libre.sh/keycloak-scim
2
0
Fork 0
Code Issues 14 Pull requests Releases Packages Activity Actions 6
22504 commits 4 branches 5 tags 480 MiB
Commit graph

138 commits

Author SHA1 Message Date
Steven Hawkins
9b0f4fb581
Removes the initial delay seconds and adds a startup probe (#21884) 
Adjusted the thresholds and delays accordingly

Closes #21111
 2023-07-26 10:48:54 +02:00
Steven Hawkins
821316a61a
updating the location of the Dockerfile (#21879) 2023-07-24 08:25:23 +02:00
Václav Muzikář
9c63cf98e7 Use --verbose by default in Operator deployments 
Closes #21802
 2023-07-21 18:46:01 +02:00
Steven Hawkins
3cbd4eb10a
removes the filtering of erroneous enum values (#21790) 
With the update to fabric8 6.7.2, this filtering is no longer needed

Closes #20935
 2023-07-21 08:49:01 +00:00
Václav Muzikář
776bcbcbd4
Update bcpkix and bcprov dependencies (#21543) 
Closes #21360
 2023-07-20 11:57:18 +02:00
Steven Hawkins
1fa6f6ab2d
Adds a pod list rbac (#21832) 
Closes #21814
 2023-07-20 09:05:07 +00:00
Steven Hawkins
ebe6e6c965
switches the workaround to JsonNode, which produces a cleaner crd (#21788) 
Closes #21739
 2023-07-19 08:12:44 +02:00
Steven Hawkins
fa83034474
Also replaces md5 usage with sha-256 (#21162) 
closes #21125
 2023-07-17 10:48:04 +02:00
Steven Hawkins
b0b9c1a76e
Switches the merging logic to using the override as the basis (#21415) 
Ensures additionalProperties are the lowest precedence

Also removes support for setting the image pull secrets via the
unsupported podtemplate

Closes #10503
 2023-07-14 12:42:03 +02:00
Václav Muzikář
6a3ea1a084 keycloakCRName and realm are no longer marked as required in KeycloakRealmImport CRD 
Closes #21607
 2023-07-12 08:03:12 -03:00
Pedro Ruivo
165c36f9ff
Enable publishNotReadyAddresses for discovery service (#21511) 
Closes #21493
 2023-07-10 17:02:55 +02:00
Peter Zaoral
2b1c29a6f2 Use Quarkus Platform BOM 
Closes #20570
Closes #15870

Co-authored-by: Peter Zaoral <pzaoral@redhat.com>
 2023-07-06 12:45:48 -03:00
Václav Muzikář
ad988ca914 Upgrade to Quarkus 3.2.0.Final and QOSDK 6.2.0 
Closes #21272
 2023-07-03 08:11:18 -03:00
Steven Hawkins
b0e7958906
adds port names to the pod / service (#21291) 
Closes #12593
 2023-07-03 08:13:30 +02:00
Steven Hawkins
5ee21ab6d1
scrapes pod container statuses when waiting for more to become available (#21257) 
Closes #10285
 2023-06-30 08:49:48 +00:00
Steven Hawkins
73076a37f9
adding just crd tests of the specs (#21302) 
Closes #20936
 2023-06-29 16:55:11 +02:00
Steven Hawkins
88992dae19
widens status to be any type. (#21281) 
this is to avoid olm complaining about an incompatible schema during
upgrade

Relates to #13074
 2023-06-29 08:57:22 +02:00
Steven Hawkins
e9c9f80e8d
adds an instance label to support multiple instances (#20906) 
Closes #10562 #14220
 2023-06-28 18:05:23 +02:00
Steven Hawkins
4dba17253e
changes the label prefix to operator.keycloak.org (#21175) 
closes #21141
 2023-06-28 11:21:02 +02:00
Steve Hawkins
6a92669139 finishes the conversion away from createOrReplace 
however this is a broader change given the implications of
serverSideApply vs createOrReplace - mostly the concern of only applying
the managed state not based upon an existing resource

Closes #20850
 2023-06-23 11:55:47 -03:00
Martin Bartoš
13a463f71e Avoid calls to Control Plane when the secondary resource is in cache 
Closes #21109
 2023-06-22 10:03:35 -03:00
Martin Bartoš
0ecdebc000 Incorrect Url on Keycloak Health - Liveness and Readiness, no Startup Probes 
Fixes #17388
 2023-06-22 05:32:53 -03:00
Steve Hawkins
5701f70157 changes condition status to be a string, rather than a boolean 
Closes #13074
 2023-06-21 17:14:33 -03:00
Steve Hawkins
4540ca365c infers the default ip/hostname from the client 
Closes #21114
 2023-06-21 12:30:54 -03:00
Steve Hawkins
14747f45ca removing the usage of MultivaluedStringStringHashMap and ComponentExport 
map

upstream improvements make this no longer necessary

Closes #20937
 2023-06-21 12:30:41 -03:00
Alex Szczuczko
3246a15442 Use quarkus-operator-sdk-bundle-generator for OLM YAMLs 
Closes #10911
 2023-06-20 15:01:44 -03:00
Martin Bartoš
c3000984db
Upgrade to Quarkus 3.1.1.Final (#20958) 
Co-authored-by: Bruno Oliveira da Silva <bruno@abstractj.com>
 2023-06-14 08:51:38 -03:00
Steve Hawkins
7e2565c9fe using multiple SchemaSwap annotations instead of the schell script 
Closes #10736
 2023-06-13 06:00:28 -03:00
Steve Hawkins
c1e96564dc Removes the check for full readiness of 3 replicas 
In the ci environment the amount of time between 3 pods being created
and all being ready seems highly variable.  Also since we currently lack
the status information to determine if a deployment is not progressing,
it's best just to remove this check.  The latter check asserting full
readiness of 2 replicas will suffice.

Closes #20888
 2023-06-12 12:34:48 -03:00
Steven Hawkins
91a3ab6b87
expands the status handling to account for the prior status (#20856) 
Closes #20853
 2023-06-08 17:09:39 +02:00
Steven Hawkins
075d913037
enabling keycloak to be a scalable resource (#20828) 
Closes #20825
 2023-06-07 17:57:25 +02:00
Steven Hawkins
d77041f177
mostly updating the logic to newer fabric8 apis (#20825) 
Closes #20822
 2023-06-07 14:58:39 +02:00
Václav Muzikář
989ffe2d22
Remove Fabric8 override from the Operator (#20728) 
Closes #20130
 2023-06-06 13:58:20 +00:00
Steven Hawkins
d045156ba4
Adding the ability to set ingressClassName (#20796) 
Closes #20723
 2023-06-05 21:10:39 +00:00
Václav Muzikář
f627e9535f
Add support to the Operator for setting default labels on Keycloak pods (#20661) 
Closes #20625
 2023-06-01 13:39:41 +02:00
Pedro Ruivo
cffb8141e2
Allow custom annotation in Ingress (#20577) 
Closes #20576
 2023-05-26 15:24:59 +00:00
Alex Szczuczko
1578506475
Seperate version properties for hibernate-enhance and quarkus-maven (#20264) 
This will allow them to be defined seperately from aligned dependency
versions suitable for product

Closes #20261
 2023-05-18 14:37:55 +00:00
Andre Nascimento RH
851ecb43fc
Stops the recreation of managed Keycloak Statefulset Pods when Keycloak Operator restarts occasionally. (#20187) 2023-05-09 19:33:12 +02:00
Václav Muzikář
e44464d3b8 Remove OkHttp Client from the Operator 
Closes #19573
 2023-05-05 12:10:39 -03:00
Václav Muzikář
983e40ad2b
Add OpenShift support to KeycloakIngressTest (#20030) 2023-05-02 14:24:54 +02:00
Bruno Oliveira da Silva
373b5c1d9f
Update to Quarkus 3.0.1.Final (#20011) 
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>

Closes #20010
Closes #19080
Closes #17476
Closes #19286
Closes #17557
Closes #17556
Closes #17555
Closes #17475
Closes #15879
Closes #15878
 2023-05-02 10:13:23 +02:00
Václav Muzikář
dd6e73ec7c Upgrade Operator SDK to 6.0.0.CR1 
---
Quarkus3 branch sync no. 14 (24.4.2023)
Resolved conflicts:
keycloak/operator/pom.xml - Modified
 2023-04-27 13:36:54 +02:00
Alexander Schwartz
4f8d67c9fc All commands now auto-reaugment except show-config 
Closes #15782
Closes #15898
Closes #17498
 2023-04-21 15:06:51 +02:00
ikhomyn
84a7b57059
fix db for openshift 2023-04-21 12:36:41 +00:00
Alex Szczuczko
edaa84b1e5
Build the operator container via Dockerfile (#19642) 
Closes #16967
 2023-04-21 08:32:29 +02:00
Jon Koops
972ebb9650
Use a valid SemVer format for the SNAPSHOT version (#17334) 
* Use a valid SemVer format for the SNAPSHOT version

* Update pom.xml

* Update pom.xml

---------

Co-authored-by: Stian Thorgersen <stianst@gmail.com>
Co-authored-by: Stian Thorgersen <stian@redhat.com>
 2023-03-03 11:11:44 +01:00
Andre Nascimento
aa422484e2 Improvements on Operator Integration Tests to make sure that Config set in CR takes precedence. 
Closes #13114
 2023-02-23 08:51:40 +01:00
Andre Nascimento
cb78ea06b0 Make sure the customized Ingress resource isn't deleted when the Keycloak deployed by Operator is killed. 
Closes #14433
 2023-02-16 17:31:31 +01:00
Václav Muzikář
2089878740 Update Operator container to UBI 9 / RHEL 9 
Closes #17068
 2023-02-15 16:26:29 -03:00
Alex Szczuczko
610e3044ad Minimize the RPM content of the Quarkus container 
Even though we use `ubi8-minimal` as the parent of our container, it
still has many RPMs installed that aren't necessary to run the Keycloak
server. Also, since the JDK RPM (that we install on top of
`ubi8-minimal`) is designed for general use, it pulls in more dependency
RPMs than it strictly needs to, like cups and avahi. Keycloak will never
need to access a printer itself!

Trimming down these excess RPMs will improve our CVE statistics with
automated scanners, and therefore let us perform fewer CVE rebuilds.

`ubi8-null.sh` uses the low-level `rpm` command to identify and forcibly
remove dependencies and operating system files that are not required to
boot our Quarkus-based server. This includes `microdnf` and `rpm`
itself! I have preserved bash however, so it's still possible to debug
the container from a shell.

I've created an initial set of allow/disallow lists, that seems to pass
a smoke test (server boots, admin console works). This leaves 37
packages installed, with 96 removed relative to `ubi8-minimal`. We could
go more minimal than this, or less minimal if required. Trial and error
is required.

Closes #16902
 2023-02-09 11:20:09 +01:00