# Can't access master realm (keycloak on kubernetes using istio proxy)

**URL:** <https://forum.keycloak.org/t/cant-access-master-realm-keycloak-on-kubernetes-using-istio-proxy/10582>\
**Category:** Miscellanaeous\
**Created:** [August 18, 2021, 2:04am UTC](https://forum.keycloak.org/t/cant-access-master-realm-keycloak-on-kubernetes-using-istio-proxy/10582 "2021-08-18T02:04:22Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![hairongGao](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/haironggao/32/3729_2.png) [@hairongGao](https://forum.keycloak.org/u/hairongGao)\
**Post date:** [August 18, 2021, 2:04am UTC](https://forum.keycloak.org/t/cant-access-master-realm-keycloak-on-kubernetes-using-istio-proxy/10582/1 "2021-08-18T02:04:22Z")

</div>

Hi there,

I’m new to keycloak and recently working on keycloak on kubernetes. I’m trying to get it work with AWS lb  
and istio-proxy , I can access hello page but unable to load sign in page.

```auto
http://xxx.com/auth/js/keycloak.js?version=beyej”
console
Uncaught ReferenceError: Keycloak is not defined
    <anonymous> https://xxx.com/auth/resources/beyej/admin/keycloak/js/app.js:14

```

So I guess it’s because there’s a http request which is forbidden in HTTPS page. Just wondering if I made any config wrong or is there any workaround? BTW I fork the project from [codecentric/helm-charts](https://github.com/codecentric/helm-charts), not sure if this is the right place to go but if there’s any documentations about keycloak HA infras would be great !

Thanks,  
Ray

---

<div class="post-metadata">

**Author:** ![hairongGao](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/haironggao/32/3729_2.png) [@hairongGao](https://forum.keycloak.org/u/hairongGao)\
**Post date:** [August 18, 2021, 2:10am UTC](https://forum.keycloak.org/t/cant-access-master-realm-keycloak-on-kubernetes-using-istio-proxy/10582/2 "2021-08-18T02:10:18Z")

</div>

Some more details to add,

The way I config istio is using AWS LB to handle https but downgrade to http when the request enter the mesh