DongHyeonkaandClaude Opus 5
4177fb6a48
Both pods go NotReady, the Service endpoint list empties and the front door returns 503, so adding Keycloak replicas buys nothing against database loss. The node holding the session in cache fails too, because a refresh writes LAST_SESSION_REFRESH. Recovery was automatic in about fifteen seconds with no restart, which is what readiness rather than liveness buys. The observability finding matters as much: up stayed at 1 through a total outage, so alerting on it would have caught nothing. kube-state-metrics is missing and pod readiness is therefore not recorded as a metric. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
30 lines
1.4 KiB
Plaintext
30 lines
1.4 KiB
Plaintext
=== 파드 Ready 상태 — DB 가 없으면 어떻게 되는가 ===
|
|
keycloak-0 false 0
|
|
keycloak-1 false 0
|
|
|
|
=== Service 엔드포인트 ===
|
|
Warning: v1 Endpoints is deprecated in v1.33+; use discovery.k8s.io/v1 EndpointSlice
|
|
Warning: v1 Endpoints is deprecated in v1.33+; use discovery.k8s.io/v1 EndpointSlice
|
|
notReady: [10.42.0.35 10.42.1.67]
|
|
=== health/ready 상세 ===
|
|
전체: DOWN
|
|
Graceful Shutdown UP
|
|
Keycloak cluster health check UP
|
|
Keycloak database connections async health check DOWN
|
|
Keycloak Initialized UP
|
|
|
|
=== ④ 다시 — 서명 검증만 필요한 경로는 살아 있는가 ===
|
|
JWKS 엔드포인트(realm 공개키) HTTP 200
|
|
realm 메타데이터(.well-known) HTTP 200
|
|
관리 API(세션 조회 필요) HTTP 500
|
|
|
|
=== 외부 진입점 ===
|
|
https://auth.hyeonworks.com/realms/master HTTP 503
|
|
|
|
=== Keycloak 로그 — 실제 오류 ===
|
|
at io.agroal.pool.ConnectionPool$CreateConnectionTask.call(ConnectionPool.java:664)
|
|
at io.agroal.pool.ConnectionPool$CreateConnectionTask.call(ConnectionPool.java:645)
|
|
Caused by: java.net.ConnectException: Connection refused
|
|
at org.postgresql.core.v3.ConnectionFactoryImpl.tryConnect(ConnectionFactoryImpl.java:219)
|
|
at org.postgresql.core.v3.ConnectionFactoryImpl.openConnectionImpl(ConnectionFactoryImpl.java:365)
|