Skip to content

Fixes from keycloak testing#609

Merged
Fryguy merged 2 commits into
ManageIQ:masterfrom
jrafanie:fixes-from-keycloak-testing
Jul 21, 2026
Merged

Fixes from keycloak testing#609
Fryguy merged 2 commits into
ManageIQ:masterfrom
jrafanie:fixes-from-keycloak-testing

Conversation

@jrafanie

@jrafanie jrafanie commented Jul 21, 2026

Copy link
Copy Markdown
Member

Fix Reporting-Endpoints hostname in OIDC httpd configs

%{HTTP_HOST}i fails to expand correctly in manageiq/httpd:2-el10_2.1
at the VirtualHost Header always set level, producing a broken URL
like 'i=99' instead of the actual hostname.

Replace with the HTTPD_AUTH_HOST and HTTPD_AUTH_PORT env vars that are
already passed to the container at startup, matching the pattern used
for ServerName and OIDCRedirectURI elsewhere in these configs.

Verified using the Keycloak + httpd + local Rails dev setup described
in oidc.md -- Reporting-Endpoints now renders the correct hostname.

Followup to c3e6e8c which introduced the Reporting-Endpoints header.

Pin httpd image to manageiq/httpd:2-el10

The guides were updated to use OIDCPassClaimsAs both none (6cdcde2)
which requires a newer mod_auth_openidc. The older base OS image ships
an older mod_auth_openidc that does not support this directive; the
el10-based image does.

Comment thread external_auth/oidc.md Outdated
jrafanie added 2 commits July 21, 2026 15:09
The guides were updated to use OIDCPassClaimsAs both none (6cdcde2)
which requires a newer mod_auth_openidc. The older base OS image ships
an older mod_auth_openidc that does not support this directive; the
el10-based image does.
%{HTTP_HOST}i fails to expand correctly in manageiq/httpd:2-el10_2.1
at the VirtualHost Header always set level, producing a broken URL
like 'i=99' instead of the actual hostname.

Replace with the HTTPD_AUTH_HOST and HTTPD_AUTH_PORT env vars that are
already passed to the container at startup, matching the pattern used
for ServerName and OIDCRedirectURI elsewhere in these configs.

Verified using the Keycloak + httpd + local Rails dev setup described
in oidc.md -- Reporting-Endpoints now renders the correct hostname.

Followup to c3e6e8c which introduced the Reporting-Endpoints header.
@jrafanie
jrafanie force-pushed the fixes-from-keycloak-testing branch from cd832f1 to 84b7957 Compare July 21, 2026 19:10
@miq-bot

miq-bot commented Jul 21, 2026

Copy link
Copy Markdown
Member

Checked commits jrafanie/guides@fd1ea43~...84b7957 with ruby 3.3.10, rubocop 1.86.0, haml-lint 0.73.0, and yamllint 1.37.1
0 files checked, 0 offenses detected
Everything looks fine. 👍

@Fryguy
Fryguy merged commit 49ead13 into ManageIQ:master Jul 21, 2026
1 check passed
github-actions Bot pushed a commit to ManageIQ/manageiq.github.io that referenced this pull request Jul 21, 2026
@jrafanie
jrafanie deleted the fixes-from-keycloak-testing branch July 22, 2026 22:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants