Red Hat Single Sign-On (RH SSO) 7.6.2 deployed in OpenShift FIPS enabled environment fails the Liveness and Readiness Probes
Issue
-
After update to
7.6.2-opr-001the keycloak's probes fails. -
We have authentication setup using Redhat SSO and it is down. Trying to access cluster using
kubeconfigbut showing a message of obtaining API key. -
In the latest version
7.6.2, after applying theFIPSenv variable, thekeycloakpod events show the following error and the container will not start:message: | Liveness probe failed: { "probe.eap.dmr.EapProbe": "Error sending probe request: [digital envelope routines: EVP_DigestInit_ex] disabled for FIPS", "probe.eap.dmr.HealthCheckProbe": "Error sending probe request: [digital envelope routines: EVP_DigestInit_ex] disabled for FIPS" } INFO Using the '<USER>' username to authenticate the probe request against the JBoss DMR API. INFO Using the '<USER>' username to authenticate the probe request against the JBoss DMR API.
Environment
- Red Hat Single Sign-On (RH SSO)
- 7.6.2
- Red Hat OpenShift Container Platform (OCP)
- 4.X
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.