From 85eb578f82844d27a0bf951abf4609e4abd31f5c Mon Sep 17 00:00:00 2001
From: Matt Pryor <matt@stackhpc.com>
Date: Thu, 20 Jun 2024 10:51:34 +0100
Subject: [PATCH] Configure Keycloak to respect xforwarded headers (#550)

---
 roles/keycloak/defaults/main.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/roles/keycloak/defaults/main.yml b/roles/keycloak/defaults/main.yml
index 1bcdf1a1..8623e02f 100644
--- a/roles/keycloak/defaults/main.yml
+++ b/roles/keycloak/defaults/main.yml
@@ -75,6 +75,9 @@ keycloak_spec_defaults:
           }
         )
     }}
+  # Configure Keycloak to respect the xforwarded headers from the ingress controller
+  proxy:
+    headers: xforwarded
   # We will do our own ingress with TLS annotations
   ingress:
     enabled: false