Commit graph

741 commits

Author SHA1 Message Date
Pedro Ruivo
9430a3f928
Add CLI option for tx and migration timeout
Closes #19453

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2026-02-27 16:11:18 +00:00
Michal Vavřík
d2dc582b1c
Increase allowed additions to legacy testsuite to 100 lines (#46635) (#46563)
Signed-off-by: stianst <stianst@gmail.com>
Signed-off-by: Michal Vavřík <michal.vavrik@aol.com>
2026-02-27 15:21:08 +01:00
Giuseppe Graziano
ebfc294c85
Executor for client uris pattern validation (#46300)
Some checks failed
Weblate Sync / Trigger Weblate to pull the latest changes (push) Has been cancelled
Closes #45645

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
2026-02-24 16:26:00 +01:00
Pedro Igor
3e3a7befd1
Initial code for SCIM core and testsuite (#45978)
Closes #45712

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2026-02-23 18:22:25 +01:00
Steven Hawkins
db7c0422ab
fix: adding generic operator upgrade instructions (#46380)
* fix: adding generic operator upgrade instructions

closes: #40902

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/operator/installation.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2026-02-20 18:36:12 +01:00
Peter Skopek
248c635fda Rename Docker Registry to Distribution Registry
Closes #45163

Signed-off-by: Peter Skopek <peter.skopek@ibm.com>
2026-02-20 13:57:30 +01:00
Michal Vavřík
8e816f749c
feat: Update container images to use OpenJDK 25 (#46386)
This PR is mostly based on 303446b465.
Additionally, I made few tweaks to documentation and introduce a doc variable for the recommended Java version so limit required changing when migrating the recommended JDK version.

* Closes: https://github.com/keycloak/keycloak/issues/45830

Signed-off-by: Michal Vavřík <michal.vavrik@aol.com>
2026-02-17 15:35:46 +01:00
Pedro Ruivo
d04d833ec5
Update external Infinispan metrics documentation
Closes #46390

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2026-02-17 10:34:17 +00:00
Ruchika Jha
f92c27e26d
Make rolling updates for patch releases fully supported and Updated docs, release notes and upgrading guide for zero-downtime patch releases
Closes #45381
Closes #45756

Signed-off-by: Ruchika <ruchika.jha1@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2026-02-16 15:11:16 +00:00
Ruchika Jha
e82e107b85
Enable graceful HTTP shutdown and document default behavior
Closes #43589

Signed-off-by: Ruchika <ruchika.jha1@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2026-02-13 14:28:49 +00:00
Steven Hawkins
3aa5ab0072
fix: updating the fix for docker ulimits (#46254)
it will now be applied by default

closes: #44232

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-02-12 10:28:53 +01:00
Steven Hawkins
783ea304af
fix: document passthrough backchannel limitation (#45915)
closes: #45606

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-02-11 10:44:19 -05:00
NAMAN JAIN
5967093142
Move HTTP access logs to data/log directory (#45991)
* Move HTTP access logs to data/log directory

The HTTP access log file is now written to the /data/log directory, alongside server logs.

Directory is created at runtime initialization if it does not exist.

Closes #45629

Signed-off-by: NAMAN JAIN <naman.049259@tmu.ac.in>

* Update help command expectations for HTTP access log directory change

Signed-off-by: NAMAN JAIN <naman.049259@tmu.ac.in>

* Apply suggestions from code review

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Fix build

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: NAMAN JAIN <naman.049259@tmu.ac.in>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2026-02-11 11:50:22 +01:00
Václav Muzikář
d45dfeb44a
Java 25 support (#45872)
Closes #45905

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>
2026-02-10 23:35:35 +00:00
Giuseppe Graziano
d6f07f27ec
User validation in JWT Authorization Grant (#46149)
Closes #46144

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
2026-02-10 13:09:05 +00:00
Giuseppe Graziano
6fd372cbe6
Doc for JWT auth grant with Google (#45895)
Closes #45654


Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
2026-02-10 13:07:37 +01:00
andymunro
88eb05d114
Update Operator instructions for Custom Access (#46036)
Closes #45992

Signed-off-by: AndyMunro <amunro@redhat.com>
2026-02-09 12:45:15 +01:00
Giuseppe Graziano
d95f456b4f Inaccuracy in the client registration guide
Closes #45738

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
2026-02-09 09:19:15 +01:00
Pedro Ruivo
1ee5709eab
Revisit retransmission metrics documentation
Closes #46059

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2026-02-06 11:31:10 +01:00
rmartinc
69fabcf902 Documentation changes to deprecate Token Exchange V1
Closes #45792

Signed-off-by: rmartinc <rmartinc@redhat.com>
2026-02-05 17:32:04 +01:00
Ryan Emerson
e3c4ec6112 Document the minimum required ServiceMonitor CRD version
Signed-off-by: Ryan Emerson <remerson@ibm.com>
2026-02-03 14:55:11 +00:00
rmartinc
c63f54ba3a Client policy executor to allow extra audiences for JWT authorization grant
Closes #45180

Signed-off-by: rmartinc <rmartinc@redhat.com>
2026-02-03 13:39:31 +01:00
Ryan Emerson
47408e8620
Update Infinispan CRs in multi-cluster architecture to use InPlaceRolling upgrade strategy
Closes #45424

ISPN16 related

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2026-02-03 12:38:57 +01:00
Steven Hawkins
38b5466093
fix: aligns our dev http-host default behavior with that of quarkus (#45691)
closes: #42876

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
2026-01-27 16:51:47 +01:00
Martin Bartoš
eac504cce5 OTEL: Ability to specify headers for exporters
Closes #45220

Co-authored-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2026-01-27 10:36:18 +00:00
Steven Hawkins
77704a91b6
fix: adding support for xforwarded prefix (#45699)
closes: #35298

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-01-26 18:14:54 +01:00
Tomáš Kyjovský
b247ef12cd
Fix indentation in sample Keycloak CR YAML in Operator rolling updates doc
Closes #45755 

Signed-off-by: Tomas Kyjovsky <tkyjovsk@ibm.com>
2026-01-26 16:52:27 +01:00
Martin Bartoš
57f0b15c80
OTEL: Add Telemetry options to Keycloak CR (#45397)
* OTEL: Add Telemetry options to Keycloak CR

Closes #45348

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>

* Add validation to resource attributes

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Avoid unnecessary warning logs during the operator tests execution

Closes #45623

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/documentation/upgrading/topics/changes/changes-26_6_0.adoc

Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2026-01-22 16:02:06 +00:00
rmartinc
50366f03a6 Documentation for Authorization Chaining Across Domains
Closes #45466

Signed-off-by: rmartinc <rmartinc@redhat.com>
2026-01-22 16:33:27 +01:00
Alexander Schwartz
2cfef40ee3
Fix broken link for link in upgrading guide
Closes #45643

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2026-01-22 11:50:06 +01:00
Vlasta Ramik
2f0689576b
Possible mismatch of charset/collation between columns on mysql/mariadb (#45632)
* Possible mismatch of charset/collation between columns on mysql/mariadb

Closes #45597

Signed-off-by: vramik <vramik@redhat.com>
2026-01-22 07:17:04 -03:00
rmartinc
7e20b87136 Add abstract property for themes and do not display base for selection
Closes #41924

Signed-off-by: rmartinc <rmartinc@redhat.com>
2026-01-21 15:42:52 +01:00
Ruchika Jha
dbd8d47036
Upgrade command rolling updates for patch releases / step 3: Infinispan/JGroups
Closes #38884

Signed-off-by: Ruchika <ruchika.jha1@ibm.com>
2026-01-21 15:16:18 +01:00
Martin Bartoš
1138952ba7
Provide HTTP access logs written to file with rotation (#45437)
Closes #41353

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2026-01-20 15:16:33 +01:00
Luca Tronchin
a351784c33
Remove empty labels from keycloak_user_events_total metric (#45583)
Closes #45582

Signed-off-by: Luca Tronchin <ltronky@gmail.com>
2026-01-20 13:18:27 +01:00
Alexander Schwartz
5724ae1534
Updating specifications list to show DPoP as supported
Closes #45584

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2026-01-20 09:35:26 +01:00
Martin Bartoš
137a35c110
Mask certain HTTP headers and cookies in the HTTP access log (#45400)
* Mask certain HTTP headers and cookies in the HTTP access log

Closes #43811

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>

* Improve tests, Improve docs

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Fix test

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2026-01-19 19:01:45 +01:00
rmartinc
07b9b9656b Allow client_id as an audience in the JWT Authorization Grant and Client Assertions
Closes #45178

Signed-off-by: rmartinc <rmartinc@redhat.com>
2026-01-16 15:48:28 +01:00
Alexander Schwartz
391593cfa7
Implement asynchronous logging when called from nonblocking threads
Closes #45015

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2026-01-15 09:20:34 -03:00
Martin Bartoš
ab25c8e059 Fix link to OpenTelemetry guide in logging
Closes keycloak/keycloak-web#692

Co-authored-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2026-01-15 11:05:21 +01:00
Ryan Emerson
349c722ed9
Update multi-cluster documentation for zero-downtime upgrades
Closes #45338

Parts of the Infinispan docs for the in-place update of patch releases rely on ISPN16 behavior.

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2026-01-14 12:35:03 +01:00
Stian Thorgersen
198730cd0d
Allow absolute path for cache-config-file (#45416)
Closes #19374

Signed-off-by: stianst <stianst@gmail.com>
2026-01-14 11:05:50 +00:00
Ryan Emerson
c8635f9bf2
ISPN16: Upgrade to Infinispan 16.0.5
Closes #45341

- Remove query modules
- Remove unused config file
- Update config file versions
- Update jgroups attributes
- Remove ISPN-16595 workaround
- Call HotRodServer#postStart in HotRodServerRule to start caches as well as the server
- Simplify cluster-ha.xml
- Utilise org.infinispan.commons.util.TimeQuantity in CacheConfiguration
- Cleanup when InfinispanContainer startup fails
- RemoteUserSessionProvider remote query calls must not use negative values for offsets and maxResults
- Remove use of deprecated org.infinispan.server.test.core.InfinispanContainer class
- Use testcontainers-infinispan dependency
- Explicitly utilise "legacy" metrics
- Remove explicit `name-as-tags` configuration as Infinispan 16 defaults to true
- Remove test configuration not required since #31807

Signed-off-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2026-01-13 17:26:43 +01:00
Giuseppe Graziano
23aad2a942
DPoP Guide (#45274)
Closes #42747

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
2026-01-13 11:01:28 +01:00
Ryan Emerson
141bcee4dd
Document that the the HA architectures are tested with Openshift 4.18
Closes #45360

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2026-01-13 09:10:28 +01:00
Ryan Emerson
172aa86c6d
Increase the regularly tested load documented in HA guides
Closes #45233

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2026-01-12 14:02:51 +01:00
Ryan Emerson
cafa1a86eb
Disable state transfer for session caches when persistent sessions are enabled
Closes #44518

Signed-off-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2026-01-05 08:53:59 +00:00
Jens Erat
adeb41e82b
Extend documentation on ServiceMonitor creation (#45071)
The documentation so far only mentions how to disable the ServiceMonitor, leading to the assumption that it is enabled by default.

Getting a service monitor created also requires enabling metrics in keycloak, though:

658faf210f/operator/src/main/java/org/keycloak/operator/controllers/KeycloakServiceMonitorDependentResource.java (L50)

While the missing setting creates a warning, the administrator should already have this information before applying the configuration.

Closes #45070

Signed-off-by: Jens Erat <email@jenserat.de>
2026-01-05 09:10:18 +01:00
Peter Zaoral
7da8a8a2e3
feat: add Windows service support (#44496)
Closes: #37704

Signed-off-by: Peter Zaoral <pepo48@gmail.com>
2025-12-19 16:55:42 +00:00
Steven Hawkins
6bb586e871
fix: updating the health check docs
closes: #44634

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Klemens Böswirth <23529132+kodebach@users.noreply.github.com>
2025-12-19 14:31:22 +01:00