Commit graph

150 commits

Author SHA1 Message Date
Joshua Cuellar
3d340d17a4
Removes startup probe from KeycloakRealmImport job container (#32370)
Closes #32368

Signed-off-by: Joshua Cuellar <joshuac.cuellar@outlook.com>
2024-08-26 08:01:46 +00:00
Martin Bartoš
607ab01405
OTEL: Dynamic service name for tracing in K8s environment (#32140)
* OTEL: Dynamic service name for tracing in K8s environment

Closes #32095

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/guides/server/tracing.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2024-08-21 17:22:36 +02:00
Steven Hawkins
ea3937f37c
fix: always replacing placeholders (#31871)
closes: #31625

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-08-12 16:20:47 +00:00
Steven Hawkins
a7c71dc0bc
task: removing 10 second poll for optional secrets / configmaps (#31729)
closes: #31680

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-08-08 08:21:04 -04:00
Steven Hawkins
6a91436746
enhance: add bootstrap admin handling to the operator (#31646)
switching to manual invocation of statefulset reconciliation

closes: #30004



* Update docs/guides/operator/advanced-configuration.adoc




* enhance: add bootstrap admin handling to the operator

closes: #30004



---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2024-07-29 14:08:31 +02:00
Steven Hawkins
22f8e5cdf0
Added field to the RealmImport spec to replace environment variables within the realm import (#31232)
* Added field to the RealmImport spec to replace environment variables within the realm import

Closes #26470

Signed-off-by: stustison <scott.tustison@gmail.com>

* Added field to the RealmImport spec to replace environment variables within the realm import

Closes #26470

Signed-off-by: stustison <scott.tustison@gmail.com>

* testing refinement for placeholder handling

closes: #26470

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* changing from placeholdersecret to placeholder

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/operator/realm-import.adoc

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* Update docs/documentation/release_notes/topics/26_0_0.adoc

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: stustison <scott.tustison@gmail.com>
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: stustison <scott.tustison@gmail.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2024-07-29 11:16:09 +02:00
Václav Muzikář
6f62e6768c Revert "operator bootstrap admin handling (#30711)"
This reverts commit 3139b82e3c.
2024-07-26 10:02:13 +02:00
Steven Hawkins
3139b82e3c
operator bootstrap admin handling (#30711)
* enhance: add bootstrap admin handling to the operator

closes: #30004

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/operator/advanced-configuration.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* enhance: add bootstrap admin handling to the operator

closes: #30004

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2024-07-24 17:35:13 +02:00
Steven Hawkins
14a9927e29
fix: scaling and tuning getting started guide
closes: #29388

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
2024-07-18 13:31:37 +00:00
Steve Hawkins
9247029ca3 fix: removes the operator's usage of the v1 proxy option
closes: #30945

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-07-11 14:21:50 +02:00
Alexander Schwartz
bebb314a16
Use port name instead of port number for the ingress (#30925)
Also adding a retry if server-side-apply fails

Closes #30924

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
2024-07-10 13:27:06 -04:00
Steven Hawkins
a7ae90cbb6
fix: adds affinity and other scheduling to the operator (#29977)
closes: #29258

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-07-03 20:07:03 +02:00
Peter Zaoral
add45a25a8
Add default CPU limit/request for the operator (#30601)
Closes: #27432

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
2024-07-01 15:12:43 +02:00
Steven Hawkins
bc38b5db1b
fix: add proxy env propagation (#30741)
* fix: add proxy env propagation

closes: #30165

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update operator/src/main/java/org/keycloak/operator/controllers/KeycloakDeploymentDependentResource.java

Co-authored-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2024-06-25 18:02:27 +02:00
Sascha Marcel Schmidt
13ef6fb1c8
fix(operator): Scale statefulset to 0 to prepare for update (#30450)
When performing a keycloak update, the operator is supposed to make sure that
potential database migrations are run with only one pod active. This change
makes the operator scale down the stateful set to zero pods in preparation for
the update. The next reconciliation loop will scale the stateful set back up
and change the image, making sure migrations are being run on the first pod
that is brought up. This also makes sure that the rollover works even if the
infinispan versions are incompatible. (ref: #30449)

Signed-off-by: Schmidt, Sascha (sasschmidt) <sascha.schmidt@breuninger.de>
2024-06-21 13:44:54 +00:00
Václav Muzikář
0846181809
Use only plain hostname in Ingress (#30345)
Closes #30332

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2024-06-12 08:54:54 +02:00
Steven Hawkins
5059a02eb2
fix: minor refinements to collection utils (#29536)
closes: #29535

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-06-06 10:07:34 -04:00
Steven Hawkins
a1feb167d6
fix: adds a test and permissions for cache configmap (#28652)
closes: #28638

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-04-12 13:37:49 +02:00
Václav Muzikář
33f580daa4
Hostname v2 for Operator (#28599)
Closes #27728

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2024-04-10 18:56:47 +02:00
Martin Bartoš
7f048300fe
Support management port for health and metrics (#27629)
* Support management port for health and metrics

Closes #19334

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Deprecate option

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Remove relativePath first-class citizen, rename ManagementSpec

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Fix KeycloakDistConfiguratorTest

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2024-04-03 16:18:44 +02:00
Anh Pham
0286e7ad5d
To support the Istio choose protocol, add the port name to the discovery service. (#27940)
Signed-off-by: Anh Pham <anhpn.uit@gmail.com>
Co-authored-by: Anh Pham <anh.pham4@hitachids.com>
2024-03-26 17:36:53 +01:00
Steven Hawkins
05056330dc
fix: making the truststore name field optional (#28013)
closes: #28012

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-03-19 18:02:29 +00:00
Alexander Schwartz
bba701437f
Use JDK17 features to simplify code with multiline strings (#27495)
Closes #27494

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-03-05 09:37:38 +01:00
Václav Muzikář
33425dacd9
Add proxy-headers option to the Keycloak CR (#27092)
Closes #25179

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2024-02-21 12:19:37 +01:00
Václav Muzikář
de60c9b469
Tweak the default memory request and limit in the Operator (#27170)
Closes #27169

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2024-02-21 10:03:17 +01:00
Martin Bartoš
59007844d9
Supported option to specify resource management for pods in Keycloak CR (#26661)
Closes #26456

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2024-02-15 13:38:41 +01:00
Steven Hawkins
5f0ee7b0f7
fix: adds service-ca.crt to the trust stores (#26912)
closes: #26910

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-02-09 14:32:12 +01:00
Steven Hawkins
77581d2527
fix: change from operator. to kc.operator. keys (#26414)
closes #12352

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-02-08 15:03:20 +01:00
Sol Roberts
5401c63c9e
Update Keycloak operator example with correct hostname syntax (#26796)
* Update Keycloak operator example with correct hostname syntax

Closes #26281

Signed-off-by: badgerops <github@badgerops.net>

* Adding missing ',' to ensure valid JSON structure

Closes #26281

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>

---------

Signed-off-by: badgerops <github@badgerops.net>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2024-02-06 12:21:26 +01:00
Steven Hawkins
3001855858
fix: using iteration to allow recursive structures (#26789)
closes: #21130

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-02-05 20:10:27 +01:00
Michal Hajas
c579cf737f
Fix Keycloak operator setting for cache-config-file (#26666)
Fixes: #26458

Signed-off-by: Michal Hajas <mhajas@redhat.com>
2024-02-01 12:47:35 +01:00
Steven Hawkins
37acb2fd09
task: upgrading to quarkus 3.7.0.CR1 (#26203)
there are several downgrades from the quarkus versions, and some
additional logic needed to handle changes with re-creating the
configuration

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-01-31 18:23:07 +00:00
Steven Hawkins
f55e903092
Convert watching to polling and adding infinispan config file support (#26510)
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-01-31 12:57:34 +00:00
Sol Roberts
29bc02a699
fix http_tlsSecret example for operator (#26282)
Signed-off-by: BadgerOps <github@badgerops.net>
2024-01-25 11:10:56 +01:00
Steven Hawkins
bee7595275
fix: adding the kube ca cert to the truststores
closes #10794

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2023-12-18 15:56:43 +01:00
Steven Hawkins
08751001db
enhance: adds truststores to the keycloak cr (#25215)
also generally correcting the misspelling trustore

closes: #24798

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2023-12-14 11:15:06 -03:00
Steven Hawkins
4db4982e9d
enhance: adding a start optimized flag (#25216)
closes: #25015



Update docs/guides/operator/customizing-keycloak.adoc
Update docs/documentation/release_notes/topics/24_0_0.adoc
Update operator/src/main/java/org/keycloak/operator/crds/v2alpha1/deployment/KeycloakSpec.java

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2023-12-11 16:15:16 +00:00
Steven Hawkins
319d9e78fb
fix: use name to find the admin secret (#25362)
closes: #25307

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2023-12-08 15:14:09 +01:00
Václav Muzikář
040124bfa7
Fix missing CRD metadata in Operator CSV (#25043)
Closed #24984

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2023-11-27 12:37:35 +00:00
Václav Muzikář
3bc7ef7ed5
Update to Quarkus 3.2.9 (#24842)
Closes #24841
Closes #24160

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Co-authored-by: Bruno Oliveira da Silva <bruno@abstractj.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2023-11-20 14:27:13 +01:00
Steven Hawkins
b6d5083e9b
fix: check operand StatefulSet is ready before creating job (#24720)
closes #24526

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Piotr Godowski <Piotr.Godowski@pl.ibm.com>
2023-11-15 14:08:27 +01:00
Václav Muzikář
511fc76d50
Remove Quarkus branding from the Operator log (#24418)
Closes #24413

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2023-10-31 14:18:18 +00:00
Steven Hawkins
5ff5e12782
fix: moves jgroups.dns.query to a system property (#24057)
* fix: moves jgroups.dns.query to a system property

closes #21830

* removing the dns query from import

* removing the dns query from import

also removing cache-stack
2023-10-20 09:50:29 +02:00
Pierre Prinetti
22868406c2
operator: Replace dead documentation link (#23777)
Before this patch, the documentation link generated for the Operator
page resulted in a 404 Not Found on Github pages.

With this change, the documentation link points to the "Operator" anchor
in the Keycloak docs index. Note that the operator docs don't seem to be
versioned on the Keycloak website.
2023-10-19 11:53:46 +00:00
Alex Szczuczko
359a946a6f
Optionally accept RELATED_IMAGE_KEYCLOAK as the operand coordinate (#24018)
This changes the quarkus configuration of the operator so that if the
RELATED_IMAGE_KEYCLOAK environment variable is present, it will be
accepted over the default value

Closes #24017
2023-10-17 15:17:51 +00:00
Steven Hawkins
a65af2d254
Converts keycloakdeployment to a dependent resource (#22591)
Closes #22225
2023-10-06 17:52:50 +00:00
Steven Hawkins
d351290c0c
switching the operator role to clusterrole for ingresses config (#23641)
closes #23629
2023-10-03 12:31:23 +02:00
Steven Hawkins
0bae359058
narrows condition status to a string (#22439)
Closes #21299
2023-09-22 18:29:29 +02:00
Steven Hawkins
7d1e9a783f
adds a default domain on openshift if one is not specified (#23324)
Closes #21741
2023-09-21 14:43:29 +02:00
Steven Hawkins
b343f87c60
ensures support for cluster-wide monitoring (#22821)
Partially addresses #15888
2023-09-19 17:46:37 +00:00