libre.sh/keycloak-scim
3
0
Fork 0
Code Issues 15 Pull requests Releases Packages Activity Actions
23689 commits 4 branches 5 tags 483 MiB
Commit graph

186 commits

Author SHA1 Message Date
Václav Muzikář
9c63cf98e7 Use --verbose by default in Operator deployments 
Closes #21802
 2023-07-21 18:46:01 +02:00
Steven Hawkins
3cbd4eb10a
removes the filtering of erroneous enum values (#21790) 
With the update to fabric8 6.7.2, this filtering is no longer needed

Closes #20935
 2023-07-21 08:49:01 +00:00
Václav Muzikář
776bcbcbd4
Update bcpkix and bcprov dependencies (#21543) 
Closes #21360
 2023-07-20 11:57:18 +02:00
Steven Hawkins
1fa6f6ab2d
Adds a pod list rbac (#21832) 
Closes #21814
 2023-07-20 09:05:07 +00:00
Steven Hawkins
ebe6e6c965
switches the workaround to JsonNode, which produces a cleaner crd (#21788) 
Closes #21739
 2023-07-19 08:12:44 +02:00
Steven Hawkins
fa83034474
Also replaces md5 usage with sha-256 (#21162) 
closes #21125
 2023-07-17 10:48:04 +02:00
Steven Hawkins
b0b9c1a76e
Switches the merging logic to using the override as the basis (#21415) 
Ensures additionalProperties are the lowest precedence

Also removes support for setting the image pull secrets via the
unsupported podtemplate

Closes #10503
 2023-07-14 12:42:03 +02:00
Václav Muzikář
6a3ea1a084 keycloakCRName and realm are no longer marked as required in KeycloakRealmImport CRD 
Closes #21607
 2023-07-12 08:03:12 -03:00
Pedro Ruivo
165c36f9ff
Enable publishNotReadyAddresses for discovery service (#21511) 
Closes #21493
 2023-07-10 17:02:55 +02:00
Peter Zaoral
2b1c29a6f2 Use Quarkus Platform BOM 
Closes #20570
Closes #15870

Co-authored-by: Peter Zaoral <pzaoral@redhat.com>
 2023-07-06 12:45:48 -03:00
Václav Muzikář
ad988ca914 Upgrade to Quarkus 3.2.0.Final and QOSDK 6.2.0 
Closes #21272
 2023-07-03 08:11:18 -03:00
Steven Hawkins
b0e7958906
adds port names to the pod / service (#21291) 
Closes #12593
 2023-07-03 08:13:30 +02:00
Steven Hawkins
5ee21ab6d1
scrapes pod container statuses when waiting for more to become available (#21257) 
Closes #10285
 2023-06-30 08:49:48 +00:00
Steven Hawkins
73076a37f9
adding just crd tests of the specs (#21302) 
Closes #20936
 2023-06-29 16:55:11 +02:00
Steven Hawkins
88992dae19
widens status to be any type. (#21281) 
this is to avoid olm complaining about an incompatible schema during
upgrade

Relates to #13074
 2023-06-29 08:57:22 +02:00
Steven Hawkins
e9c9f80e8d
adds an instance label to support multiple instances (#20906) 
Closes #10562 #14220
 2023-06-28 18:05:23 +02:00
Steven Hawkins
4dba17253e
changes the label prefix to operator.keycloak.org (#21175) 
closes #21141
 2023-06-28 11:21:02 +02:00
Steve Hawkins
6a92669139 finishes the conversion away from createOrReplace 
however this is a broader change given the implications of
serverSideApply vs createOrReplace - mostly the concern of only applying
the managed state not based upon an existing resource

Closes #20850
 2023-06-23 11:55:47 -03:00
Martin Bartoš
13a463f71e Avoid calls to Control Plane when the secondary resource is in cache 
Closes #21109
 2023-06-22 10:03:35 -03:00
Martin Bartoš
0ecdebc000 Incorrect Url on Keycloak Health - Liveness and Readiness, no Startup Probes 
Fixes #17388
 2023-06-22 05:32:53 -03:00
Steve Hawkins
5701f70157 changes condition status to be a string, rather than a boolean 
Closes #13074
 2023-06-21 17:14:33 -03:00
Steve Hawkins
4540ca365c infers the default ip/hostname from the client 
Closes #21114
 2023-06-21 12:30:54 -03:00
Steve Hawkins
14747f45ca removing the usage of MultivaluedStringStringHashMap and ComponentExport 
map

upstream improvements make this no longer necessary

Closes #20937
 2023-06-21 12:30:41 -03:00
Alex Szczuczko
3246a15442 Use quarkus-operator-sdk-bundle-generator for OLM YAMLs 
Closes #10911
 2023-06-20 15:01:44 -03:00
Martin Bartoš
c3000984db
Upgrade to Quarkus 3.1.1.Final (#20958) 
Co-authored-by: Bruno Oliveira da Silva <bruno@abstractj.com>
 2023-06-14 08:51:38 -03:00
Steve Hawkins
7e2565c9fe using multiple SchemaSwap annotations instead of the schell script 
Closes #10736
 2023-06-13 06:00:28 -03:00
Steve Hawkins
c1e96564dc Removes the check for full readiness of 3 replicas 
In the ci environment the amount of time between 3 pods being created
and all being ready seems highly variable.  Also since we currently lack
the status information to determine if a deployment is not progressing,
it's best just to remove this check.  The latter check asserting full
readiness of 2 replicas will suffice.

Closes #20888
 2023-06-12 12:34:48 -03:00
Steven Hawkins
91a3ab6b87
expands the status handling to account for the prior status (#20856) 
Closes #20853
 2023-06-08 17:09:39 +02:00
Steven Hawkins
075d913037
enabling keycloak to be a scalable resource (#20828) 
Closes #20825
 2023-06-07 17:57:25 +02:00
Steven Hawkins
d77041f177
mostly updating the logic to newer fabric8 apis (#20825) 
Closes #20822
 2023-06-07 14:58:39 +02:00
Václav Muzikář
989ffe2d22
Remove Fabric8 override from the Operator (#20728) 
Closes #20130
 2023-06-06 13:58:20 +00:00
Steven Hawkins
d045156ba4
Adding the ability to set ingressClassName (#20796) 
Closes #20723
 2023-06-05 21:10:39 +00:00
Václav Muzikář
f627e9535f
Add support to the Operator for setting default labels on Keycloak pods (#20661) 
Closes #20625
 2023-06-01 13:39:41 +02:00
Pedro Ruivo
cffb8141e2
Allow custom annotation in Ingress (#20577) 
Closes #20576
 2023-05-26 15:24:59 +00:00
Alex Szczuczko
1578506475
Seperate version properties for hibernate-enhance and quarkus-maven (#20264) 
This will allow them to be defined seperately from aligned dependency
versions suitable for product

Closes #20261
 2023-05-18 14:37:55 +00:00
Andre Nascimento RH
851ecb43fc
Stops the recreation of managed Keycloak Statefulset Pods when Keycloak Operator restarts occasionally. (#20187) 2023-05-09 19:33:12 +02:00
Václav Muzikář
e44464d3b8 Remove OkHttp Client from the Operator 
Closes #19573
 2023-05-05 12:10:39 -03:00
Václav Muzikář
983e40ad2b
Add OpenShift support to KeycloakIngressTest (#20030) 2023-05-02 14:24:54 +02:00
Bruno Oliveira da Silva
373b5c1d9f
Update to Quarkus 3.0.1.Final (#20011) 
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>

Closes #20010
Closes #19080
Closes #17476
Closes #19286
Closes #17557
Closes #17556
Closes #17555
Closes #17475
Closes #15879
Closes #15878
 2023-05-02 10:13:23 +02:00
Václav Muzikář
dd6e73ec7c Upgrade Operator SDK to 6.0.0.CR1 
---
Quarkus3 branch sync no. 14 (24.4.2023)
Resolved conflicts:
keycloak/operator/pom.xml - Modified
 2023-04-27 13:36:54 +02:00
Alexander Schwartz
4f8d67c9fc All commands now auto-reaugment except show-config 
Closes #15782
Closes #15898
Closes #17498
 2023-04-21 15:06:51 +02:00
ikhomyn
84a7b57059
fix db for openshift 2023-04-21 12:36:41 +00:00
Alex Szczuczko
edaa84b1e5
Build the operator container via Dockerfile (#19642) 
Closes #16967
 2023-04-21 08:32:29 +02:00
Jon Koops
972ebb9650
Use a valid SemVer format for the SNAPSHOT version (#17334) 
* Use a valid SemVer format for the SNAPSHOT version

* Update pom.xml

* Update pom.xml

---------

Co-authored-by: Stian Thorgersen <stianst@gmail.com>
Co-authored-by: Stian Thorgersen <stian@redhat.com>
 2023-03-03 11:11:44 +01:00
Andre Nascimento
aa422484e2 Improvements on Operator Integration Tests to make sure that Config set in CR takes precedence. 
Closes #13114
 2023-02-23 08:51:40 +01:00
Andre Nascimento
cb78ea06b0 Make sure the customized Ingress resource isn't deleted when the Keycloak deployed by Operator is killed. 
Closes #14433
 2023-02-16 17:31:31 +01:00
Václav Muzikář
2089878740 Update Operator container to UBI 9 / RHEL 9 
Closes #17068
 2023-02-15 16:26:29 -03:00
Alex Szczuczko
610e3044ad Minimize the RPM content of the Quarkus container 
Even though we use `ubi8-minimal` as the parent of our container, it
still has many RPMs installed that aren't necessary to run the Keycloak
server. Also, since the JDK RPM (that we install on top of
`ubi8-minimal`) is designed for general use, it pulls in more dependency
RPMs than it strictly needs to, like cups and avahi. Keycloak will never
need to access a printer itself!

Trimming down these excess RPMs will improve our CVE statistics with
automated scanners, and therefore let us perform fewer CVE rebuilds.

`ubi8-null.sh` uses the low-level `rpm` command to identify and forcibly
remove dependencies and operating system files that are not required to
boot our Quarkus-based server. This includes `microdnf` and `rpm`
itself! I have preserved bash however, so it's still possible to debug
the container from a shell.

I've created an initial set of allow/disallow lists, that seems to pass
a smoke test (server boots, admin console works). This leaves 37
packages installed, with 96 removed relative to `ubi8-minimal`. We could
go more minimal than this, or less minimal if required. Trial and error
is required.

Closes #16902
 2023-02-09 11:20:09 +01:00
Michael Edgar
9896efd288 Operator: use TLS Edge termination when back-end protocol is HTTP 
Fixes #16807

Signed-off-by: Michael Edgar <michael@xlate.io>
Co-authored-by: Václav Muzikář <vmuzikar@redhat.com>
 2023-02-08 16:07:43 +01:00
Bruno Oliveira da Silva
12cefb9950 Update to Quarkus 2.13.7.Final 
Resolves #16755

Co-authored-by: Robert Nemeti <r.nemeti@syseleven.de>
 2023-02-03 15:03:11 -03:00
Martin Bartoš
eebbeb26bc Remove invalid property from Operator properties 
Closes #16373
 2023-01-30 08:59:49 +01:00
Václav Muzikář
3d62dc4254 Update SDK to 4.0.6 2023-01-11 13:58:45 +01:00
Václav Muzikář
01f1db600d Fix race condition while updating Secrets labels in Operator 2022-11-07 13:07:02 +01:00
Peter Becich
13aaadc754
improvement to operator readme, links to documentation (#14692) 
* operator readme links to documentation

* Update operator/README.md

Co-authored-by: Stian Thorgersen <stian@redhat.com>
 2022-11-03 07:20:43 +01:00
Václav Muzikář
5ebb6e9c10 Mark Operator as stable in the OLM bundle 2022-10-24 08:08:24 +02:00
Václav Muzikář
a30b427a96 Update Quarkus Operator SDK to 4.0.4 2022-10-21 15:58:31 -03:00
Andre Nascimento RH
d12aef0b43
Rename free-form field from 'serverConfiguration' to 'additionalOptions' in Keycloak CR. 2022-10-21 14:41:02 +02:00
Martin Bartoš
24acc4c7d1 Add hostname options to Keycloak CR 
Closes #14395

Co-authored-by: Václav Muzikář <vmuzikar@redhat.com>
 2022-10-21 11:00:42 +02:00
Pedro Igor
2d55e1dab7 Add DB options to Keycloak CR 
Closes #14374

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
 2022-10-20 21:21:00 +02:00
Peter Zaoral
4dfbb42680 Refine Ingress settings in Keycloak CR 
Closes Keycloak#14407

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
 2022-10-18 17:44:50 +02:00
Václav Muzikář
19ee00ff54 Add HTTP options to Keycloak CR 2022-10-17 15:57:05 -03:00
Bruno Oliveira da Silva
90369f7540
Upgrade to latest Quarkus 2.13.2 (#14834) 
Upgrade to latest Quarkus 2.13.2

Resolves #14817
 2022-10-17 12:05:35 +02:00
Václav Muzikář
0afc4a8af7
Refactor KeycloakDeploymentConfig (#14880) 
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
 2022-10-14 10:42:09 -03:00
Martin Bartoš
90c1624668 Add transaction options to Keycloak CR 
Closes #14375
 2022-10-13 08:41:47 +02:00
Martin Bartoš
7311e12066 Add features options to Keycloak CR 
Closes #14376
 2022-10-11 15:07:44 +02:00
Václav Muzikář
20fa75f677 Upgrade Operator SDK version 2022-09-29 10:28:47 +02:00
Dmitry Telegin
cc2117bf7c UserInfo endpoint not fully standards compliant 
Closes #14184
 2022-09-16 10:15:08 +02:00
Andre Nascimento RH
4594243a33
Add 'imagePullSecret' field to the Keycloak CR 2022-09-07 14:03:28 +02:00
mposolda
0796e7a479 Revert removing bouncycastle from operator 
Closes #13952
 2022-08-24 14:29:42 +02:00
David Anderson
2070420673
Remove the BC dependency from keycloak-operator (#13928) 
Closes #13115
 2022-08-23 10:21:00 +02:00
Stian Thorgersen
ae33af92d9
Promote new admin console to default (#13243) 
Closes #13242
 2022-07-27 10:13:49 +02:00
Václav Muzikář
4e83b9be9d
Recreate upgrade strategy using the new Operator (#13326) 
Co-authored-by: Dominik Guhr <dguhr@redhat.com>
 2022-07-26 13:37:20 -03:00
Dominik Guhr
9bb1299d89 change optimised to optimized 
also: fix kc.bat to not use autobuild in devmode anymore, fix containers.adoc to not use auto_build naming, fix build command cli help as it is not required anymore to run it beforehand.
 2022-07-22 10:29:07 -03:00
Václav Muzikář
15a04021e0 Operator doesn't reconcile annotations specified in pod template 2022-07-20 10:08:57 -03:00
David Anderson
8ce10df6da
Extract BC from keycloak-common (#13064) 
Closes #12855
 2022-07-16 09:36:07 +02:00
Pedro Igor
89028613d8 Introducing --optimise option 
Closes #10737
 2022-07-15 15:12:17 -03:00
Andrea Peruffo
f2d71cd1c7
Switch to StatefulSet (#12757) 2022-07-13 11:58:06 -03:00
andreaTP
006aea300d A better structure for config-api 2022-06-28 11:33:44 -03:00
andreaTP
6812bad2ae Review RollingUpdate settings 2022-06-20 17:41:59 -03:00
andreaTP
3abcc699a1 Move all dist options to the new module 
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>
 2022-06-17 09:06:40 -03:00
Václav Muzikář
105d3b955b Refactor Operator test packages 2022-06-13 10:01:43 -03:00
Dominik Guhr
b5c8f92fe7
Update Quarkus to 2.7.6.Final (#12371) 
Resolves #12370
 2022-06-10 09:14:59 -03:00
Andrea Peruffo
e955a7c9c5
Remove the external base-deployment.yaml file (#12437) 
Resolves #12436
 2022-06-09 13:45:25 -03:00
Tobias Florek
fa22f1bdc7 ingress: set annotation for openshift routes 
fixes #12182
 2022-06-09 13:44:26 -03:00
andreaTP
a40acd413a Fix Ingress creation/deletion loop 2022-06-09 13:26:48 -03:00
Dominik Guhr
c4001ba198 Fix running operator image tests with prebuilt image 
Closes #9898

Co-authored-by: Andrea Peruffo <andrea.peruffo1982@gmail.com>
 2022-06-09 09:55:26 -03:00
andreaTP
f9c6ea84ad Respect http-relative-path with probes 2022-06-03 12:23:36 -03:00
andreaTP
0a8e132c7c Refactor the packages structure of the operator 2022-06-01 17:30:47 -03:00
andreaTP
8912b6dc96 Improve Operator CI robustness 2022-05-31 08:52:40 -03:00
andreaTP
7c7588e8db Make OLM tests Maven build self-contained 2022-05-30 15:23:11 -03:00
andreaTP
d66710205c Refactor dist config to a common module 2022-05-26 12:07:03 -03:00
andreaTP
8882c09901 Fix operator watching an alternative namespace 2022-05-19 12:43:43 -03:00
andreaTP
2747729fbb Review http/https and proxy settings in operator 
Co-authored-by: Dominik Guhr <dguhr@redhat.com>
 2022-05-19 09:38:42 -03:00
Andrea Peruffo
c2cb1ef260
Skip the build step in the Realm import job if using a custom image (#11755) 2022-05-17 10:52:41 -03:00
Bruno Oliveira da Silva
83ef30c106
Update GitHub actions dependencies (#11952) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: andreaTP <andrea.peruffo1982@gmail.com>
 2022-05-12 09:53:59 -03:00
andreaTP
76f83f0ab2 Use the entire podTemplateSpec to spawn the realm-import job 2022-05-06 17:00:15 -03:00
andreaTP
1f47cb2795 Fix disableDefaultIngress CR field of the operator 2022-04-29 10:48:36 -03:00
Andrea Peruffo
7986872ae0
Inject the operand version as env var (#11511) 2022-04-20 11:09:08 +02:00
andreaTP
8b1869482d fix Operator CI 2022-04-19 14:27:55 -03:00
andreaTP
a558d2f546 OLM tests using ttl.sh 2022-04-19 09:44:25 -03:00