MinIO + OpenID (Keycloak) on AKS failed to verify TLS

Question

Hi I am at a loss when it comes to configuring OIDC (Keycloak) with MinIO (both are deployed on same AKS cluster). I have configured an Ingress for both, both use the same wildcard cert that I got from DigiCert. However, whenever I got to configure OIDC (either via Helm values or manually in the console) I get the following error:

Get "https://<FQDN_KEYCLOAK>/realms/master/.well-known/openid-configuration": tls: failed to verify certificate: x509: certificate signed by unknown authority

I tried to manually mount the tls secret into /etc/minio/certs on the MinIO pod but same error. Any suggestions? Thanks

UPDATE: I get the same exception when integrating Keycloak (OIDC) with ArgoCD.

Answer 1

UPDATE

You can either get a cert for the FQDN (if using a subdomain), or if you just want to use a wildcard then you need to get the intermediary cert chain, create a secret or configMap, and mount it to /etc/ssl/certs/