-
Notifications
You must be signed in to change notification settings - Fork 5
Open
Description
I was trying to follow the instructions to configure Keycloak authentication for GoCD. There was a few difficulties since the terminology evolved in Keycloak since the plugin has been written.
Furthermore I found some of the following problems when trying to use the plugin:
-
The plugin assumes authentication URLs start with
/auth
but instead it should get the URL fromhttp://localhost:8080/realms/${realm}/.well-known/openid-configuration
-
The plugin requires some scopes that do not exist (
groups
) in Keycloak 25.0.1, this can be fixed by creating the client scope but would need to be added to the documentation.
Here is the docker compose file I used to conduct my experiment:
docker/compose/gocd.yml
services:
keycloak:
restart: unless-stopped
image: quay.io/keycloak/keycloak:25.0.1
ports:
- "127.0.0.1:8080:8080"
environment:
KEYCLOAK_ADMIN: 'admin'
KEYCLOAK_ADMIN_PASSWORD: 'admin'
KC_METRICS_ENABLED: 'true'
KC_HEALTH_ENABLED: 'true'
ROOT_LOGLEVEL: INFO
command: start-dev
gocdserver:
image: gocd/gocd-server:v24.3.0
ports:
- "127.0.0.1:8153:8153"
- "127.0.0.1:8154:8154"
environment:
GOCD_PLUGIN_INSTALL_keycloak-oauth-authorization-plugin: https://github.com/klinux/gocd-keycloak-oauth-authorization-plugin/releases/download/v2.0.0-21-exp/keycloak-oauth-authorization-plugin-2.0.0-21.jar
Metadata
Metadata
Assignees
Labels
No labels