9d3cfe0672
Remove X-XSS-Protection header ( #36881 )
...
Closes #21728
Signed-off-by: akbarhusainpatel <apatel@intermiles.com >
2025-02-19 08:42:26 +01:00
764ca50fc4
Upgrade to Quarkus 3.18.2 ( #37300 )
...
* Upgrade to Quarkus 3.18.2
Closes #37056
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com >
* Update docs/documentation/upgrading/topics/changes/changes-26_2_0.adoc
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net >
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz >
---------
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com >
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz >
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net >
2025-02-17 16:30:05 +01:00
81c65c8174
Rename operator strategy options
...
Closes #37090
Signed-off-by: Pedro Ruivo <pruivo@redhat.com >
2025-02-12 11:21:22 +01:00
c650984267
Operator: automatic upgrade strategy
...
Closes #36748
Signed-off-by: Pedro Ruivo <pruivo@redhat.com >
2025-02-10 18:54:14 +01:00
0f91e67b90
Feature flag: rolling-updates
...
Closes #36840
Signed-off-by: Pedro Ruivo <pruivo@redhat.com >
2025-02-06 17:03:50 +01:00
332bf122f1
fix: detecting provider changes when running start optimized ( #35845 )
...
closes : #34665
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
2025-02-03 16:20:42 +00:00
b841788343
fix: allow the keycloak instances to stop gracefully on deletion ( #36655 )
...
also reusing curl pods when there is no label
closes : #34868 #28244
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
2025-01-28 18:27:13 +01:00
ece56095a7
fix: refinements to comparison logic ( #36875 )
...
related to #36520
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
2025-01-28 18:10:25 +01:00
a6e9736697
New operator spec: upgrade strategy
...
Closes #36520
Signed-off-by: Pedro Ruivo <pruivo@redhat.com >
Signed-off-by: Alexander Schwartz <aschwart@redhat.com >
Co-authored-by: Alexander Schwartz <aschwart@redhat.com >
2025-01-28 10:57:33 +01:00
6cf92d9dc7
Add crl cache to certificate validation
...
Closes #26473
Signed-off-by: rmartinc <rmartinc@redhat.com >
2025-01-22 14:58:35 +01:00
6a31777024
fix: adding the jgroups bind address for ipv6 support ( #36504 )
...
* fix: adding the jgroups bind address
closes : #36383
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
* Update operator/src/main/java/org/keycloak/operator/controllers/KeycloakDeploymentDependentResource.java
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net >
Signed-off-by: Steven Hawkins <shawkins@redhat.com >
---------
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
Signed-off-by: Steven Hawkins <shawkins@redhat.com >
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net >
2025-01-16 13:38:46 +01:00
8f49f70ed3
Revert "fix: increasing the startup timeout to 1 hour" ( #36358 )
...
This reverts commit cdebe8c2a3closes : #36347
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
2025-01-13 08:57:59 +01:00
cdebe8c2a3
fix: increasing the startup timeout to 1 hour
...
closes : #36308
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
2025-01-09 14:57:23 +01:00
7cb7718ae4
OTEL: merge Operator tracing test cases ( #36264 )
...
Closes #36263
Signed-off-by: Martin Bartoš <mabartos@redhat.com >
2025-01-07 12:54:09 +01:00
3767642f93
[Operator] Network Policy Rules
...
Closes #35598
Signed-off-by: Pedro Ruivo <pruivo@redhat.com >
2024-12-19 10:06:25 +01:00
9f13b271ec
OTEL: Fix #podNamePropagation test for Operator ( #35769 )
...
Fixes #32490
Signed-off-by: Martin Bartoš <mabartos@redhat.com >
2024-12-16 13:20:03 +01:00
41356dff24
Add Keycloak CR support for Tracing options ( #35703 )
...
Closes #32092
Signed-off-by: Martin Bartoš <mabartos@redhat.com >
2024-12-12 12:59:27 +01:00
e8841b6ae3
Enhance the Keycloak Operator with Network Policies ( #34788 )
...
Closes #34659
Signed-off-by: Pedro Ruivo <pruivo@redhat.com >
2024-12-04 09:50:28 +01:00
8d314a69a0
fix: adding doc note about admin ingress ( #33392 )
...
* fix: adding doc note about admin ingress
closes : #33203
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
* Update docs/guides/operator/basic-deployment.adoc
Co-authored-by: Martin Bartoš <mabartos@redhat.com >
Signed-off-by: Steven Hawkins <shawkins@redhat.com >
---------
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
Signed-off-by: Steven Hawkins <shawkins@redhat.com >
Co-authored-by: Martin Bartoš <mabartos@redhat.com >
2024-09-30 14:11:58 +00:00
fa08cef8ef
Disable broken operator test instead of entire suite ( #33118 )
...
Signed-off-by: Jon Koops <jonkoops@gmail.com >
2024-09-19 21:23:44 +00:00
bfe9d2343c
Remove crd-generator-apt from operator ( #32555 )
...
* Remove crd-generator-apt from operator to avoid generating CRDs multiple times
Signed-off-by: Bernhard Strähle <bernhard.straehle@gmail.com >
* Add io.sundr/builder-annotations to managed dependencies
Signed-off-by: Bernhard Strähle <bernhard.straehle@gmail.com >
---------
Signed-off-by: Bernhard Strähle <bernhard.straehle@gmail.com >
2024-09-13 12:01:55 +02:00
afcbf79582
OTEL: Profile Feature
...
Closes #32231
Signed-off-by: Martin Bartoš <mabartos@redhat.com >
2024-08-30 13:19:09 +02:00
3d340d17a4
Removes startup probe from KeycloakRealmImport job container ( #32370 )
...
Closes #32368
Signed-off-by: Joshua Cuellar <joshuac.cuellar@outlook.com >
2024-08-26 08:01:46 +00:00
607ab01405
OTEL: Dynamic service name for tracing in K8s environment ( #32140 )
...
* OTEL: Dynamic service name for tracing in K8s environment
Closes #32095
Signed-off-by: Martin Bartoš <mabartos@redhat.com >
* Update docs/guides/server/tracing.adoc
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz >
Signed-off-by: Martin Bartoš <mabartos@redhat.com >
---------
Signed-off-by: Martin Bartoš <mabartos@redhat.com >
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz >
2024-08-21 17:22:36 +02:00
cb418b0bfc
Upgrade to Quarkus 3.13.2 ( #31678 )
...
* Upgrade to Quarkus 3.13.2
Closes #31676
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com >
Co-authored-by: Peter Zaoral <pzaoral@redhat.com >
Co-authored-by: Martin Bartoš <mabartos@redhat.com >
2024-08-16 11:41:34 +02:00
ea3937f37c
fix: always replacing placeholders ( #31871 )
...
closes : #31625
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
2024-08-12 16:20:47 +00:00
a7c71dc0bc
task: removing 10 second poll for optional secrets / configmaps ( #31729 )
...
closes : #31680
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
2024-08-08 08:21:04 -04:00
6a91436746
enhance: add bootstrap admin handling to the operator ( #31646 )
...
switching to manual invocation of statefulset reconciliation
closes : #30004
* Update docs/guides/operator/advanced-configuration.adoc
* enhance: add bootstrap admin handling to the operator
closes : #30004
---------
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
Signed-off-by: Steven Hawkins <shawkins@redhat.com >
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz >
2024-07-29 14:08:31 +02:00
22f8e5cdf0
Added field to the RealmImport spec to replace environment variables within the realm import ( #31232 )
...
* Added field to the RealmImport spec to replace environment variables within the realm import
Closes #26470
Signed-off-by: stustison <scott.tustison@gmail.com >
* Added field to the RealmImport spec to replace environment variables within the realm import
Closes #26470
Signed-off-by: stustison <scott.tustison@gmail.com >
* testing refinement for placeholder handling
closes : #26470
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
* changing from placeholdersecret to placeholder
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
* Update docs/guides/operator/realm-import.adoc
Co-authored-by: Martin Bartoš <mabartos@redhat.com >
Signed-off-by: Steven Hawkins <shawkins@redhat.com >
* Update docs/documentation/release_notes/topics/26_0_0.adoc
Co-authored-by: Martin Bartoš <mabartos@redhat.com >
Signed-off-by: Steven Hawkins <shawkins@redhat.com >
---------
Signed-off-by: stustison <scott.tustison@gmail.com >
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
Signed-off-by: Steven Hawkins <shawkins@redhat.com >
Co-authored-by: stustison <scott.tustison@gmail.com >
Co-authored-by: Martin Bartoš <mabartos@redhat.com >
2024-07-29 11:16:09 +02:00
28a27c9148
Improving the error messages in the Operator Test
...
Closes #31598
Signed-off-by: Alexander Schwartz <aschwart@redhat.com >
2024-07-29 10:37:42 +02:00
6c8aa65346
All CURL commands should check the HTTP response code ( #31602 )
...
Closes #31598
Signed-off-by: Alexander Schwartz <aschwart@redhat.com >
2024-07-26 12:38:06 +02:00
6f62e6768c
Revert "operator bootstrap admin handling ( #30711 )"
...
This reverts commit 3139b82e3c
2024-07-26 10:02:13 +02:00
3139b82e3c
operator bootstrap admin handling ( #30711 )
...
* enhance: add bootstrap admin handling to the operator
closes : #30004
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
* Update docs/guides/operator/advanced-configuration.adoc
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz >
Signed-off-by: Steven Hawkins <shawkins@redhat.com >
* enhance: add bootstrap admin handling to the operator
closes : #30004
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
---------
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
Signed-off-by: Steven Hawkins <shawkins@redhat.com >
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz >
2024-07-24 17:35:13 +02:00
14a9927e29
fix: scaling and tuning getting started guide
...
closes : #29388
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
Signed-off-by: Steven Hawkins <shawkins@redhat.com >
Co-authored-by: Alexander Schwartz <aschwart@redhat.com >
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com >
2024-07-18 13:31:37 +00:00
9247029ca3
fix: removes the operator's usage of the v1 proxy option
...
closes : #30945
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
2024-07-11 14:21:50 +02:00
bebb314a16
Use port name instead of port number for the ingress ( #30925 )
...
Also adding a retry if server-side-apply fails
Closes #30924
Signed-off-by: Alexander Schwartz <aschwart@redhat.com >
Co-authored-by: Steven Hawkins <shawkins@redhat.com >
2024-07-10 13:27:06 -04:00
a7ae90cbb6
fix: adds affinity and other scheduling to the operator ( #29977 )
...
closes : #29258
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
2024-07-03 20:07:03 +02:00
add45a25a8
Add default CPU limit/request for the operator ( #30601 )
...
Closes : #27432
Signed-off-by: Peter Zaoral <pzaoral@redhat.com >
2024-07-01 15:12:43 +02:00
bc38b5db1b
fix: add proxy env propagation ( #30741 )
...
* fix: add proxy env propagation
closes : #30165
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
* Update operator/src/main/java/org/keycloak/operator/controllers/KeycloakDeploymentDependentResource.java
Co-authored-by: Martin Bartoš <mabartos@redhat.com >
---------
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
Co-authored-by: Martin Bartoš <mabartos@redhat.com >
2024-06-25 18:02:27 +02:00
13ef6fb1c8
fix(operator): Scale statefulset to 0 to prepare for update ( #30450 )
...
When performing a keycloak update, the operator is supposed to make sure that
potential database migrations are run with only one pod active. This change
makes the operator scale down the stateful set to zero pods in preparation for
the update. The next reconciliation loop will scale the stateful set back up
and change the image, making sure migrations are being run on the first pod
that is brought up. This also makes sure that the rollover works even if the
infinispan versions are incompatible. (ref: #30449 )
Signed-off-by: Schmidt, Sascha (sasschmidt) <sascha.schmidt@breuninger.de >
2024-06-21 13:44:54 +00:00
df18629ffe
Use a default Java version from root POM ( #29927 )
...
Signed-off-by: Jon Koops <jonkoops@gmail.com >
2024-06-21 14:19:31 +02:00
0846181809
Use only plain hostname in Ingress ( #30345 )
...
Closes #30332
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com >
2024-06-12 08:54:54 +02:00
5059a02eb2
fix: minor refinements to collection utils ( #29536 )
...
closes : #29535
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
2024-06-06 10:07:34 -04:00
792a3457ff
Use Maven wrapper instead of platform dependent Maven version ( #29988 )
...
Closes #29987
Signed-off-by: Alexander Schwartz <aschwart@redhat.com >
2024-06-03 15:45:39 +02:00
262fc09edc
OpenJDK 21 support ( #28518 )
...
* OpenJDK 21 support
Closes #28517
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz >
Signed-off-by: Martin Bartoš <mabartos@redhat.com >
* x509 SAN UPN other name is not handled in JDK 21 (#904 )
closes #29968
Signed-off-by: mposolda <mposolda@gmail.com >
---------
Signed-off-by: Martin Bartoš <mabartos@redhat.com >
Signed-off-by: mposolda <mposolda@gmail.com >
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz >
Co-authored-by: Marek Posolda <mposolda@gmail.com >
2024-06-03 14:17:28 +02:00
a74b084d9d
diagnostic: add a thread dump on failure ( #29749 )
...
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
2024-05-21 16:22:11 +00:00
cbce548e71
Infinispan 15.0.3.Final
...
Closes #29068
Signed-off-by: Pedro Ruivo <pruivo@redhat.com >
2024-05-08 17:18:39 +02:00
a3d67a2b64
fix: add / clean labels on community images ( #28760 )
...
closes : #24414
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
2024-04-25 11:48:13 +02:00
d7ef650623
task: use informer rather than 0 interval polling ( #28901 )
...
related to: #28869
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
2024-04-19 09:05:32 +02:00
a3b4b487d5
fix: adjusting the test to use a fully valid config
...
closes : #28638
Signed-off-by: Steve Hawkins <shawkins@redhat.com >
2024-04-12 21:17:52 +02:00
Akbar Husain