Give Kiali its public URL so OIDC redirects resolve #228

Merged

alex merged 1 commit from wiring-guru/kiali-external-url into main 2026-11-11 12:00:42 -07:00 AGit

Conversation 0 Commits 1 Files changed 1 +2

wiring-guru commented 2026-11-11 12:00:02 -07:00

Contributor

Copy link

Kiali advertised https://kiali.alexmickelson.guru:20001/kiali as the redirect_uri because web_port was unset, and tsidp rejects it; pinning web_port 443 and web_schema https produces the uri already registered on the client.

Kiali advertised https://kiali.alexmickelson.guru:20001/kiali as the redirect_uri because web_port was unset, and tsidp rejects it; pinning web_port 443 and web_schema https produces the uri already registered on the client.

wiring-guru added 1 commit 2026-11-11 12:00:02 -07:00

Tell kiali its public url so the OIDC redirect matches the IdP client ... 005b2aca3b

Kiali builds the OIDC redirect_uri from server.web_fqdn, server.web_schema and
server.web_port, falling back to its own listen port when web_port is empty. With
only web_fqdn set it advertised https://kiali.alexmickelson.guru:20001/kiali, which
tsidp refuses because no client lists it, so the browser was sent back to a port the
gateway never publishes and the login dead-ended. Pinning web_port 443 and
web_schema https yields https://kiali.alexmickelson.guru/kiali, the uri the client
already registers.

alex merged commit 005b2aca3b into main 2026-11-11 12:00:42 -07:00

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

alex/infrastructure!228

No description provided.