Commit graph

366 commits

Author SHA1 Message Date
Steven Hawkins
51b6f9b291
fix: promotes keycloak and realm import to v2beta1 (#45840)
closes: #45795

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-04-04 16:46:28 +02:00
Martin Bartoš
8e0e2e8ab0
Upgrade to Quarkus 3.33.1 LTS (#47462)
* Upgrade to Quarkus 3.33.1 LTS

Closes #45278

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Remove OLM NativeAPIs workaround

Closes #42643

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2026-03-27 09:23:06 +00:00
Peter Zaoral
ca658e8a4a
[quarkus-next] Fix operator controller stalling after JOSDK 5.3.0 event filtering upgrade (#47474)
Closes: #47473

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
2026-03-27 09:34:27 +01:00
Martin Bartoš
9d2b0fbd8a
Test the new client service in the operator (#47318)
Closes #47317

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2026-03-25 11:32:05 +01:00
Gilvan Filho
ed66ac6b0c
add labels and annotations to service monitor (serviceMonitorSpec) (#47298)
* add labels and annotations to service monitor (serviceMonitorSpec)

closes #42626

Signed-off-by: Gilvan Filho <gilvan.sfilho@gmail.com>

* add labels and annotations to service monitor (serviceMonitorSpec)

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Gilvan Filho <gilvan.sfilho@gmail.com>

---------

Signed-off-by: Gilvan Filho <gilvan.sfilho@gmail.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2026-03-23 17:35:44 +00:00
Václav Muzikář
3be2527a3d
Reflect Client v2 UUIDs in Operator (#47301)
Closes #47300

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>
2026-03-20 18:03:29 +01:00
Alex Szczuczko
83b14f925f
Use quay.io instead of DockerHub in testsuite createCurlContainer()
Closes #47025

Signed-off-by: Alex Szczuczko <aszczucz@redhat.com>
2026-03-11 08:12:53 +00:00
Copilot
d600298df7
operator: add support for configurable Kubernetes Service port and name in Keycloak CRD (#46683)
closes: #46633

* Add support for configurable Kubernetes Service port and name in Keycloak CRD

- Add serviceHttpPort and serviceHttpsPort fields to HttpSpec for configuring the service port independently of container port
- Add serviceName field to HttpSpec for customizing the service name
- Update KeycloakServiceDependentResource to use service ports with targetPort
- Update KeycloakClientBaseController to use service ports for admin URL
- Add unit tests and update test YAML

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

* Remove HasMetadata getServiceName overload; add integration test for custom service name and port

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

* refining the integration test

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Add documentation for configurable Service name and port in operator guide and release notes

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

* Apply review suggestions to documentation wording

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>
Co-authored-by: Steve Hawkins <shawkins@redhat.com>
2026-03-04 10:49:51 -05:00
Sebastian Łaskawiec
35d725fe1b
Moved adding Kubernetes/OpenShift CAs to the server (#44506)
* Kubernetes Truststore moved to the server

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>

* Update quarkus/config-api/src/main/java/org/keycloak/config/TruststoreOptions.java

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* addressing review comments and updating upgrade instructions

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* updating help command output

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/server/keycloak-truststore.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>

* Comments addressed

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>

* lint errors fix

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>

* Update docs/documentation/upgrading/topics/changes/changes-26_6_0.adoc

Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2026-03-04 16:39:10 +01:00
Michal Vavřík
0937fe6574
feat(quarkus): validate and doc min poolMaxSize is 4+ for JDBC PING (#46737)
Currently when migration tasks are run, we see that the app startup fails with DB pool size 3 or less for JDBC_PING.
Hence, we started to validate that the minimal max pool size is 4 for JDBC PING.

Closes: https://github.com/keycloak/keycloak/issues/46673

Signed-off-by: Michal Vavřík <michal.vavrik@aol.com>
2026-03-03 14:19:55 +01:00
Steven Hawkins
40f39f0edc
fix: adding server not ready to the status (#46143)
closes: #45802

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
2026-02-24 16:03:53 +01:00
Ruchika Jha
9ec61bfb52
Added the shutdown delay and shutdown timeout for the testcases to default options
Closes #46337

Signed-off-by: Ruchika <ruchika.jha1@ibm.com>
2026-02-24 14:47:04 +01:00
Steven Hawkins
1ce2447b72
fix: adding a check for the client api v2 feature (#46103) 2026-02-20 20:32:49 +01:00
Michal Vavřík
8e816f749c
feat: Update container images to use OpenJDK 25 (#46386)
This PR is mostly based on 303446b465.
Additionally, I made few tweaks to documentation and introduce a doc variable for the recommended Java version so limit required changing when migrating the recommended JDK version.

* Closes: https://github.com/keycloak/keycloak/issues/45830

Signed-off-by: Michal Vavřík <michal.vavrik@aol.com>
2026-02-17 15:35:46 +01:00
Akbar Husain
3f62bb4d2b
Make shebang in bash scripts consistent (#37369)
Closes #34983

Signed-off-by: akbarhusainpatel <apatel@intermiles.com>
2026-02-17 11:32:28 +01:00
Steven Hawkins
83159fc162
fix: removing client crds from prod operator (#46286)
remote testing now requires a build option

closes: #45794

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-02-13 15:56:32 +00:00
Steven Hawkins
3aa5ab0072
fix: updating the fix for docker ulimits (#46254)
it will now be applied by default

closes: #44232

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-02-12 10:28:53 +01:00
Václav Muzikář
d45dfeb44a
Java 25 support (#45872)
Closes #45905

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>
2026-02-10 23:35:35 +00:00
Steven Hawkins
5988e89bbc
fix: adding a basic saml client test (#46098)
closes: #46042

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-02-10 13:09:44 -05:00
Steven Hawkins
8a471bb0d2
Operator logic for clients in admin api v2 (#45316)
Operator logic for clients in admin api v2

Closes #46022

Signed-off-by: Steven Hawkins <shawkins@redhat.com>
2026-02-05 09:16:29 +00:00
Steven Hawkins
9462f0f00b
updating to quarkus 3.31.1 (#45612)
Some checks failed
Weblate Sync / Trigger Weblate to pull the latest changes (push) Has been cancelled
* fix: updating to quarkus 3.31.0.CR1

closes: #45576

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* updating test containers for 3.31.0.CR1

also adding a managed version for microprofile-metrics-api

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* excluding quarkus-bootstrap-runner to prevent trace logging

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* changing to new logging context for hibernate jpa

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* switching to 3.31.0 release

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* switching to 3.31.1 release

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Follow upgrading guide for Quarkus 3.31.0

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* turning of specific hibernate logging

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* removing quarkus-bootstrap-runner from the model test classpath

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2026-02-02 17:50:56 +01:00
Martin Bartoš
eac504cce5 OTEL: Ability to specify headers for exporters
Closes #45220

Co-authored-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2026-01-27 10:36:18 +00:00
Martin Bartoš
57f0b15c80
OTEL: Add Telemetry options to Keycloak CR (#45397)
* OTEL: Add Telemetry options to Keycloak CR

Closes #45348

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>

* Add validation to resource attributes

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Avoid unnecessary warning logs during the operator tests execution

Closes #45623

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/documentation/upgrading/topics/changes/changes-26_6_0.adoc

Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2026-01-22 16:02:06 +00:00
Ryan Emerson
c8635f9bf2
ISPN16: Upgrade to Infinispan 16.0.5
Closes #45341

- Remove query modules
- Remove unused config file
- Update config file versions
- Update jgroups attributes
- Remove ISPN-16595 workaround
- Call HotRodServer#postStart in HotRodServerRule to start caches as well as the server
- Simplify cluster-ha.xml
- Utilise org.infinispan.commons.util.TimeQuantity in CacheConfiguration
- Cleanup when InfinispanContainer startup fails
- RemoteUserSessionProvider remote query calls must not use negative values for offsets and maxResults
- Remove use of deprecated org.infinispan.server.test.core.InfinispanContainer class
- Use testcontainers-infinispan dependency
- Explicitly utilise "legacy" metrics
- Remove explicit `name-as-tags` configuration as Infinispan 16 defaults to true
- Remove test configuration not required since #31807

Signed-off-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2026-01-13 17:26:43 +01:00
Steven Hawkins
81e31fa4cc
fix: using non-interpretted args for import (#44862)
closes: #44861

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-01-07 08:48:08 +01:00
Steven Hawkins
7ecc4c5774
fix: updating test crdtest expectation
closes: #45017

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-12-19 08:15:12 +01:00
Stian Thorgersen
5653b37e8e
Apply Spotless to docs, distribution, and operator (#44826)
Closes #44367

Signed-off-by: stianst <stianst@gmail.com>
2025-12-11 08:50:54 +01:00
Stian Thorgersen
2a78bc67d7
Refactoring around federated client authenticator to better handling lookup of IdPs and clients. Also, introducing updates to documentation. (#44325)
Closes #44253
Closes #42987
Closes #44063

Signed-off-by: stianst <stianst@gmail.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-11-22 12:53:22 +01:00
Pedro Ruivo
2dccc0bf37
Operator Update Logic: add hash based comparison (#44332)
* Operator Update Logic: add hash based comparation

Fixes #44280

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>

* refinements to the update logic

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Steve Hawkins <shawkins@redhat.com>
2025-11-20 12:35:38 -05:00
Steven Hawkins
8ae3750348
fix: switching to Boolean instead of boolean (#44340)
closes: #38843

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-11-20 08:53:28 +01:00
Steven Hawkins
8ee23aaa15
fix: simplifying addResources (#44046)
closes: #44045

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-11-18 09:29:50 +01:00
AvivGuiser
3c8af6dec5
set auto-mount service account token to false in keycloak pods (#40605)
Some checks failed
Weblate Sync / Trigger Weblate to pull the latest changes (push) Has been cancelled
closes #38843

Signed-off-by: AvivGuiser <avivguiser@gmail.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
2025-11-14 15:41:39 +00:00
Steven Hawkins
f96765c4b4
fix: correcting termination test on openshift (#44181)
closes: #44179

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-11-14 13:25:02 +01:00
Sebastian Łaskawiec
3288f83dc9
Adding an integration test with Minikube for Kubernetes Service Account Federated Authenticator
Closes #42983

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@defenseunicorns.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-11-13 08:52:46 +01:00
Steven Hawkins
281ced0ca8
fix: performing scale down prior to deletion (#44095)
closes: #34868

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-11-11 21:12:50 +00:00
Steven Hawkins
0064e060fc
fix: redoing the watching logic to provide a better status (#43817)
closes: #43777

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-11-11 09:34:58 +01:00
AvivGuiser
41d5aae6f6
add labels to realm import jobs (#42967)
Signed-off-by: AvivGuiser <avivguiser@gmail.com>
2025-10-31 17:20:22 +01:00
Martin Bartoš
8502cc3ae1
Including OTLP headers for tracing (#43122)
* Including OTLP headers for tracing

Closes #41007

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Polishing, add test for the util class, address review

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Remove the WildcardOptionsUtil#isKcWildcardOption

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-10-31 15:46:05 +01:00
Stian Thorgersen
71160384ca
Add ppc64le to Operator CSV metadata (#43831)
Closes #43830

Signed-off-by: stianst <stianst@gmail.com>
2025-10-31 06:30:14 +01:00
Steven Hawkins
3cb9e0bcd8
task: testing servicemonitor patching
Some checks are pending
Weblate Sync / Trigger Weblate to pull the latest changes (push) Waiting to run
closes: #43778

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-10-28 17:06:06 +00:00
Steven Hawkins
d9e3f55b69
fix: forcing the namespace for the servicemonitor check
closes: #43774

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-10-28 17:25:53 +01:00
Steven Hawkins
43ee41e8a8
fix: refining activation condition error handling (#43197)
closes: #43096

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-10-15 11:44:39 +00:00
Steven Hawkins
f28e34ee79
fix: fully sanitizing mappers and changing duplicated log to trace (#42959)
closes: #38438

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-10-14 12:28:29 -04:00
Steven Hawkins
e789e3213f
fix: limiting what fields are hashed to identify compatible update jobs (#42623)
closes: #41014

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-22 19:03:06 +02:00
Ryan Emerson
bda79de605
Update docs to reflect that Operator ClusterRoleBinding contains hardcoded namespace
- Added missing labels to Operator roles

Closes #42678

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2025-09-19 17:27:26 +02:00
Steven Hawkins
373257a5d0
fix: improving the local apiserver test cleanup (#42701)
closes: #42693

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-17 19:01:13 +02:00
Ryan Emerson
6e7a836c96
Create default ServiceMonitor with Operator
Closes #40406

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2025-09-16 10:57:35 +02:00
Steven Hawkins
bb7e5ab7b2
fix: cleaning up dockerfile build warnings (#42573)
closes: #42572

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-15 17:07:27 +02:00
Alexander Schwartz
d98c474cdc
Add upstream architectures for the Operator (#42099)
Closes #38928

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-11 12:06:50 +02:00
Steven Hawkins
ae1e1d3cc3
fix: allows for schedulings to be defined for operator jobs (#42310)
* fix: allows for schedulings to be defined for operator jobs

closes: #42057

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/operator/advanced-configuration.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2025-09-10 16:28:12 +00:00