Hi all,
I'm trying to set up keycloak in GKE in a way that it accesses a managed sql postgres instance via cloud sql auth proxy. The cloud sql proxy is:
- using a service account to create a secure connection (key is mounted to the container and supplied to the proxy as an argument),
- is running as a sidecar next to keycloak in a pod (so keycloak can access it via localhost:5432),
The issue I seem to be failing to solve is how to tell keycloak (or rather wifdfly) to only use a username and NO password when it tries to establish a connection (the empty password is a password and it fails).
I tried to remove and define a new datasource submodule, details are in this SO question:
https://stackoverflow.com/questions/69961269/connect-to-postgres-from-wildfly-without-password.
But no luck yet.
Best regards,
Tamas