fix(node-baseline): pin the OIDC issuer to the Gateway VIP on prod nodes #41

Merged

jakman85 merged 1 commits from fix/node-keycloak-hosts-pin into main

2026-10-03 22:46:38 +00:00

Author	SHA1	Message	Date
jakman85andClaude Opus 5.5	788eaeae62	fix(node-baseline): pin the OIDC issuer to the Gateway VIP on prod nodes gate / gate (pull_request) Successful in 1m46s Details gate / conformance (pull_request) Has been skipped Details After public DNS moved to the WAN IP (#40), prod nodes resolve keycloak.home.keithjackson.dev to a WAN address the router does not hairpin, so the apiserver could not reach its OIDC issuer. Adds an opt-in node_baseline_hosts_pins /etc/hosts block; prod pins keycloak to GATEWAY_VIP. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-10-03 17:39:37 -05:00

Author

SHA1

Message

Date

jakman85andClaude Opus 5.5

788eaeae62

fix(node-baseline): pin the OIDC issuer to the Gateway VIP on prod nodes

gate / gate (pull_request) Successful in 1m46s

Details

gate / conformance (pull_request) Has been skipped

Details

After public DNS moved to the WAN IP (#40), prod nodes resolve
keycloak.home.keithjackson.dev to a WAN address the router does not
hairpin, so the apiserver could not reach its OIDC issuer. Adds an opt-in
node_baseline_hosts_pins /etc/hosts block; prod pins keycloak to
GATEWAY_VIP.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2026-10-03 17:39:37 -05:00