KC PROXY HEADERS

KC_PROXY_HEADERS Introduced in Keycloak 24.0.0, replacing --proxy KC_PROXY (deprecated)

ProxyHeaders in helm show values bitnami/keycloak

kubectl set env statefulset/keycloak -n YOUR_NS \
  KC_HOSTNAME=https://keycloak.subdomain.example.com \
  KC_HTTP_ENABLED=true \
  KC_PROXY_HEADERS=xforwarded \
  KC_HOSTNAME_STRICT_HTTPS- \
  KC_PROXY-

extraEnvVars:
 - name: KEYCLOAK_EXTRA_ARGS
   value: "--import-realm"
 - name: KEYCLOAK_OVERWRITE_REALM
   value: "true"
 - name: KC_HTTP_ENABLED
   value: "true"
 - name: KC_PROXY_HEADERS
   value: "xforwarded"

WARN [org.keycloak.cookie.DefaultCookieProvider] Non-secure context detected; cookies are not secured, and will not be available in cross-origin POST requests

Related

• xforwarded
• forwarded
• Traefik
• login-status-iframe

See also

• KC_PROXY_HEADERS
• KC_HOSTNAME, KC_HOSTNAME_STRICT, KC_PROXY_HEADERS
• KC_PROXY (deprecated), KC_HOSTNAME, KC_HOSTNAME_STRICT_HTTPS (deprecated), KC_HTTP_ENABLED, KC_PROXY_HEADERS
• KC env variables, KC_BOOTSTRAP_ADMIN_USERNAME, KC_HOSTNAME, KC_HTTP_ENABLED, KC_PROXY_HEADERS
• Keycloak versions