This is an automated email from the ASF dual-hosted git repository.
vincbeck pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/airflow.git
The following commit(s) were added to refs/heads/main by this push:
new 1d52de07804 Update Keycloak documentation to mention `[api] base_url`
(#66023)
1d52de07804 is described below
commit 1d52de07804ec5d7eeb3f5f9cabadd92cabcac97
Author: Vincent <[email protected]>
AuthorDate: Tue Apr 28 13:33:53 2026 -0400
Update Keycloak documentation to mention `[api] base_url` (#66023)
---
providers/keycloak/docs/auth-manager/setup/config.rst | 16 +++++++++++++++-
1 file changed, 15 insertions(+), 1 deletion(-)
diff --git a/providers/keycloak/docs/auth-manager/setup/config.rst
b/providers/keycloak/docs/auth-manager/setup/config.rst
index 8a89194d062..ef3c6ad275d 100644
--- a/providers/keycloak/docs/auth-manager/setup/config.rst
+++ b/providers/keycloak/docs/auth-manager/setup/config.rst
@@ -35,7 +35,6 @@ or
export
AIRFLOW__CORE__AUTH_MANAGER='airflow.providers.keycloak.auth_manager.keycloak_auth_manager.KeycloakAuthManager'
-Additionally, you'll need to provide some Keycloak-specific configuration
options.
Config Options
--------------
@@ -52,6 +51,21 @@ Required config options:
- ``client_secret``. Secret associated to the client configured in Keycloak to
integrate with Airflow.
- ``realm``. Realm configured in Keycloak associated to Airflow. This realm
define all users, roles, groups and permissions used by Airflow.
+Additionally, you must set the ``base_url`` option in the ``[api]`` section of
your Airflow configuration. This is
+required for the Keycloak auth manager to construct correct redirect URIs
(e.g. for logout). Without it, redirect
+URIs will be relative paths without a hostname, causing Keycloak to reject
them as invalid.
+
+.. code-block:: ini
+
+ [api]
+ base_url = https://your-airflow-host.example.com
+
+or
+
+.. code-block:: bash
+
+ export AIRFLOW__API__BASE_URL='https://your-airflow-host.example.com'
+
Optional config options:
~~~~~~~~~~~~~~~~~~~~~~~~
