This error occurs when Kubernetes OIDC authentication fails to connect to or validate tokens from a Keycloak identity provider, typically due to misconfiguration, network issues, or certificate problems.
Fixes Keycloak integration failed
# Keycloak integration failedKeycloak integration failed
The "Keycloak integration failed" error indicates that the API server cannot authenticate users through Keycloak OIDC integration.
kubectl get pods -n kube-system kube-apiserver-<node> -o yaml | grep -A2 oidc
curl -k https://keycloak.example.com
openssl s_client -connect keycloak.example.com:443 2>/dev/null | openssl x509 -noout -dates
curl -k https://keycloak.example.com/auth/realms/kubernetes/.well-known/openid-configuration
kubectl logs -n kube-system pod/kube-apiserver-<node> | grep -i keycloak
Keycloak OIDC requires: Keycloak realm, client application, API server OIDC flags, users with RBAC roles.