mirror/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2025-12-19 21:40:12 -06:00
Code Issues Packages Projects Releases Wiki Activity
29,761 Commits 20 Branches 287 Tags
58332528720c4e2c183d30d8af9c91b83c80eefb
Commit Graph

57 Commits

Author SHA1 Message Date
Ryan Emerson
3ba8a68f2c Document debug log settings required to show applied Infinispan configuration 
Closes #43655

Signed-off-by: Ryan Emerson <remerson@ibm.com>
 2025-10-29 12:36:53 +01:00
Ryan Emerson
5cb0562fd2 Prevent users configuring max-count=-1 for caches with a default upper-bound 
Closes #33146

Signed-off-by: Ryan Emerson <remerson@ibm.com>
 2025-10-02 19:58:28 +00:00
Ryan Emerson
17684f8011 Remove usage of the term stretched from single-cluster HA guides 
Closes #42358

Signed-off-by: Ryan Emerson <remerson@ibm.com>
 2025-09-05 15:49:19 +02:00
Pedro Ruivo
f4ec4cff1a Configure topology information in Infinispan 
Closes #41933

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2025-09-01 14:40:39 +02:00
Ryan Emerson
b0f4b4efee Log applied cache configurations as part of debug logs 
Closes #41950

Signed-off-by: Ryan Emerson <remerson@ibm.com>
 2025-08-19 17:01:19 +02:00
Ryan Emerson
168d9cc090 Simplify Cache Configuration file by removing built-in cache configurations 
Closes #41559

Signed-off-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-08-15 16:16:56 +00:00
RAMLAH MUNIR
e5c38f8a63 Fix typo in caching docs: 'Proving' → 'Providing' 
Closes #41663

Signed-off-by: Ramlah7 <ramlahmunir786@gmail.com>
 2025-08-14 16:16:18 +00:00
Pedro Ruivo
75afda4104 Ensure cache configuration has correct number of owners 
Closes #41558

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
 2025-08-05 15:19:03 +01:00
Pedro Ruivo
cf21fa10fd Update docs how to verify that a cluster has formed 
Closes #40296

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-07-28 10:01:00 +00:00
Alexander Schwartz
4b51a2ea36 Fix broken anchor for caching docs 
Also shorten the docs as KC is now encrypting by default.

Closes #41421

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-07-26 10:55:08 +02:00
Pedro Ruivo
9322d71d61 UserSession Offline removed from DB if not in cache 
Fixes #40754

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2025-07-07 20:52:06 +02:00
Ryan Emerson
eb7ce6ae15 Provide CLI Parameters for jgroups.* options 
Closes #40481

Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2025-07-07 13:07:45 +02:00
Pedro Ruivo
f4d5fa68c1 Update documentation about volatile sessions 
Closes #40639

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-06-20 16:45:22 +00:00
Zach Callahan
c2987ea8b4 docs(caching): clarified wording for the jgroups fd port offset 
This change updates the documentation for caching to better
explain the relationship between the default jgroups failure
detection port offset and the actual port.

Closes #40564

Signed-off-by: Zach Callahan <zach@zmc.dev>
 2025-06-18 06:35:36 +00:00
Alexander Schwartz
61586ff328 Disabling persistent sessions affects also offline session cache 
Closes #40483

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-06-17 08:02:28 +00:00
Ryan Emerson
0c62bd0878 Change discovery in Kubernetes to jdbc-ping 
Closes #39544

Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2025-06-05 16:48:30 +02:00
Pedro Ruivo
077173d24f Improve JGroups network bind address documentation (#39874) 
Closes #39872

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2025-05-27 08:35:01 +00:00
andymunro
afe6d4d4a0 Fix callouts 
Closes #39590

Signed-off-by: AndyMunro <amunro@redhat.com>
 2025-05-09 14:10:59 +00:00
Alexander Schwartz
f79408788d Document how to configure Istio to allow for JGroups mTLS 
Closes #39065

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
 2025-05-02 12:08:02 +00:00
andymunro
75557bc312 Adjust introductory sentences 
Closes #39008

Signed-off-by: AndyMunro <amunro@redhat.com>
 2025-04-25 09:18:04 +02:00
Alexander Schwartz
bc7ec1208e Enable the TLS based JGroups encryption by default and update the docs 
Closes #37696

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-03-03 10:50:51 -03:00
Pedro Ruivo
f7e21af82e JGroups certificate rotation 
Closes #37316

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2025-02-27 12:56:18 +01:00
Pedro Ruivo
70e2a28ff9 Create CA certificate for JGroups encryption 
Closes #36750

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Pedro Ruivo <pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2025-02-13 10:32:43 +00:00
Alexander Schwartz
757f46a75a Document external port and address feature for JGroups (#36913) 
Closes #36858

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-02-04 22:20:49 +01:00
Martin Bartoš
33782602ca Improve readability of relevant options in guides (#37015) 
Closes #37014

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-02-04 14:07:50 +01:00
rmartinc
6cf92d9dc7 Add crl cache to certificate validation 
Closes #26473

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-01-22 14:58:35 +01:00
Alexander Schwartz
caf546bdb2 Update the documentation on how to run Keycloak IPv6 only (#36393) 
Closes #36456

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Michal Hajas <mhajas@redhat.com>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
 2025-01-16 10:41:22 +01:00
Alexander Schwartz
4a924f6c94 Tune the caching guide for the upcoming release 
Closes #36039

Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-12-19 16:43:02 +01:00
Alexander Schwartz
12436fd922 Fix unordered list in caching guide 
Closes #35006

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-11-25 13:47:42 +01:00
Michal Hajas
cb914b2a3d Fix observability links 
Closes #35240
Signed-off-by: Michal Hajas <mhajas@redhat.com>
 2024-11-22 17:41:35 +01:00
Pedro Ruivo
d7e5319f70 Document network ports for Keycloak clustering 
Also switch the default to jdbc-ping as this  should be a drop-in replacement looking at the networking behavior of udp.

Closes #34658

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2024-11-11 13:28:15 +01:00
Ryan Emerson
a79b67cac8 Deprecate other transport stacks (ec2, azure, google) 
Closes #34253

Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2024-10-31 11:47:13 +01:00
Ryan Emerson
7152a8b0f3 Update caching docs to reflect that IP multicast is no longer used by default 
Closes #34495

Signed-off-by: Ryan Emerson <remerson@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2024-10-30 11:47:32 +00:00
Ryan Emerson
6eb870fcfc Add JDBC_PING2 stacks for both TCP and UDP 
Closes #34265

Signed-off-by: Ryan Emerson <remerson@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2024-10-25 00:17:44 +02:00
Ryan Emerson
902abfdae4 JDBC_PING as default discovery protocol 
Closes #29399

- Add ProviderFactory#dependsOn to allow dependencies between
  ProviderFactories to be explicitly defined
- Disable Infinispan default shutdownhook disabled to ensure lifecycle
  is managed exclusively by Keycloak
- Remove Infinispan shutdown hook in KeycloakRecorder and manage
  EmbeddedCacheManager lifecycle only in DefaultInfinispanConnectionProviderFactory#close

Signed-off-by: Ryan Emerson <remerson@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2024-10-22 20:19:19 +00:00
Ryan Emerson
adb8d989f5 Allow Embedded Cache sizes to be configured via the CLI 
Closes #31514

Signed-off-by: Ryan Emerson <remerson@redhat.com>
 2024-09-24 14:35:24 +02:00
Michal Hajas
af53af1506 Document persistent sessions are enabled by default 
Closes #32387

Signed-off-by: Michal Hajas <mhajas@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2024-08-30 09:20:58 +00:00
Martin Kanis
fdc35919a0 Wrong command in exposing metrics from caches section 
Closes #31413

Signed-off-by: Martin Kanis <mkanis@redhat.com>
 2024-07-19 09:19:31 +02:00
Diego Garcia Lozano
2ff0d4e4f8 Update caching docs to match breaking changes in v25 
In the latest Keycloak version (v25.0.1) the cache options are not build options anymore. They now have to be provided during runtime.

Closes #31050

Signed-off-by: Diego Garcia Lozano <diegogarcialozano95@gmail.com>
 2024-07-04 11:54:32 +02:00
daviddelannoy
d4fc5249c4 fix label error for persistent-user-sessions feature flag in documentation 
Closes #30368

Signed-off-by: daviddelannoy <16318239+daviddelannoy@users.noreply.github.com>
 2024-06-12 09:32:10 +00:00
Michal Hajas
61d0d56720 Document it is not possible to use rolling configuration upgrade for enabling persistent sessions 
Closes #29561

Signed-off-by: Michal Hajas <mhajas@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2024-05-29 10:19:20 +02:00
Alexander Schwartz
8deca303e2 Update instruction on how to enable persistent sessions (#29490) 
Closes #29489

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-05-15 13:26:51 +02:00
Alexander Schwartz
6fbe207d64 Create documentation for persistent user sessions 
Closes #29218

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Michal Hajas <mhajas@redhat.com>
Co-authored-by: Michal Hajas <mhajas@redhat.com>
 2024-05-13 11:02:45 +02:00
Dimitri Papadopoulos Orfanos
9db1443367 Fix typos found by codespell in docs (#28890) 
Run `chmod -x` on files that need not be executable.

Signed-off-by: Dimitri Papadopoulos <3234522+DimitriPapadopoulos@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2024-05-03 12:41:16 +00:00
Alexander Schwartz
9d0b1ecee4 Review CLI option change for caching 
Closes #28750

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-04-20 18:30:24 +02:00
Pedro Ruivo
3de5357091 CLI options to disable encryption and authentication to external Infinispan 
Closes #28750

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
 2024-04-20 18:30:24 +02:00
AndyMunro
0e5d685cd3 Revise use of Keycloak term 
Closes #27953

Signed-off-by: AndyMunro <amunro@redhat.com>
 2024-03-18 09:50:26 +01:00
Alexander Schwartz
1788cf2b09 Enable Infinispan metrics automatically if overall metrics are enabled 
Closes #27724

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-03-13 18:55:45 +01:00
Vlasta Ramik
ade3b31a91 Introduce new CLI config options for Infinispan remote store 
Closes #25676

Signed-off-by: vramik <vramik@redhat.com>
Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Pedro Ruivo <pruivo@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2024-02-28 15:49:19 +00:00
Pedro Ruivo
70b4c6bf52 Encrypt network communication in JGroups 
Closes #25702 

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2024-01-18 17:24:27 +00:00