From acc378401a920bb97d2a42fd6347bb46b024b7d6 Mon Sep 17 00:00:00 2001
From: dvirlabs <dvirlabs@gmail.com>
Date: Sun, 15 Mar 2026 06:43:56 +0200
Subject: [PATCH] Set keycloak with http instead https for traefik and keep
 https for users (external

---
 manifests/keycloak/values.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/manifests/keycloak/values.yaml b/manifests/keycloak/values.yaml
index c5a5a47..766730a 100644
--- a/manifests/keycloak/values.yaml
+++ b/manifests/keycloak/values.yaml
@@ -13,6 +13,7 @@ auth:
   adminPassword: adminpassword
 
 production: true
+proxy: edge
 proxyHeaders: xforwarded
 
 replicaCount: 1
@@ -31,6 +32,7 @@ ingress:
   ingressClassName: traefik
   hostname: keycloak.dvirlabs.com
   path: /
+  pathType: Prefix
   servicePort: http
   annotations:
     traefik.ingress.kubernetes.io/router.entrypoints: websecure
@@ -88,6 +90,10 @@ customReadinessProbe:
 extraEnvVars:
   - name: KEYCLOAK_LOGLEVEL
     value: INFO
+  - name: KC_HTTP_ENABLED
+    value: "true"
+  - name: KC_PROXY_HEADERS
+    value: xforwarded
 
 configuration: ""
 existingConfigmap: ""