Keycloak not redirecting correctly

[chrispward]

I have kafka/keycloak/kafkui setup on my k8 cluster. We use traefik as the ingress controller.

I have been able to setup kafka-ui to sso against keycloak .. sort of...

When it goes through the process of authenticating, it does all of it but 'sticks' on redirected url below with a blank page.

https://mydomain.com/kafka-dev-ui/login/oauth2/code/keycloak?state=9yOBkTkBn1MG2tiiV7xIZycBvLD8JATxoLpP10rv2Qw%3D&session_state=7dd89da0-b1d8-474f-b5db-cead6e6c8d64&iss=https%3A%2F%2Fmydomain%2Fkeycloak%2Frealms%2Fmy-k8&code=2e866d50-917d-4247-b6ae-08057af21bfe.7dd89da0-b1d8-474f-b5db-cead6e6c8d64.82501d31-2ce6-45fd-b2aa-48a40440ba2f

If i then go to and replace the url with https://mydomain.com/kafka-dev-ui the UI pops up and i'm authenticated with the proper permissions and all that (as per the rbac rule)

if i got to https://mydomain.com/kafka-dev-ui/api/authorization I see all the authenticated permissions etc.

I just cant figure out why the redirect is not going bringing up the UI?

Any help would be appreciated.

Additional....
If i go https://mydomain.com/kafka-dev-ui it forces me back into the re-auth processes.

if i do https://mydomain.com/kafka-dev-ui/ it brings up the console.

Additional2.

I just happend to discover... if I call at the beginining .. /kafka-dev-ui
I get the issue above.
If I do /kafka-dev-ui/ ... I dont.
Think its more of a ingress problem ...
I think creating a ingress rule to match /kafka-dev-ui and change to /kafka-dev-ui/ solves my issue.

[Haarolean]

This one, I think: #340 (comment)

[chrispward]

Yes. This is how i did it with traefik.

---

apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
name: kafkaui-ir
namespace: dev-kafka
spec:
entryPoints:
- web
- websecure
routes:
- match: Path(/kafka-dev-ui)
kind: Rule
middlewares:
- name: kafkaui-replace-url
namespace: dev-kafka
services: # Service to redirect requests to
- name: kafka-ui
port: 80
kind: Service
priority: 2
- match: PathPrefix(/kafka-dev-ui)
kind: Rule
services: # Service to redirect requests to
- name: kafka-ui
port: 80
kind: Service
priority: 1
tls:
secretName: internal-ca

---

apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
name: kafkaui-replace-url
namespace: dev-kafka
spec:
replacePath:
path: /kafka-dev-ui/