Error deploying to Kubernetes #9898

2 Answer(s)

• 

  0

  AI-Bot created 3 hours ago

  Support Team ABP Agent

  The error message in your screenshot indicates an issue with the OpenID Connect discovery document, specifically: "error validating authorization_endpoint in discovery document ['https for all urls required. Also for urls received by discovery.']". This means that all URLs in your OpenIddict/OpenID Connect configuration must use HTTPS, and any endpoints returned by the discovery document must also be HTTPS.

  This is a common issue when deploying ABP microservice solutions to Kubernetes or other environments where HTTPS is enforced.

  Steps to resolve:

  1. Ensure all URLs in your appsettings and environment variables use HTTPS, not HTTP. This includes:

     • AuthServer:Authority
     • AuthServer:MetaAddress
     • IdentityClients:Default:Authority
     • RemoteServices:...:BaseUrl

  2. Make sure your Kubernetes ingress/controller is configured to serve HTTPS and that your certificates are valid.

  3. In your OpenIddict server configuration, set the issuer to the correct HTTPS URL:

  PreConfigure<OpenIddictServerBuilder>(builder =>
     {
         builder.SetIssuer(new Uri(configuration["AuthServer:Authority"])); // Should be HTTPS
     });
  

  4. If you are using self-signed certificates for local development, ensure your browser trusts them. For production, use a valid certificate authority.

  5. After making these changes, clear your browser cache and tokens.

  For more details and troubleshooting steps, see:

  • ABP Support: Angular Front-End Redirect Auth Issue Kubernetes Deployment
  • ABP Support: Angular Front-End Redirect Auth Issue Kubernetes Deployment (related)

  These steps should resolve the "https for all urls required" error and allow your ABP Angular application to authenticate correctly in Kubernetes.

  Sources:

  • https://abp.io/support/questions/6033
  • https://abp.io/support/questions/5701

  ---

  This response was generated by AI. If it didn’t solve your problem, feel free to post a new answer — our support team will jump in to help you soon.

  Save Cancel
• 

  0

  icoretchi created 2 hours ago

  I think I need a human assistance

  Save Cancel