Commit graph

795 commits

Author SHA1 Message Date
andymunro
63edca0a39
Update health check instructions
Closes #47393

Signed-off-by: AndyMunro <amunro@redhat.com>
2026-04-07 18:04:37 +02:00
Rahul Ramkumar
799699a808
Add KCRAW_ prefix for environment variables to preserve literal values (#47197)
Closes #46657

Signed-off-by: Rahul Ramkumar <rahulram226@gmail.com>
2026-04-07 10:12:18 +02:00
Alexander Schwartz
a9a403b12f
Adding OAuth Client ID Metadata Document to the specifications list (#47706)
Closes #47705

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2026-04-07 09:40:58 +02:00
Steven Hawkins
51b6f9b291
fix: promotes keycloak and realm import to v2beta1 (#45840)
closes: #45795

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-04-04 16:46:28 +02:00
Václav Muzikář
3560286f0d
Update docs to better reflect FIPS support with Java 25. (#47699)
Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>
2026-04-02 15:04:15 +02:00
Tomáš Kyjovský
e513374669
Add an operational procedure doc for CNPG switchover
Closes #47678

Signed-off-by: Tomas Kyjovsky <tkyjovsk@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2026-04-02 11:48:14 +00:00
Benjamin DeWeese
a9f571d940
Implementing locale based theme-description translation
Closes #47038

Signed-off-by: Benjamin DeWeese <bdeweesevans@gmail.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2026-04-02 11:40:45 +02:00
Pedro Ruivo
09eef36e90
CNPG - Backup And Restore followup
Closes #47531

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Ryan Emerson <remerson@ibm.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Ryan Emerson <remerson@ibm.com>
2026-04-02 00:25:02 +02:00
Václav Muzikář
d7238a77ba
Clarify Java 25 support scope in docs (#47539)
Closes #47537

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>
2026-04-01 15:20:37 +02:00
Pedro Ruivo
be17c5e747
CNPG - Backup And Restore procedures documentation
Closes #47531

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2026-04-01 12:45:42 +02:00
Giuseppe Graziano
46d1c4fa5a Sender constrained tokens for token exchange
Closes #46092

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
2026-04-01 10:23:51 +02:00
Marek Posolda
48b1d0fed9
Clarify in FIPS docs that it is still recommended to use Java 21 (#47623)
closes #47621

Signed-off-by: mposolda <mposolda@gmail.com>
2026-04-01 09:58:09 +02:00
Rick Pastoor
d9bd2ae5ff
Update realm creation steps in documentation (#47633)
Signed-off-by: Rick Pastoor <rickpastoor@gmail.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2026-03-31 18:02:18 +00:00
mposolda
30fcb2ca40 Clarify at the beginning of legacy-token-exchange section that it needs fgap:v1
closes #47162

Signed-off-by: mposolda <mposolda@gmail.com>
2026-03-31 12:17:56 +02:00
Martin Bartoš
c0458c0801 Provide documentation for customizable log service properties
Closes #47586

Co-authored-by: Daniele Mams <mammarella.daniele@gmail.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2026-03-31 11:16:29 +02:00
Tomáš Kyjovský
85d30369bd
Polishing CNPG installation docs
Some checks are pending
Weblate Sync / Trigger Weblate to pull the latest changes (push) Waiting to run
Closes #47535

Signed-off-by: Tomas Kyjovsky <tkyjovsk@ibm.com>
2026-03-27 17:45:10 +01:00
Ruchika Jha
d721235190
Documention about the default db-schema being ambiguous
Closes #28970

Signed-off-by: Ruchika <ruchika.jha1@ibm.com>
2026-03-27 17:26:31 +01:00
Simon Levermann
f4225b4f9b
Introduce traceId to freemarker attributes
Closes #44090
Closes #34435

Signed-off-by: Simon Levermann <github@simon.slevermann.de>
2026-03-26 17:42:32 +01:00
Alexander Schwartz
ec07458cd5
Disable async startup when health probe is not enabled
Closes #47416

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2026-03-26 10:11:07 -03:00
rmartinc
b6fe6c2db8 Documentation for brokering API V2 and make it preview
Closes #46590
Closes #47259

Signed-off-by: rmartinc <rmartinc@redhat.com>
2026-03-26 11:13:58 +01:00
Arman Taheri
9dbdde84d6
fix typo in documents (#47420)
Closes #47412
2026-03-25 08:01:25 +00:00
Hager Khamis
13897b9b32
Adding getResourcesCommonUrl() to UrlBean (#47113)
I added getResourcesCommonUrl() following the same URL/Path pattern already used by getResourcesUrl() and getResourcesPath(). Email clients can't resolve relative paths so the existing getResourcesCommonPath() wasn't enough for email templates.

I also pulled out the common-path lookup into a private getCommonPath() helper to avoid duplicating it between getResourcesCommonPath() and the new method. Updated the theme docs with a usage example and a note about absolute URLs in emails.

Closes #33198

Signed-off-by: Hager Khamis <hagerm98@hotmail.com>
2026-03-25 07:45:52 +00:00
Pedro Ruivo
636e7252af
Update docs to use new TLS options (#47288)
Closes #47104

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2026-03-24 10:06:32 +01:00
Gilvan Filho
ed66ac6b0c
add labels and annotations to service monitor (serviceMonitorSpec) (#47298)
* add labels and annotations to service monitor (serviceMonitorSpec)

closes #42626

Signed-off-by: Gilvan Filho <gilvan.sfilho@gmail.com>

* add labels and annotations to service monitor (serviceMonitorSpec)

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Gilvan Filho <gilvan.sfilho@gmail.com>

---------

Signed-off-by: Gilvan Filho <gilvan.sfilho@gmail.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2026-03-23 17:35:44 +00:00
Alexander Schwartz
86a44bd378
Review release notes about missing items (#47359)
* Review release notes about missing items

Closes #47358

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>

* Apply suggestion from @stianst

Signed-off-by: Stian Thorgersen <stianst@gmail.com>

* Apply suggestion from @stianst

Signed-off-by: Stian Thorgersen <stianst@gmail.com>

---------

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Signed-off-by: Stian Thorgersen <stianst@gmail.com>
Co-authored-by: Stian Thorgersen <stianst@gmail.com>
2026-03-23 07:58:34 +01:00
Takashi Norimatsu
08f47dde7c MCP Documentation for 26.6
closes #46617

Signed-off-by: Takashi Norimatsu <takashi.norimatsu.ws@hitachi.com>
2026-03-20 15:16:33 +01:00
Steven Hawkins
29d00b07f3
fix: use to values ahead of keycloak defaults (#46871)
* fix: use `to` values ahead of keycloak defaults

closes: #46728

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/documentation/upgrading/topics/changes/changes-26_6_0.adoc

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* Apply suggestion from @shawkins

Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-03-20 14:42:49 +01:00
Pedro Ruivo
c93b6a7e6c
Asynchronous server initialization
Closes #47187

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Signed-off-by: Pedro Ruivo <pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
2026-03-19 21:23:46 +01:00
Ruchika Jha
37c9fd4de0
Added implementation for CLI option for database connection timeout and provide it into quarkus.datasource.jdbc.login-timeout
Closes #47140

Signed-off-by: Ruchika <ruchika.jha1@ibm.com>
2026-03-19 21:04:35 +01:00
Ryan Emerson
eea43029e2
Increase HA architecture tested load in downstream documentation
Closes #47195

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2026-03-17 05:16:45 +01:00
Pedro Ruivo
5fed5acef3
Em-Hyphens in SPI options on cache configuration page
Closes #46656

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2026-03-13 13:14:38 +01:00
Pedro Ruivo
c5c703c31f
Add Database CLI options for TLS encryption for databases
Some checks are pending
Weblate Sync / Trigger Weblate to pull the latest changes (push) Waiting to run
Closes #46603

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2026-03-12 18:28:11 +01:00
Ruchika Jha
efa2df641c
Added implementation for setting a default connection timeout for all databases types
Closes #46809

Signed-off-by: Ruchika <ruchika.jha1@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2026-03-12 14:45:38 +01:00
Tero Saarni
b2a88bcb3d
Add client certificate lookup for Envoy proxy (#33159)
* Add client certificate lookup for Envoy proxy

This update introduces the ability to lookup X509 client certificates from
Envoy's x-forwarded-client-cert header, using either the Cert or Chain
parameters.

Signed-off-by: Tero Saarni <tero.saarni@est.tech>

* added junit test cases for envoy x509 lookup

Signed-off-by: Tero Saarni <tero.saarni@est.tech>

* Run spotless

Signed-off-by: Tero Saarni <tero.saarni@est.tech>

* Added support for proxy-trusted-addresses

Signed-off-by: Tero Saarni <tero.saarni@est.tech>

* Convert exception to SecurityException for invalid headers

Signed-off-by: Tero Saarni <tero.saarni@est.tech>

* document update

Signed-off-by: Tero Saarni <tero.saarni@est.tech>

---------

Signed-off-by: Tero Saarni <tero.saarni@est.tech>
2026-03-12 14:08:39 +01:00
Alexander Schwartz
168f824741
Fix formatting of examples
Closes #47075

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2026-03-12 08:50:18 -03:00
Václav Muzikář
7849ec77eb
Supported Configurations guide (#46817)
* Supported Configurations guide

Closes #45898

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>

* Add K8s version ranges

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>

* Update docs/guides/server/supported-configurations.adoc

Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>

* Tweak suggestion

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>

* Remove downstream specific content, add mobile browsers note

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>

---------

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>
2026-03-11 13:21:42 +01:00
Tomáš Kyjovský
66f4a7e630
CloudNativePG installation docs for the single-cluster setup
Closes #45800

Signed-off-by: Tomas Kyjovsky <tkyjovsk@ibm.com>
Signed-off-by: Ryan Emerson <remerson@ibm.com>
Co-authored-by: Ryan Emerson <remerson@ibm.com>
2026-03-11 10:34:01 +01:00
Ryan Emerson
942fe0dfb2
Infinispan 16.0.8
Closes #47008

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2026-03-10 14:43:44 +01:00
Václav Muzikář
5c062a9e59
Downgrade server container image back to OpenJDK 21 (#46813)
* Downgrade server container image back to OpenJDK 21

Closes #46812

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>

* Remove JDK downgrade note, rename attribute

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>

---------

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>
2026-03-10 14:26:11 +01:00
Peter Zaoral
7c6bae2cba
[quarkus-next] Fix inconsistent Prometheus tag keys in user event metrics
Closes: #47002

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2026-03-10 11:21:08 +00:00
rmartinc
db7d9bfc8c Promote JWT Authorization Grant feature to supported
Closes #45463

Signed-off-by: rmartinc <rmartinc@redhat.com>
2026-03-10 09:13:44 +01:00
Copilot
8d318c552a
Add Traefik-specific X509 client certificate lookup provider (#46616)
* Add Traefik-specific X509 client certificate lookup provider

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

* correcting the header handling and adding documentation

closes: #46395

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
# Conflicts:
#	docs/documentation/release_notes/topics/26_6_0.adoc

* Update docs/guides/server/reverseproxy.adoc

Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* Apply suggestion from @shawkins

Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* removing optional traefik behavior

and further refining the docs

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>
Co-authored-by: Steve Hawkins <shawkins@redhat.com>
2026-03-05 15:00:05 +01:00
Martin Bartoš
7cbf326895
Invalid links in logging guides (#46893)
Closes #46892

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2026-03-05 13:08:21 +01:00
Copilot
9682f6a9a0
Add log file rotation configuration options to allow disabling rotation (#46724)
* Add log file rotation configuration options to Keycloak

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

* Update approved help texts and add release note for log file rotation
options

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

* updating expected possible options

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/documentation/release_notes/topics/26_6_0.adoc

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/documentation/release_notes/topics/26_6_0.adoc

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>
Co-authored-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2026-03-05 10:37:41 +00:00
Martin Bartoš
124f4a5c92
Be more explicit in using the OTel Logs level (#46875)
Closes #46874

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2026-03-05 09:48:13 +01:00
Copilot
d600298df7
operator: add support for configurable Kubernetes Service port and name in Keycloak CRD (#46683)
closes: #46633

* Add support for configurable Kubernetes Service port and name in Keycloak CRD

- Add serviceHttpPort and serviceHttpsPort fields to HttpSpec for configuring the service port independently of container port
- Add serviceName field to HttpSpec for customizing the service name
- Update KeycloakServiceDependentResource to use service ports with targetPort
- Update KeycloakClientBaseController to use service ports for admin URL
- Add unit tests and update test YAML

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

* Remove HasMetadata getServiceName overload; add integration test for custom service name and port

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

* refining the integration test

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Add documentation for configurable Service name and port in operator guide and release notes

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

* Apply review suggestions to documentation wording

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>
Co-authored-by: Steve Hawkins <shawkins@redhat.com>
2026-03-04 10:49:51 -05:00
Martin Bartoš
289ae8d3c4
Be more explicit on how to enable OTel Logs and Metrics in Operator (#46873)
Closes #46872

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2026-03-04 16:44:40 +01:00
Sebastian Łaskawiec
35d725fe1b
Moved adding Kubernetes/OpenShift CAs to the server (#44506)
* Kubernetes Truststore moved to the server

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>

* Update quarkus/config-api/src/main/java/org/keycloak/config/TruststoreOptions.java

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* addressing review comments and updating upgrade instructions

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* updating help command output

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/server/keycloak-truststore.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>

* Comments addressed

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>

* lint errors fix

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>

* Update docs/documentation/upgrading/topics/changes/changes-26_6_0.adoc

Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2026-03-04 16:39:10 +01:00
James Hewitt
1935cf9eff
Say export is not backup in the guide
Export isn't suitable for backup for a number of reasons, mention that in the guide, and tidy up some existing notes.

Closes #46796

Signed-off-by: James Hewitt <james.hewitt@uk.ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2026-03-03 17:22:06 +01:00
Ruchika Jha
8fc6af9b77
Changes for MSSQL Server, set sendStringParametersAsUnicode to false by default
Closes #46556

Signed-off-by: Ruchika <ruchika.jha1@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
2026-03-03 14:51:14 +00:00