Portworx Backup UI access

Access the Portworx Backup UI using DNS over HTTPS

To access Portworx Backup user interface as a user from a cluster with load balancer and self-signed certificates installed over HTTPS, perform the following steps:

1. From the command prompt, navigate to the cluster where your Portworx Backup is installed.

2. Edit the keycloak sts:

   kubectl edit sts pxcentral-keycloak -n <backup-installed-namespace> 

3. Append this new key in env section:

   - name: KC_HOSTNAME 
     value: <px-backup-ui-host-name>

4. Set the following key values to true:

   - name: KC_HOSTNAME_STRICT
     value: "true"
   - name: KC_HOSTNAME_STRICT_HTTPS
     value: "true"

Access the Portworx Backup UI over HTTP

To access Portworx Backup user interface over HTTP:

1. From the command prompt, navigate to the cluster where your Portworx Backup is installed.

2. Edit the keycloak sts:

   kubectl edit sts pxcentral-keycloak -n <backup-installed-namespace>

3. Append this new key in env section:

   - name: KC_HTTP_ENABLED
     value: `true`

4. Delete the following key in env section:

   - name: KC_PROXY 
     value: edge

Browser settings in Keycloak

If you are on Keycloak version 21.1.1 and above, perform the following steps to resolve Keycloak log out issue after a refresh:

1. Login to Keycloak console as an admin user and navigate to left navigation pane.

2. Click Authentication and then click Browser.

3. Navigate to forms and then choose Alternative from the drop-down.

If you are on Keycloak version 16.1.1 and below, perform the following steps to resolve log out issue after a refresh:

1. Login to Keycloak console as an admin user and navigate to left navigation pane.

2. Click Authentication and then choose Browser drop-down that is below the Authentication tab.

3. Navigate to forms row and select the Alternative option and Keylcoak auto-saves this setting.