-
Bug
-
Resolution: Done
-
Blocker
-
7.3.3.GA, 7.4.0.Beta
-
None
-
False
-
False
-
Regression
-
-
-
-
-
-
-
Undefined
-
EAP 7.3.3 OpenShift image isn't able to register openid-connect clients in RH-SSO 7.4.3. It works correctly with RH-SSO 7.4.2.
Both EAP and RH-SSO are deployed in OpenShift using templates:
- SSO: sso74-https.json
- EAP: eap73-openjdk11-sso-s2i.json
The reported error is
WARN ERROR: Unable to register openid-connect client for module app-profile-jsp in realm eap-realm on "http://${HOSTNAME_HTTP}/app-profile-jsp/*","http://${HOSTNAME_HTTP}:80/app-profile-jsp/*","https://secure-eap-msimka-namespace.apps.pkremens-20uw.eapqe.psi.redhat.com/app-profile-jsp/*","https://secure-eap-msimka-namespace.apps.pkremens-20uw.eapqe.psi.redhat.com:443/app-profile-jsp/*": {"error":"invalid_input","error_description":"A redirect URI is not a valid URI"}
The code in EAP image that fails is keycloak.sh#L953
Logs from EAP pods with enabled script debug are attached, one successful running with RH-SSO 7.4.2 and the other failing with RH-SSO 7.4.3.
- clones
-
-
- Verified
-
- is incorporated by
-
CLOUD-3930 EAP 7.4.0.GA OpenShift Image Release
-
- Closed
-