Terraform: failed to start zitadel org v2 client: OpenID Provider Configuration Discovery has failed

⚙️Configuration🏬Self-hosted❓Question❌Unsolved

I am running zitadel in docker (MacOS Docker Desktop v4.70.0) using:
https://github.com/zitadel/zitadel/blob/main/deploy/compose/docker-compose.yml

Except I updated traefik to have zitadel at zitadel.localhostzitadel.localhost, and I updated ${ZITADEL_DOMAIN}${ZITADEL_DOMAIN} to be the same. I can access zitadel from my browser just fine.

I configured ZITADEL_FIRSTINSTANCE_ORG_MACHINE*ZITADEL_FIRSTINSTANCE_ORG_MACHINE* envs to generate a machine-key.jsonmachine-key.json file.

Now I am trying to use the terraform docker image so developers don't need to install terraform. However I am having issues.

If I configure the provider like:

provider "zitadel" {
  domain           = "zitadel.localhost"
  insecure         = true
  port             = 80
  jwt_profile_file = "machine-key.json"
}

provider "zitadel" {
  domain           = "zitadel.localhost"
  insecure         = true
  port             = 80
  jwt_profile_file = "machine-key.json"
}

I get:

│ Error: failed to start zitadel org v2 client: OpenID Provider Configuration Discovery has failed
│ Get "http://zitadel.localhost/.well-known/openid-configuration": dial tcp 127.0.0.1:80: connect: connection refused

│ Error: failed to start zitadel org v2 client: OpenID Provider Configuration Discovery has failed
│ Get "http://zitadel.localhost/.well-known/openid-configuration": dial tcp 127.0.0.1:80: connect: connection refused

Which makes sense because terraform is running in the docker network and therefore zitadel.localhostzitadel.localhost probably resolves to the container itself and doesn't go through traefik.

So then I tried:

provider "zitadel" {
  domain           = "zitadel"
  insecure         = true
  port             = 8080
  jwt_profile_file = "machine-key.json"
}

provider "zitadel" {
  domain           = "zitadel"
  insecure         = true
  port             = 8080
  jwt_profile_file = "machine-key.json"
}

Which is using the host and port for the zitadel container in the docker network. But now I get:

│ Error: failed to start zitadel org v2 client: OpenID Provider Configuration Discovery has failed
│ http status not ok: 404 Not Found unable to set instance using origin &{zitadel:8080  http} (ExternalDomain is zitadel.localhost): ID=QUERY-1kIjX Message=Instance not found. Make sure you got the domain right. Check out https://zitadel.com/docs/apis/introduction#domains

│ Error: failed to start zitadel org v2 client: OpenID Provider Configuration Discovery has failed
│ http status not ok: 404 Not Found unable to set instance using origin &{zitadel:8080  http} (ExternalDomain is zitadel.localhost): ID=QUERY-1kIjX Message=Instance not found. Make sure you got the domain right. Check out https://zitadel.com/docs/apis/introduction#domains

This seems to be because I am trying to access it using the zitadelzitadeldomain but it expects zitadel.localhostzitadel.localhost. So, how can I run terraform within docker and have it work correctly?

GitHub

zitadel/deploy/compose/docker-compose.yml at main · zitadel/zitadel

ZITADEL - Identity infrastructure, simplified for you. - zitadel/zitadel

Terraform: failed to start zitadel org v2 client: OpenID Provider Configuration Discovery has failed

⚙️Configuration🏬Self-hosted❓Question❌Unsolved

provider "zitadel" {
  domain           = "zitadel.localhost"
  insecure         = true
  port             = 80
  jwt_profile_file = "machine-key.json"
}

provider "zitadel" {
  domain           = "zitadel.localhost"
  insecure         = true
  port             = 80
  jwt_profile_file = "machine-key.json"
}

I get:

│ Error: failed to start zitadel org v2 client: OpenID Provider Configuration Discovery has failed
│ Get "http://zitadel.localhost/.well-known/openid-configuration": dial tcp 127.0.0.1:80: connect: connection refused

│ Error: failed to start zitadel org v2 client: OpenID Provider Configuration Discovery has failed
│ Get "http://zitadel.localhost/.well-known/openid-configuration": dial tcp 127.0.0.1:80: connect: connection refused

provider "zitadel" {
  domain           = "zitadel"
  insecure         = true
  port             = 8080
  jwt_profile_file = "machine-key.json"
}

provider "zitadel" {
  domain           = "zitadel"
  insecure         = true
  port             = 8080
  jwt_profile_file = "machine-key.json"
}

Which is using the host and port for the zitadel container in the docker network. But now I get:

│ Error: failed to start zitadel org v2 client: OpenID Provider Configuration Discovery has failed
│ http status not ok: 404 Not Found unable to set instance using origin &{zitadel:8080  http} (ExternalDomain is zitadel.localhost): ID=QUERY-1kIjX Message=Instance not found. Make sure you got the domain right. Check out https://zitadel.com/docs/apis/introduction#domains

│ Error: failed to start zitadel org v2 client: OpenID Provider Configuration Discovery has failed
│ http status not ok: 404 Not Found unable to set instance using origin &{zitadel:8080  http} (ExternalDomain is zitadel.localhost): ID=QUERY-1kIjX Message=Instance not found. Make sure you got the domain right. Check out https://zitadel.com/docs/apis/introduction#domains

GitHub

zitadel/deploy/compose/docker-compose.yml at main · zitadel/zitadel

ZITADEL - Identity infrastructure, simplified for you. - zitadel/zitadel

Terraform: failed to start zitadel org v2 client: OpenID Provider Configuration Discovery has failed

Terraform: failed to start zitadel org v2 client: OpenID Provider Configuration Discovery has failed

Continue the conversation

ZITADEL

Similar Threads

Continue the conversation

ZITADEL