Commit Graph

297 Commits

Author SHA1 Message Date
Steven Hawkins
00640d629b fix: refine test for rolling
closes: #41204


(cherry picked from commit 6c7be65456)

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-07-21 14:00:18 +02:00
Steven Hawkins
21d24ffc57 fix: detecting when we can set the serviceName
closes: #40890


(cherry picked from commit 919838089f)

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-07-06 20:53:40 +02:00
Peter Skopek
d2b4601295 Add missing artifact descriptions to allow Maven Central Portal Publisher pass validation process. (#40822)
Signed-off-by: Peter Skopek <pskopek@redhat.com>
2025-07-01 11:30:42 +02:00
Gilvan Filho
e5bb7f5249 add labels and annotations to service (httpSpec) (#39925)
closes #23283

Signed-off-by: Gilvan Filho <gfilho@redhat.com>
2025-06-17 11:27:16 +02:00
Steven Hawkins
bd1496109e fix: removing lifecylce in initContainers
closes: #40360

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-06-16 09:48:50 +02:00
AvivGuiser
7736ca20e9 support setting periodSeconds and failureThreashold in the Keyclock CR (#40117)
* add probe spec

Signed-off-by: AvivGuiser <avivguiser@gmail.com>

* make default for probes if not configured, add skeleton test files

Signed-off-by: AvivGuiser <avivguiser@gmail.com>

* fix tests

Signed-off-by: AvivGuiser <avivguiser@gmail.com>

* fix tests

Signed-off-by: AvivGuiser <avivguiser@gmail.com>

* add docs

Signed-off-by: AvivGuiser <avivguiser@gmail.com>

* move test to unittest and apiserver test

Signed-off-by: AvivGuiser <avivguiser@gmail.com>

* adding asserts to check new fields

Signed-off-by: AvivGuiser <avivguiser@gmail.com>

* fix test

Signed-off-by: AvivGuiser <aviv.guiser@placer.ai>

* update docs

Signed-off-by: AvivGuiser <aviv.guiser@placer.ai>

---------

Signed-off-by: AvivGuiser <avivguiser@gmail.com>
Signed-off-by: AvivGuiser <aviv.guiser@placer.ai>
2025-06-13 17:32:20 +00:00
Steven Hawkins
0e28bd3981 fix: adding a mapping directly from an env property to a wildcard (#39602)
* fix: adding a map directly from an env property to a wildcard

closes: #38259

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* switching unit test logic to not directly manipulate env vars

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Apply suggestions from code review

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* modifications based upon review feedback

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2025-06-13 08:26:18 +00:00
Steven Hawkins
eb96b4a59f fix: switching to the registry addon for olm testing (#40334)
closes: #40099

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-06-09 16:32:10 +02:00
Ryan Emerson
0c62bd0878 Change discovery in Kubernetes to jdbc-ping
Closes #39544

Signed-off-by: Ryan Emerson <remerson@redhat.com>
2025-06-05 16:48:30 +02:00
Steven Hawkins
72d3063a54 fix: ensuring update job handles secrets when none exist in the cr
closes #39939

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2025-06-04 18:29:35 +02:00
Steven Hawkins
fdcd89cae7 fix: keeping the image consistent for the recreate strategy
closes: #39710

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-05-14 17:58:44 +02:00
Pedro Ruivo
8a05cb8f79 Update Job Pod is listed in the keycloak service
Fixes #39500

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2025-05-06 18:39:24 +00:00
Steven Hawkins
16c747b429 fix: adding the discovery servicename to the statefulset (#39419)
closes: #38757

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-05-06 08:02:59 -04:00
Steven Hawkins
5a4fe491bf using jenvtest for local operator testing (#38947)
* fix: using jenvtest for testing

closes: #39020

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Apply suggestions from code review

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* replacing local jobs and using a stronger hash

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Clean up updateStatefulSet

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>

* Scale down to 0

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>

* Fix for `specReplicas == 0`

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>

* Return `Math.min`

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Václav Muzikář <vmuzikar@redhat.com>
2025-04-24 14:26:01 +00:00
Steven Hawkins
a39adf7b4f fix: relaxing the ready=false reason to make the test less flaky
closes: #39124

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-04-22 21:44:29 +02:00
Steven Hawkins
26de9efff3 fix: adding imagePullSecret to update job
closes: #39015

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-04-17 18:35:15 +02:00
Steven Hawkins
f21c486dfb making the update reason and recreate annotations stable
closes: #38487

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-04-14 18:05:44 +02:00
Steven Hawkins
0afe3aa14d fix: preventing statefulset infinite reconciliation loop (#38849)
closes: #38846

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-04-11 16:33:30 +00:00
Falko Modler
770a575f95 Allow zero tracing-sampler-ratio
Closes #38764

Signed-off-by: Falko Modler <famod@users.noreply.github.com>
2025-04-09 11:57:03 +00:00
Steven Hawkins
48a80d7680 fix: lowering level of errors - the operator sdk logs this as well (#38599)
closes: #38529

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-04-03 17:01:08 +00:00
Pedro Ruivo
f3b7628f98 Set the correct revision number in stateful set
Fixes #38617

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2025-04-02 21:03:08 +02:00
Laurids Møller Jepsen
8f7c1871a7 Add client OIDC configuration for setting the header type in access tokens.
If this setting is On, the access token header type will be "at+jwt" in compliance with RFC 9068, see https://datatracker.ietf.org/doc/html/rfc9068#section-2.1. If the setting is Off, the access token header type will be "JWT". The setting is Off per default.

Closes #36696

Signed-off-by: Laurids Møller Jepsen <laurids.jepsen@cryptomathic.com>
2025-03-24 10:35:41 +01:00
Alexander Schwartz
c9b88c6bf6 Finalizing release notes and documentation for initial rolling update
Closes #38168

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-03-19 21:34:09 +01:00
Steven Hawkins
0aa14c19e1 fix: separating api server tests, and splitting the operator tests (#38118)
closes: #37853

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-03-17 14:34:28 +01:00
Pedro Ruivo
96a5b19110 Operator: Implement an explicit update strategy
Closes #37416

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2025-03-17 08:28:26 +01:00
Alexander Schwartz
151e019935 Make NetworkPolicy supported and enabled by default
Closes #36036

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
2025-03-10 11:12:38 +01:00
Václav Muzikář
eff9e8d95e Upgrade to Quarkus 3.19.2 (#37851)
Closes #37850

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2025-03-06 15:45:51 +01:00
Pedro Ruivo
14c5e2454e [Operator] Make UpgradeTest stable
Fixes #37690

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2025-03-05 23:01:07 +01:00
Alexander Schwartz
41c8623a94 Remove ForceRecreate Operation
Closes #37661

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-03-03 12:26:33 -03:00
Pedro Ruivo
7263b70f06 Disable UpgradeTest (#37688)
Related to #37690

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2025-02-27 12:04:45 +01:00
Pedro Ruivo
a04c99e100 Operator: new CR status condition for upgrades
Closes #37220

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2025-02-26 08:32:13 +01:00
Steven Hawkins
acfca3ad74 fix: making the deadline override applicable to all remote tests (#37408)
closes: #37392

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-02-19 11:25:37 +01:00
Akbar Husain
9d3cfe0672 Remove X-XSS-Protection header (#36881)
Closes #21728

Signed-off-by: akbarhusainpatel <apatel@intermiles.com>
2025-02-19 08:42:26 +01:00
Václav Muzikář
764ca50fc4 Upgrade to Quarkus 3.18.2 (#37300)
* Upgrade to Quarkus 3.18.2

Closes #37056

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>

* Update docs/documentation/upgrading/topics/changes/changes-26_2_0.adoc

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>

---------

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-02-17 16:30:05 +01:00
Pedro Ruivo
81c65c8174 Rename operator strategy options
Closes #37090

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2025-02-12 11:21:22 +01:00
Pedro Ruivo
c650984267 Operator: automatic upgrade strategy
Closes #36748

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2025-02-10 18:54:14 +01:00
Pedro Ruivo
0f91e67b90 Feature flag: rolling-updates
Closes #36840

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2025-02-06 17:03:50 +01:00
Steven Hawkins
332bf122f1 fix: detecting provider changes when running start optimized (#35845)
closes: #34665

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-02-03 16:20:42 +00:00
Steven Hawkins
b841788343 fix: allow the keycloak instances to stop gracefully on deletion (#36655)
also reusing curl pods when there is no label

closes: #34868 #28244

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-01-28 18:27:13 +01:00
Steven Hawkins
ece56095a7 fix: refinements to comparison logic (#36875)
related to #36520

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-01-28 18:10:25 +01:00
Pedro Ruivo
a6e9736697 New operator spec: upgrade strategy
Closes #36520

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-01-28 10:57:33 +01:00
rmartinc
6cf92d9dc7 Add crl cache to certificate validation
Closes #26473

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-01-22 14:58:35 +01:00
Steven Hawkins
6a31777024 fix: adding the jgroups bind address for ipv6 support (#36504)
* fix: adding the jgroups bind address

closes: #36383

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update operator/src/main/java/org/keycloak/operator/controllers/KeycloakDeploymentDependentResource.java

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-01-16 13:38:46 +01:00
Steven Hawkins
8f49f70ed3 Revert "fix: increasing the startup timeout to 1 hour" (#36358)
This reverts commit cdebe8c2a3.

closes: #36347

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-01-13 08:57:59 +01:00
Steve Hawkins
cdebe8c2a3 fix: increasing the startup timeout to 1 hour
closes: #36308

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-01-09 14:57:23 +01:00
Martin Bartoš
7cb7718ae4 OTEL: merge Operator tracing test cases (#36264)
Closes #36263

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-01-07 12:54:09 +01:00
Pedro Ruivo
3767642f93 [Operator] Network Policy Rules
Closes #35598

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2024-12-19 10:06:25 +01:00
Martin Bartoš
9f13b271ec OTEL: Fix #podNamePropagation test for Operator (#35769)
Fixes #32490

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2024-12-16 13:20:03 +01:00
Martin Bartoš
41356dff24 Add Keycloak CR support for Tracing options (#35703)
Closes #32092

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2024-12-12 12:59:27 +01:00
Pedro Ruivo
e8841b6ae3 Enhance the Keycloak Operator with Network Policies (#34788)
Closes #34659

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2024-12-04 09:50:28 +01:00