keycloak 25 version doesnot work when i am calling its service name - codecentric keycloak helm charts

[Ajmalkhan7]

when I am calling keycloak from another test pod using keycloak service name its redirecting to ingress domain.

wget from test pod respose:

wget keycloakx-http.sso:80/auth
--2024-09-10 07:13:01-- http://keycloakx-http.sso/auth
Resolving keycloakx-http.sso (keycloakx-http.sso)...
Connecting to keycloakx-http.sso (keycloakx-http.sso)||:80... connected.
HTTP request sent, awaiting response... 303 See Other
Location: http://keycloakx-http.sso/auth/ [following]
--2024-09-10 07:13:01-- http://keycloakx-http.sso/auth/
Reusing existing connection to keycloakx-http.sso:80.
HTTP request sent, awaiting response... 302 Found
Location: http://keycloak.company.com/auth/admin/ [following]
--2024-09-10 07:13:01-- http://keycloak.company.com/auth/admin/

when i am calling api to retrive token from keycloak, I am not sure if following error happens because of this

Couldn't retrieve remote JWK set: org.springframework.web.client.ResourceAccessException: I/O error on GET request for ...
PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

My helm charts values.yaml

command:

• "/opt/keycloak/bin/kc.sh"
• "start"
• "--spi-events-listener-jboss-logging-success-level=info"
• "--spi-events-listener-jboss-logging-error-level=warn"

extraEnv: |

• name: KEYCLOAK_ADMIN
  value: admin
• name: KEYCLOAK_ADMIN_PASSWORD
  value: admin
• name: JAVA_OPTS_APPEND
  value: >-
  -Djgroups.dns.query={{ include "keycloak.fullname" . }}-headless
  -Dkeycloak.hostname=keycloak.company.com
  -Dkeycloak.proxy=forward
• name: KC_HOSTNAME_STRICT
  value: "false"
• name: KC_HTTP_RELATIVE_PATH
  value: "/auth"
• name: KC_CACHE_STACK
  value: kubernetes
• name: KC_PROXY
  value: edge
• name: HTTP_ADDRESS_FORWARDING
  value: "true"
• name: KC_HOSTNAME
  value: keycloak.company.com
• name: KC_HEALTH_ENABLED
  value: "true"
• name: KC_HTTP_ENABLED # SSL termnites at reverser proxy, need this enabled.
  value: "true"
• name: KC_HOSTNAME_STRICT_HTTPS # SSL termnites at reverser proxy, need this disabled.
  value: "true"
• name: KC_SPI_HOSTNAME_DEFAULT_ADMIN
  value: "keycloak.company.com"
• name: PROXY_ADDRESS_FORWARDING
  value: "true"
• name: KEYCLOAK_PRODUCTION
  value: "true"
• name: KC_PROXY_HEADERS
  value: "xforwarded"

kindly help me resolve this issue.

[github-actions]

This issue has been marked as stale because it has been open for 30 days with no activity. It will be automatically closed in 10 days if no further activity occurs.