Hi all,
I'm trying to set up keycloak in GKE in a way that it
accesses a managed sql postgres instance via cloud sql auth proxy. The
cloud sql proxy is:
- using a google service account to create a secure
connection (key is mounted to the container and supplied to the proxy as
an argument),
- is running as a sidecar next to keycloak in a deployment (so keycloak can access it via localhost:5432),
The
issue I seem to be failing to solve is how to tell wifdfly to only use a username and NO password when it tries to
establish a database connection (the empty password is a password and it fails).
I tried to remove and define a new datasource submodule, details are in this SO question:
https://stackoverflow.com/questions/69961269/connect-to-postgres-from-wildfly-without-password.
But no luck yet. Before I start to debug the code itself, I thought I would ask you guys in a hope that someone knows the answer by heart.
Thank you in advance.
Tamas