DongHyeonkaandClaude Opus 5
b2963105a8
The keycloak project ended with four open questions that design could not
settle. A two-VM lab was built to answer them by measurement, and this is
that material: 26 experiments, 125 raw command outputs, 22 browser captures.
Follows the import procedure in README.md.
source/ the originating repository verbatim — 78 documents, 28 SVGs,
8 manifests, plus .source-revision recording the commit
final/ the SSOT
document.md 729 lines written from the 29 experiment documents, not
concatenated: what was predicted, what was measured, and
where the measurement itself was wrong
evidence/raw 125 outputs, flattened to <experiment>__<file> because
the originals collided (01-baseline.txt appeared three
times) and the audit only globs the top level
evidence/meta one per raw file; command and exitCode are null and the
README says why rather than inventing them
evidence/browser 22 captures
assets/ three diagrams through techviz
.techviz/ their VizSpecs
A separate project rather than an addition to keycloak: the B-layer answers
that project's four questions, but the A, C and D layers are about cluster
failure, SSO and operations, and one document.md should hold one subject.
The four question records there can point here through 관계.
Recorded rather than papered over: only three of the 28 diagrams were
remade. The repository forbids hand-drawn SVG and forbids titles inside the
canvas; all 28 originals carry both, so converting them is redrawing, not
reformatting. They stay in source/ and the gap is written into the document.
verify-pipeline.py passes. audit-records.py reports no issues.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
57 lines
3.2 KiB
Plaintext
57 lines
3.2 KiB
Plaintext
수집 시각: 2026-09-03 17:24:54 KST
|
||
대상: Keycloak 26.7.0 × 2 + PostgreSQL 16, k3s 2노드
|
||
|
||
=== [1] 파드 배치 ===
|
||
keycloak-0 1/1 10.42.1.18 kc-lab-2
|
||
keycloak-1 1/1 10.42.0.16 kc-lab-1
|
||
postgres-7b474b88c8-bw7b8 1/1 10.42.1.19 kc-lab-2
|
||
|
||
=== [2] 클러스터 뷰 로그 (Infinispan) ===
|
||
-- keycloak-0 --
|
||
2026-09-03 08:18:23,359 INFO [org.infinispan.CLUSTER] (executor-thread-1) ISPN000094: Received new cluster view for channel ISPN: [keycloak-1-26938(v=16.0.12)|1] (2) [keycloak-1-26938(v=16.0.12), keycloak-0-49501(v=16.0.12)]
|
||
2026-09-03 08:18:23,433 INFO [org.infinispan.CLUSTER] (executor-thread-1) ISPN000079: Channel `ISPN` local address is `keycloak-0-49501`, physical addresses are `[10.42.1.18:7800]`
|
||
-- keycloak-1 --
|
||
2026-09-03 08:18:23,269 INFO [org.infinispan.CLUSTER] (jgroups-5,keycloak-1-26938(v=16.0.12)) ISPN000094: Received new cluster view for channel ISPN: [keycloak-1-26938(v=16.0.12)|1] (2) [keycloak-1-26938(v=16.0.12), keycloak-0-49501(v=16.0.12)]
|
||
2026-09-03 08:18:23,282 INFO [org.infinispan.CLUSTER] (jgroups-5,keycloak-1-26938(v=16.0.12)) ISPN100000: Node keycloak-0-49501 joined the cluster
|
||
2026-09-03 08:18:23,286 INFO [org.infinispan.CLUSTER] (jgroups-5,keycloak-1-26938(v=16.0.12)) ISPN100000: Node keycloak-0-49501 joined the cluster
|
||
|
||
=== [3] JGROUPS_PING 테이블 구조 ===
|
||
Table "public.jgroups_ping"
|
||
Column | Type | Collation | Nullable | Default
|
||
----------------+------------------------+-----------+----------+---------
|
||
address | character varying(200) | | not null |
|
||
name | character varying(200) | | |
|
||
cluster_name | character varying(200) | | not null |
|
||
ip | character varying(200) | | not null |
|
||
coord | boolean | | |
|
||
last_update | bigint | | |
|
||
coordinated_by | character varying(200) | | |
|
||
Indexes:
|
||
"constraint_jgroups_ping" PRIMARY KEY, btree (address)
|
||
|
||
|
||
=== [4] JGROUPS_PING 등록 내역 ===
|
||
name | cluster_name | ip | coord
|
||
------------------+--------------+-----------------+-------
|
||
keycloak-0-49501 | ISPN | 10.42.1.18:7800 | f
|
||
keycloak-1-26938 | ISPN | 10.42.0.16:7800 | t
|
||
(2 rows)
|
||
|
||
|
||
=== [5] 외부 접근 — OIDC discovery ===
|
||
issuer https://auth.hyeonworks.com/realms/master
|
||
authorization_endpoint https://auth.hyeonworks.com/realms/master/protocol/openid-connect/auth
|
||
token_endpoint https://auth.hyeonworks.com/realms/master/protocol/openid-connect/token
|
||
end_session_endpoint https://auth.hyeonworks.com/realms/master/protocol/openid-connect/logout
|
||
jwks_uri https://auth.hyeonworks.com/realms/master/protocol/openid-connect/certs
|
||
|
||
★ 전부 https. 첫 실험에서 확정한 KC_HOSTNAME + KC_PROXY_HEADERS 조합이 작동한다.
|
||
|
||
=== [6] 자원 사용 ===
|
||
keycloak-0 8m 594Mi
|
||
keycloak-1 9m 593Mi
|
||
postgres-7b474b88c8-bw7b8 3m 67Mi
|
||
--- 노드 ---
|
||
kc-lab-1 2248Mi (65%)
|
||
kc-lab-2 1447Mi (58%)
|