* add labels and annotations to service monitor (serviceMonitorSpec)
closes#42626
Signed-off-by: Gilvan Filho <gilvan.sfilho@gmail.com>
* add labels and annotations to service monitor (serviceMonitorSpec)
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Gilvan Filho <gilvan.sfilho@gmail.com>
---------
Signed-off-by: Gilvan Filho <gilvan.sfilho@gmail.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
* Downgrade server container image back to OpenJDK 21
Closes#46812
Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>
* Remove JDK downgrade note, rename attribute
Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>
---------
Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>
Add the missing Users FGAP scope alias from manage-group-membership to Groups manage-membership so deny permissions on group members apply during user membership updates.
Add a regression test covering a protected group member, an unrelated user, and the no-mutation postcondition after a forbidden request.
Closes keycloak#46693
closes: #46633
* Add support for configurable Kubernetes Service port and name in Keycloak CRD
- Add serviceHttpPort and serviceHttpsPort fields to HttpSpec for configuring the service port independently of container port
- Add serviceName field to HttpSpec for customizing the service name
- Update KeycloakServiceDependentResource to use service ports with targetPort
- Update KeycloakClientBaseController to use service ports for admin URL
- Add unit tests and update test YAML
Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>
* Remove HasMetadata getServiceName overload; add integration test for custom service name and port
Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>
* refining the integration test
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
* Add documentation for configurable Service name and port in operator guide and release notes
Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>
* Apply review suggestions to documentation wording
Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>
---------
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>
Co-authored-by: Steve Hawkins <shawkins@redhat.com>
* Kubernetes Truststore moved to the server
Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>
* Update quarkus/config-api/src/main/java/org/keycloak/config/TruststoreOptions.java
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
* addressing review comments and updating upgrade instructions
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
* updating help command output
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
* Update docs/guides/server/keycloak-truststore.adoc
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>
* Comments addressed
Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>
* lint errors fix
Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>
* Update docs/documentation/upgrading/topics/changes/changes-26_6_0.adoc
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
---------
Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
This PR is mostly based on 303446b465.
Additionally, I made few tweaks to documentation and introduce a doc variable for the recommended Java version so limit required changing when migrating the recommended JDK version.
* Closes: https://github.com/keycloak/keycloak/issues/45830
Signed-off-by: Michal Vavřík <michal.vavrik@aol.com>
* OTEL: Add Telemetry options to Keycloak CR
Closes#45348
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
* Add validation to resource attributes
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
* Avoid unnecessary warning logs during the operator tests execution
Closes#45623
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
* Update docs/documentation/upgrading/topics/changes/changes-26_6_0.adoc
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>
---------
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
* Mask certain HTTP headers and cookies in the HTTP access log
Closes#43811
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
* Improve tests, Improve docs
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
* Fix test
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
---------
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Signed-off-by: Stian Thorgersen <stian@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Stian Thorgersen <stianst@gmail.com>
* [OTel] Micrometer to OpenTelemetry bridge support for metrics
Closes#41006
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
* Review: Docs rewording
Signed-off-by: Ryan Emerson <remerson@ibm.com>
* Review: Make TELEMETRY Option descriptions consistently use OpenTelemetry to reflect pattern established by telemetry-enabled, telemetry-endpoint etc
Signed-off-by: Ryan Emerson <remerson@ibm.com>
---------
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Ryan Emerson <remerson@ibm.com>
Co-authored-by: Ryan Emerson <remerson@ibm.com>
* Support EDB 18
Closes#44494
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
* Update test-framework/db-edb/container/README.md
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>
---------
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
* [OTel] Provide general options for telemetry settings
Closes#41263
Co-authored-by: Ryan Emerson <remerson@redhat.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
* Update docs/guides/observability/telemetry.adoc
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
* Provide release notes and deprecation note
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
* Ignore link to the telemetry guide for now
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
---------
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Ryan Emerson <remerson@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Closes#38809
Signed-off-by: Alexis Rico <sferadev@gmail.com>
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>
* Ability to enable/disable feature via single property
Closes#43541
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
* Provide support for specifying profile preview
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
* Remove duplication check, use the new WildcardOptionUtil
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
* Create quarkus specific single profile config resolver
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
* Remove the feature profile capability for single feature option
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
---------
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
* Including OTLP headers for tracing
Closes#41007
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
* Polishing, add test for the util class, address review
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
* Remove the WildcardOptionsUtil#isKcWildcardOption
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
---------
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Closes#43084
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
* [PERF] Jackson reflection-free serialization/deserialization
Closes#42945
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
* Update docs/guides/server/configuration-production.adoc
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
* Docs improvements
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
* Update docs/guides/server/configuration-production.adoc
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
* Polish the features template macros
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
---------
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Closes#43082
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
