Skip to content

Commit

Permalink
Minor improvement to the README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
moritzschmitz-oviva committed Feb 16, 2024
1 parent 47ef967 commit 2687084
Showing 1 changed file with 6 additions and 3 deletions.
9 changes: 6 additions & 3 deletions examples/keycloak-config-cli-using-spire/README.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,9 @@
# keycloak-config-cli using spire

This example shows how to leverage Spire in establishing an mTLS connection
between [Keycloak](https://www.keycloak.org/) and [keycloak-config-cli](https://github.com/adorsys/keycloak-config-cli),
a tool to configure Keycloak.

## Setup

1. Create a local cluster for testing
Expand Down Expand Up @@ -59,9 +63,8 @@ This example uses [java-spiffe-helper](https://github.com/spiffe/java-spiffe/tre
initContainer for Keycloak. It fetches the certificates from the `spire-agent` and conveniently provides them to
Keycloak in `pkcs12` format.

> **One important thing to understand though**: Keycloak does not rotate the certificates like Spire does. If you want
> to run the `keycloak-config-cli` job again, you need to make sure Keycloak is also restarted/provided with non-expired
> certificates.
> [!IMPORTANT] Keycloak does not rotate the certificates like Spire does. If you want to run the `keycloak-config-cli`
> job again, you need to make sure Keycloak is also restarted/provided with non-expired certificates.
### Ghostunnel as separate deployment

Expand Down

0 comments on commit 2687084

Please sign in to comment.