How protect Keycloak Admin Console from Internet

Marco Antônio Pinheiro Vilhena

unread,

Mar 23, 2020, 8:33:30 AM3/23/20

to Keycloak User

Hi Guys,

We started to use the keycloak to protect our applications, and we need expose the keycloak to the Internet and thats working fine. But we can access de Admin Console from the internet too. We are using Keycloak server 9.0.0 into Kubernetes installed using helm (codecentric/keycloak 7.0.0)

I would like know how you solve this issue.

Thanks.

Sankar P

unread,

Mar 23, 2020, 8:34:59 AM3/23/20

to Marco Antônio Pinheiro Vilhena, Keycloak User

You can put keycloak behind nginx and block all admin related paths in your nginx.

திங்., 23 மார்., 2020, பிற்பகல் 6:03 அன்று, Marco Antônio Pinheiro Vilhena <marcoap...@gmail.com> எழுதியது:

--
You received this message because you are subscribed to the Google Groups "Keycloak User" group.
To unsubscribe from this group and stop receiving emails from it, send an email to keycloak-use...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/keycloak-user/2449a71e-13dc-4649-8aba-1e558a4d5c4b%40googlegroups.com.

--

Sankar P
http://psankar.blogspot.com

Marco Antônio Pinheiro Vilhena

unread,

Mar 23, 2020, 8:46:08 AM3/23/20

to Keycloak User

Great Sankar,

Where can I find all admin paths? This action couldn't affect the core authentication features, right?

Em segunda-feira, 23 de março de 2020 09:34:59 UTC-3, Sankar P escreveu:

You can put keycloak behind nginx and block all admin related paths in your nginx.

திங்., 23 மார்., 2020, பிற்பகல் 6:03 அன்று, Marco Antônio Pinheiro Vilhena <marcoap...@gmail.com> எழுதியது:

Hi Guys,

We started to use the keycloak to protect our applications, and we need expose the keycloak to the Internet and thats working fine. But we can access de Admin Console from the internet too. We are using Keycloak server 9.0.0 into Kubernetes installed using helm (codecentric/keycloak 7.0.0)

I would like know how you solve this issue.

Thanks.

--
You received this message because you are subscribed to the Google Groups "Keycloak User" group.

To unsubscribe from this group and stop receiving emails from it, send an email to keyclo...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/keycloak-user/2449a71e-13dc-4649-8aba-1e558a4d5c4b%40googlegroups.com.

Hermine Lalvee

unread,

Mar 23, 2020, 9:21:52 AM3/23/20

to Marco Antônio Pinheiro Vilhena, Keycloak User

Here is the doc : https://www.keycloak.org/docs/latest/server_admin/index.html#admin-endpoints-and-console

To unsubscribe from this group and stop receiving emails from it, send an email to keycloak-use...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/keycloak-user/44dbec27-2ad7-4f9c-ad60-b94366ee39d0%40googlegroups.com.

Reply all

Reply to author

Forward