https://github.com/pankalog/docker-distribution-keycloak

A repository with reproducible evidence for an issue with connecting CNCF distribution with Keycloak.
https://github.com/pankalog/docker-distribution-keycloak

Last synced: 25 days ago
JSON representation

A repository with reproducible evidence for an issue with connecting CNCF distribution with Keycloak.

• Host: GitHub
• URL: https://github.com/pankalog/docker-distribution-keycloak
• Owner: pankalog
• Created: 2024-10-15T19:33:25.000Z (3 months ago)
• Default Branch: main
• Last Pushed: 2024-12-01T13:43:40.000Z (about 1 month ago)
• Last Synced: 2024-12-01T14:32:30.149Z (about 1 month ago)
• Size: 17.6 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# Keycloak and CNCF Distribution Docker-compose

This repository was made to reproduce the issue of `failed to verify token: token signed by untrusted key with ID` by Distribution upon login of a user to the registry. There is a mismatch between the reported KIDs from Keycloak and Distribution.

This repository was created from [this issue](https://github.com/distribution/distribution/issues/2875), to reproduce the issue easily.

# Launching, reproduction

To reproduce the issue, run the docker-compose project:

```bash

docker compose up -p distributionRepro up -d

```

Wait a minute or two until Keycloak is up and running, and then try to log in to the registry with `testuser` and `secret` as username and password respectively:

```bash

docker login https://localhost:5001 -u testuser -p secret

```

**You need to re-download the adapter config and replace the certificates in the adapterConfig/certs directory before running!**

*Maybe I will be able to use this as a demo repository down the line!*