fix aiflow-keycloak problem

2026-10-11 20:10:01 +07:00
parent 9f454b6e8e
commit 9ddc4f0585
3 changed files with 29 additions and 7 deletions
@@ -65,11 +65,15 @@ declare -A CLIENT_PUBLIC=(
 # redirectUris. Deteksi kesalahan umum: redirectUris hanya `https://localhost:12443/*`
 # padahal user membuka `https://<ip-host>:12443` → Keycloak menolak "invalid redirect_uri".
 #   <client> = "<scheme> <host_var> <port_var> <default_port>"
+# CATATAN: pakai var TOPOLOGI yang DIISI generator. `AIRFLOW_HOST` SENGAJA TIDAK
+# diisi (penanda komponen external, lihat generate.py) → memakainya membuat
+# comp_addr jatuh ke SICABE_HOST_ADDRESS (alamat host LOKAL), sehingga origin salah
+# di host non-pemilik (mis. compute mengharap airflow di alamat compute, bukan control).
 declare -A CLIENT_ORIGIN=(
  [trino]="https TRINO_HOST TRINO_HTTPS_PORT 12443"
  [grafana]="http GRAFANA_HOST GRAFANA_PORT 12300"
  [openmetadata]="http OPENMETADATA_HOST OPENMETADATA_PORT 12085"
-  [airflow]="http AIRFLOW_HOST AIRFLOW_PORT 12082"
+  [airflow]="http AIRFLOW_WEBSERVER_HOST AIRFLOW_PORT 12082"
  [starrocks]="http STARROCKS_FE_HOST STARROCKS_HTTP_PORT 12030"
 )
 # Alamat efektif: nilai var bila berupa ALAMAT (mengandung titik); kalau kosong/co-located