Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Start keycloak in prod mode #959

Merged
merged 5 commits into from
Feb 10, 2024
Merged

Start keycloak in prod mode #959

merged 5 commits into from
Feb 10, 2024

Conversation

corneliusroemer
Copy link
Contributor

No description provided.

@corneliusroemer corneliusroemer added the preview Triggers a deployment to argocd label Feb 9, 2024
@corneliusroemer
Copy link
Contributor Author

Heh it works now:

Changes detected in configuration. Updating the server image.
Updating the configuration and installing your custom providers, if any. Please wait.
2024-02-09 14:17:35,283 INFO  [io.quarkus.deployment.QuarkusAugmentor] (main) Quarkus augmentation completed in 5684ms
Server configuration updated and persisted. Run the following command to review the configuration:

	kc.sh show-config

Next time you run the server, just run:

	kc.sh start --optimized --import-realm=--hostname-url=https://authentication-keycloak-prod.loculus.org --hostname-url=https://authentication-keycloak-prod.loculus.org --hostname-debug=true

2024-02-09 14:17:36,283 INFO  [org.keycloak.quarkus.runtime.hostname.DefaultHostnameProvider] (main) Hostname settings: Base URL: https://authentication-keycloak-prod.loculus.org, Hostname: authentication-keycloak-prod.loculus.org, Strict HTTPS: true, Path: /, Strict BackChannel: false, Admin URL: <unset>, Admin: <request>, Port: -1, Proxied: true
2024-02-09 14:17:37,659 WARN  [io.quarkus.agroal.runtime.DataSources] (main) Datasource <default> enables XA but transaction recovery is not enabled. Please enable transaction recovery by setting quarkus.transaction-manager.enable-recovery=true, otherwise data may be lost if the application is terminated abruptly
2024-02-09 14:17:38,412 WARN  [org.infinispan.PERSISTENCE] (keycloak-cache-init) ISPN000554: jboss-marshalling is deprecated and planned for removal
2024-02-09 14:17:38,535 INFO  [org.infinispan.CONTAINER] (keycloak-cache-init) ISPN000556: Starting user marshaller 'org.infinispan.jboss.marshalling.core.JBossUserMarshaller'
2024-02-09 14:17:38,633 INFO  [org.infinispan.CLUSTER] (keycloak-cache-init) ISPN000088: Unable to use any JGroups configuration mechanisms provided in properties {}. Using default JGroups configuration!
2024-02-09 14:17:38,810 INFO  [org.infinispan.CLUSTER] (keycloak-cache-init) ISPN000078: Starting JGroups channel `ISPN`
2024-02-09 14:17:38,814 INFO  [org.jgroups.JChannel] (keycloak-cache-init) local_addr: e4e98f7c-6383-49e6-adc0-fa5cf50376fe, name: loculus-keycloak-75f4584d6d-rwx5l-65051
2024-02-09 14:17:38,837 WARN  [org.jgroups.protocols.UDP] (keycloak-cache-init) JGRP000015: the send buffer of socket MulticastSocket was set to 1MB, but the OS only allocated 212.99KB
2024-02-09 14:17:38,837 WARN  [org.jgroups.protocols.UDP] (keycloak-cache-init) JGRP000015: the receive buffer of socket MulticastSocket was set to 20MB, but the OS only allocated 212.99KB
2024-02-09 14:17:38,837 WARN  [org.jgroups.protocols.UDP] (keycloak-cache-init) JGRP000015: the send buffer of socket MulticastSocket was set to 1MB, but the OS only allocated 212.99KB
2024-02-09 14:17:38,838 WARN  [org.jgroups.protocols.UDP] (keycloak-cache-init) JGRP000015: the receive buffer of socket MulticastSocket was set to 25MB, but the OS only allocated 212.99KB
2024-02-09 14:17:38,846 INFO  [org.jgroups.protocols.FD_SOCK2] (keycloak-cache-init) server listening on *.38198
2024-02-09 14:17:39,013 WARN  [io.quarkus.vertx.http.runtime.VertxHttpRecorder] (main) The X-Forwarded-* and Forwarded headers will be considered when determining the proxy address. This configuration can cause a security issue as clients can forge requests and send a forwarded header that is not overwritten by the proxy. Please consider use one of these headers just to forward the proxy address in requests.
2024-02-09 14:17:40,862 INFO  [org.jgroups.protocols.pbcast.GMS] (keycloak-cache-init) loculus-keycloak-75f4584d6d-rwx5l-65051: no members discovered after 2006 ms: creating cluster as coordinator
2024-02-09 14:17:40,869 INFO  [org.infinispan.CLUSTER] (keycloak-cache-init) ISPN000094: Received new cluster view for channel ISPN: [loculus-keycloak-75f4584d6d-rwx5l-65051|0] (1) [loculus-keycloak-75f4584d6d-rwx5l-65051]
2024-02-09 14:17:40,875 INFO  [org.infinispan.CLUSTER] (keycloak-cache-init) ISPN000079: Channel `ISPN` local address is `loculus-keycloak-75f4584d6d-rwx5l-65051`, physical addresses are `[10.42.0.195:53734]`
2024-02-09 14:17:40,884 WARN  [org.infinispan.CONFIG] (keycloak-cache-init) ISPN000569: Unable to persist Infinispan internal caches as no global state enabled
2024-02-09 14:17:41,260 INFO  [org.keycloak.connections.infinispan.DefaultInfinispanConnectionProviderFactory] (main) Node name: loculus-keycloak-75f4584d6d-rwx5l-65051, Site name: null
2024-02-09 14:17:41,262 INFO  [org.keycloak.broker.provider.AbstractIdentityProviderMapper] (main) Registering class org.keycloak.broker.provider.mappersync.ConfigSyncEventListener
2024-02-09 14:17:43,251 INFO  [org.keycloak.quarkus.runtime.storage.legacy.liquibase.QuarkusJpaUpdaterProvider] (main) Initializing database schema. Using changelog META-INF/jpa-changelog-master.xml

UPDATE SUMMARY
Run:                        117
Previously run:               0
Filtered out:                 0
-------------------------------
Total change sets:          117

2024-02-09 14:17:46,119 INFO  [org.keycloak.services] (main) KC-SERVICES0050: Initializing master realm
2024-02-09 14:17:46,993 INFO  [org.keycloak.exportimport.singlefile.SingleFileImportProvider] (main) Full importing from file /opt/keycloak/bin/../data/import/keycloak-config.json
2024-02-09 14:17:50,156 INFO  [org.keycloak.exportimport.util.ImportUtils] (main) Realm 'loculusRealm' imported
2024-02-09 14:17:50,185 INFO  [org.keycloak.exportimport.dir.DirImportProvider] (main) Importing from directory /opt/keycloak/bin/../data/import
2024-02-09 14:17:50,185 INFO  [org.keycloak.services] (main) KC-SERVICES0030: Full model import requested. Strategy: IGNORE_EXISTING
2024-02-09 14:17:50,186 INFO  [org.keycloak.services] (main) KC-SERVICES0032: Import finished successfully
2024-02-09 14:17:50,260 INFO  [io.quarkus] (main) Keycloak 23.0.6 on JVM (powered by Quarkus 3.2.10.Final) started in 14.880s. Listening on: http://0.0.0.0:8080
2024-02-09 14:17:50,260 INFO  [io.quarkus] (main) Profile prod activated.
2024-02-09 14:17:50,260 INFO  [io.quarkus] (main) Installed features: [agroal, cdi, hibernate-orm, jdbc-h2, jdbc-mariadb, jdbc-mssql, jdbc-mysql, jdbc-oracle, jdbc-postgresql, keycloak, logging-gelf, micrometer, narayana-jta, reactive-routes, resteasy-reactive, resteasy-reactive-jackson, smallrye-context-propagation, smallrye-health, vertx]
2024-02-09 14:17:50,319 INFO  [org.keycloak.services] (main) KC-SERVICES0009: Added user 'admin' to realm 'master'

@corneliusroemer corneliusroemer merged commit 10ee714 into main Feb 10, 2024
9 checks passed
@corneliusroemer corneliusroemer deleted the keycloak-prod branch February 10, 2024 23:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
preview Triggers a deployment to argocd
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants