registry health failing at keycloak

[ddevadat]

hi

I tried to install registry via registry cli. Everything is running, but the health is failing at sunbird.keycloak.service
curl --location 'http://localhost:8081/health'

{
    "id": "sunbird-rc.registry.health",
    "ver": "1.0",
    "ets": 1687416067384,
    "params": {
        "resmsgid": "",
        "msgid": "e88f170f-591a-42b4-b24d-af7202eb585e",
        "err": "",
        "status": "SUCCESSFUL",
        "errmsg": ""
    },
    "responseCode": "OK",
    "result": {
        "name": "sunbirdrc-registry-api",
        "healthy": false,
        "checks": [
            {
                "name": "sunbird.notification.service",
                "healthy": true,
                "err": "NOTIFICATION_ENABLED",
                "errmsg": "false"
            },
            {
                "name": "sunbird.certificate-api.service",
                "healthy": true,
                "err": "",
                "errmsg": ""
            },
            {
                "name": "sunbird.encryption.service",
                "healthy": true,
                "err": "ENCRYPTION_ENABLED",
                "errmsg": "false"
            },
            {
                "name": "sunbird.signature.service",
                "healthy": true,
                "err": "",
                "errmsg": ""
            },
            {
                "name": "sunbird.file-storage.service",
                "healthy": true,
                "err": "",
                "errmsg": ""
            },
            {
                "name": "sunbird.elastic.service",
                "healthy": true,
                "err": "",
                "errmsg": ""
            },
            {
                "name": "sunbird.keycloak.service",
                "healthy": false,
                "err": "CONNECTION_FAILURE",
                "errmsg": "javax.ws.rs.NotAuthorizedException: HTTP 401 Unauthorized"
            }
        ]
    }
}

[ddevadat]

keycloak container has errors like

example-keycloak-1 | 07:45:51,135 WARN [org.keycloak.events] (default task-1) type=CLIENT_LOGIN_ERROR, realmId=sunbird-rc, clientId=admin-api, userId=null, ipAddress=XX.YY.ZZ.AA, error=invalid_client_credentials, grant_type=client_credentials

[ddevadat]

i regenerated a new credentials from keycloak
Goto Clients -> admin-api -> Credentials

Set KEYCLOAK_SECRET with the copied value in .env file

restarted all services

Any clue where am i going wrong here

[ddevadat]

solved this. Logging it here for tracking

The issue was registry service in docker-compose.yml had a variable sunbird_sso_admin_client_secret which was pointing to a different value

Change it to the below ... after defining KEYCLOAK_SECRET in the .env file

• sunbird_sso_admin_client_secret=${KEYCLOAK_SECRET}