We have a superset docker containers which is using keycloak as identity broker. All this setup is working fine on http. Further, we have installed ssl certificate on keycloak and same is also working fine. Our superset and keycloak integration code changes look exactly like its mentioned in the answer here.
Now, when we changed auth uris from http
to https
in superset/docker/pythonpath_dev/client_secret.json
, we are getting below error after the login flow is redirected from keycloak to superset.
Forbidden'[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1091)'
We also tried installing root certificates on superset by mounting them on /usr/local/share/ca-certificates
and then executing update-ca-certificates
in the container, but still there was no help. Any idea how this can be resolved?