.invoke(Method.java:566)
at org.jboss.resteasy.resteasy-jaxrs@3.11.0.Final//org.jboss.resteasy.core.MethodInjectorImpl.invoke(MethodInjectorImpl.java:138) at org.jboss.resteasy.resteasy-jaxrs@3.11.0.Final//org.jboss.resteasy.core.ResourceMethodInvoker.internalInvokeOnTarget(ResourceMethodInvoker.java:526)
Is that because, keycloak running under kubernetes cluster?那是因为，keycloak 在 kubernetes 集群下运行吗？ The stack shows java.net.UnknownHostException: oauth2.googleapis.com and not sure how to overcome this error.堆栈显示java.net.UnknownHostException: oauth2.googleapis.com并且不确定如何克服此错误。 Please let me know.请告诉我。
1 个解决方案
解决方案1
1 已采纳 2020-06-06 19:06:38
Little background of this issue.这个问题的背景很少。 Environment: Minikube started with driver=none, kubernetes, keycloak with helm cluster using exiting postgres-ha 11 running on ubuntu 19.04环境：Minikube 以 driver=none、kubernetes、keycloak 和 helm 集群启动，使用在 ubuntu 19.04 上运行的退出 postgres-ha 11
To test ping: I deployed kuberentes dnsutils and followed the debugging steps.测试 ping：我部署了kuberentes dnsutils并遵循调试步骤。 I could not ping any google.com from inside the pod.我无法从吊舱内 ping 任何 google.com。 Also the command还有命令
kubectl get pods --namespace=kube-system -l k8s-app=kube-dns
showed that the coredns were not ready or running.表明 coredns 没有准备好或运行。 This was the cause of this issue.这就是这个问题的原因。 After digging through few others posts, espcially this one , I fixed the coredns to start and the rest of things got worked.在挖掘了其他几篇文章后，尤其是这篇文章，我修复了 coredns 以启动并且 rest 的东西得到了工作。 HTH. HTH。
声明:本站的技术帖子网页，遵循CC BY-SA 4.0协议，如果您需要转载，请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.