I am deploying keycloak with operator 25.0.4
I enabled mtls on cache with a certificate from letsencrypt but it is ignored:
ENV KC_CACHE_EMBEDDED_MTLS_ENABLED=true
ENV KC_CACHE_EMBEDDED_MTLS_KEY_STORE_FILE=/opt/keycloak/conf/keycloakx-keystore.p12
ENV KC_CACHE_EMBEDDED_MTLS_KEY_STORE_PASSWORD=password
Any idea why it is ignored?
Can you try using CACHE_EMBEDDED_MTLS_ENABLED instead without the KC_ prefix and see if that works? There seems to be a bug starting from v25 that causes this
I changed in the custom resource KC_CACHE_EMBEDDED_MTLS_ENABLED to CACHE_EMBEDDED_MTLS_ENABLED.
Now the statefulset looks correct. But MTLS still not enabled.
Here I put more details: https://github.com/keycloak/keycloak/issues/32842