From d7c6464ad60c8bf607ef49806df431bf2b986b44 Mon Sep 17 00:00:00 2001 From: Michal Hajas Date: Wed, 28 Feb 2024 16:56:15 +0100 Subject: [PATCH] Update the HA guide with the workaround for ISPN-15758 Closes #27353 Signed-off-by: Michal Hajas Signed-off-by: Alexander Schwartz Co-authored-by: Alexander Schwartz --- .../connect-keycloak-to-external-infinispan.adoc | 7 ++++--- .../examples/generated/ispn-single.yaml | 2 +- .../examples/generated/ispn-site-a.yaml | 2 +- .../examples/generated/ispn-site-b.yaml | 2 +- .../examples/generated/keycloak-ispn.yaml | 5 ++++- .../src/kcb-infinispan-cache-remote-store-config.xml | 9 ++++++--- 6 files changed, 17 insertions(+), 10 deletions(-) diff --git a/docs/guides/high-availability/connect-keycloak-to-external-infinispan.adoc b/docs/guides/high-availability/connect-keycloak-to-external-infinispan.adoc index 831c2fd797..82acb0d0ad 100644 --- a/docs/guides/high-availability/connect-keycloak-to-external-infinispan.adoc +++ b/docs/guides/high-availability/connect-keycloak-to-external-infinispan.adoc @@ -23,9 +23,10 @@ This topic describes advanced {jdgserver_name} configurations for {project_name} include::examples/src/kcb-infinispan-cache-remote-store-config.xml[tag=keycloak-ispn-remotestore] ---- <1> New tag `` to connect it to the remote store. -<2> For the address to the remote store, reference two environment variables for host name and port number. -<3> For authentication, reference two environment variables for username and password. -<4> To secure the remote store connection, use the Kubernetes mechanisms of the pre-configured truststore. +<2> This is a workaround for issue https://github.com/keycloak/keycloak/issues/27117[keycloak#27117] and will be removed in the following versions. +<3> For the address to the remote store, reference two environment variables for host name and port number. +<4> For authentication, reference two environment variables for username and password. +<5> To secure the remote store connection, use the Kubernetes mechanisms of the pre-configured truststore. .. Prepare an {jdgserver_name} Cache configuration XML from the file `cache-ispn.xml`, which is part of the {project_name} distribution. For each `replicated-cache` entry, add the tag `` as shown below. diff --git a/docs/guides/high-availability/examples/generated/ispn-single.yaml b/docs/guides/high-availability/examples/generated/ispn-single.yaml index e7aa293eca..5971ac7dd5 100644 --- a/docs/guides/high-availability/examples/generated/ispn-single.yaml +++ b/docs/guides/high-availability/examples/generated/ispn-single.yaml @@ -224,7 +224,7 @@ spec: expose: type: Route configMapName: "cluster-config" - image: quay.io/infinispan/server:14.0.24.Final + image: quay.io/infinispan/server:14.0.25.Final configListener: enabled: false container: diff --git a/docs/guides/high-availability/examples/generated/ispn-site-a.yaml b/docs/guides/high-availability/examples/generated/ispn-site-a.yaml index 697f70437d..a65174d8b4 100644 --- a/docs/guides/high-availability/examples/generated/ispn-site-a.yaml +++ b/docs/guides/high-availability/examples/generated/ispn-site-a.yaml @@ -363,7 +363,7 @@ spec: expose: type: Route configMapName: "cluster-config" - image: quay.io/infinispan/server:14.0.24.Final + image: quay.io/infinispan/server:14.0.25.Final configListener: enabled: false container: diff --git a/docs/guides/high-availability/examples/generated/ispn-site-b.yaml b/docs/guides/high-availability/examples/generated/ispn-site-b.yaml index f91ee1e7cd..745e7c7d33 100644 --- a/docs/guides/high-availability/examples/generated/ispn-site-b.yaml +++ b/docs/guides/high-availability/examples/generated/ispn-site-b.yaml @@ -363,7 +363,7 @@ spec: expose: type: Route configMapName: "cluster-config" - image: quay.io/infinispan/server:14.0.24.Final + image: quay.io/infinispan/server:14.0.25.Final configListener: enabled: false container: diff --git a/docs/guides/high-availability/examples/generated/keycloak-ispn.yaml b/docs/guides/high-availability/examples/generated/keycloak-ispn.yaml index b7e21ff27a..a2359aa4cd 100644 --- a/docs/guides/high-availability/examples/generated/keycloak-ispn.yaml +++ b/docs/guides/high-availability/examples/generated/keycloak-ispn.yaml @@ -111,6 +111,9 @@ data: raw-values="true" shared="true" segmented="false"> + + + -56f92cd9012613402e2a7a61aded0f218d077b8c6345b22922ca7bf1a5c64984-v1.27.0 + checksum/config: ebe9b8c121995f449a1a4e339af244b2bb67769af84b3cbdff61159948447e20-4832924b47210161956e3b1718daf07ff52d801545186a76c391485eaf1897d3--dbc855dd9b7f7c0b828760ea8cd7427e8a2f5a5be303fba7dee0c6bbb68258d4-v1.27.0 spec: containers: - env: diff --git a/docs/guides/high-availability/examples/src/kcb-infinispan-cache-remote-store-config.xml b/docs/guides/high-availability/examples/src/kcb-infinispan-cache-remote-store-config.xml index bdf643136f..675a29da56 100644 --- a/docs/guides/high-availability/examples/src/kcb-infinispan-cache-remote-store-config.xml +++ b/docs/guides/high-availability/examples/src/kcb-infinispan-cache-remote-store-config.xml @@ -53,20 +53,23 @@ raw-values="true" shared="true" segmented="false"> + + + + port="${env.KC_REMOTE_STORE_PORT}"/> + realm="default"/> + type="pem"/>