Commit graph

230 commits

Author SHA1 Message Date
Alexander Schwartz
bebb314a16
Use port name instead of port number for the ingress (#30925)
Also adding a retry if server-side-apply fails

Closes #30924

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
2024-07-10 13:27:06 -04:00
Steven Hawkins
a7ae90cbb6
fix: adds affinity and other scheduling to the operator (#29977)
closes: #29258

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-07-03 20:07:03 +02:00
Peter Zaoral
add45a25a8
Add default CPU limit/request for the operator (#30601)
Closes: #27432

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
2024-07-01 15:12:43 +02:00
Steven Hawkins
bc38b5db1b
fix: add proxy env propagation (#30741)
* fix: add proxy env propagation

closes: #30165

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update operator/src/main/java/org/keycloak/operator/controllers/KeycloakDeploymentDependentResource.java

Co-authored-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2024-06-25 18:02:27 +02:00
Sascha Marcel Schmidt
13ef6fb1c8
fix(operator): Scale statefulset to 0 to prepare for update (#30450)
When performing a keycloak update, the operator is supposed to make sure that
potential database migrations are run with only one pod active. This change
makes the operator scale down the stateful set to zero pods in preparation for
the update. The next reconciliation loop will scale the stateful set back up
and change the image, making sure migrations are being run on the first pod
that is brought up. This also makes sure that the rollover works even if the
infinispan versions are incompatible. (ref: #30449)

Signed-off-by: Schmidt, Sascha (sasschmidt) <sascha.schmidt@breuninger.de>
2024-06-21 13:44:54 +00:00
Jon Koops
df18629ffe
Use a default Java version from root POM (#29927)
Signed-off-by: Jon Koops <jonkoops@gmail.com>
2024-06-21 14:19:31 +02:00
Václav Muzikář
0846181809
Use only plain hostname in Ingress (#30345)
Closes #30332

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2024-06-12 08:54:54 +02:00
Steven Hawkins
5059a02eb2
fix: minor refinements to collection utils (#29536)
closes: #29535

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-06-06 10:07:34 -04:00
Alexander Schwartz
792a3457ff
Use Maven wrapper instead of platform dependent Maven version (#29988)
Closes #29987

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-06-03 15:45:39 +02:00
Martin Bartoš
262fc09edc
OpenJDK 21 support (#28518)
* OpenJDK 21 support

Closes #28517

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* x509 SAN UPN other name is not handled in JDK 21 (#904)

closes #29968

Signed-off-by: mposolda <mposolda@gmail.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: mposolda <mposolda@gmail.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Marek Posolda <mposolda@gmail.com>
2024-06-03 14:17:28 +02:00
Steven Hawkins
a74b084d9d
diagnostic: add a thread dump on failure (#29749)
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-05-21 16:22:11 +00:00
Pedro Ruivo
cbce548e71 Infinispan 15.0.3.Final
Closes #29068

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2024-05-08 17:18:39 +02:00
Steven Hawkins
a3d67a2b64
fix: add / clean labels on community images (#28760)
closes: #24414

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-04-25 11:48:13 +02:00
Steven Hawkins
d7ef650623
task: use informer rather than 0 interval polling (#28901)
related to: #28869

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-04-19 09:05:32 +02:00
Steve Hawkins
a3b4b487d5 fix: adjusting the test to use a fully valid config
closes: #28638

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-04-12 21:17:52 +02:00
Steven Hawkins
a1feb167d6
fix: adds a test and permissions for cache configmap (#28652)
closes: #28638

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-04-12 13:37:49 +02:00
Václav Muzikář
33f580daa4
Hostname v2 for Operator (#28599)
Closes #27728

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2024-04-10 18:56:47 +02:00
Martin Bartoš
7f048300fe
Support management port for health and metrics (#27629)
* Support management port for health and metrics

Closes #19334

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Deprecate option

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Remove relativePath first-class citizen, rename ManagementSpec

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Fix KeycloakDistConfiguratorTest

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2024-04-03 16:18:44 +02:00
Steven Hawkins
c2a2d04950
fix: correcting test assertions (#28373)
closes: #28370

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-04-02 17:48:40 +00:00
Steven Hawkins
26dc81a92f
fix: ensuring test state is clean between tests (#27904)
closes: #27080

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-03-27 15:23:26 +01:00
Anh Pham
0286e7ad5d
To support the Istio choose protocol, add the port name to the discovery service. (#27940)
Signed-off-by: Anh Pham <anhpn.uit@gmail.com>
Co-authored-by: Anh Pham <anh.pham4@hitachids.com>
2024-03-26 17:36:53 +01:00
Steven Hawkins
05056330dc
fix: making the truststore name field optional (#28013)
closes: #28012

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-03-19 18:02:29 +00:00
Alexander Schwartz
bba701437f
Use JDK17 features to simplify code with multiline strings (#27495)
Closes #27494

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-03-05 09:37:38 +01:00
Steven Hawkins
ffc1b69afa
task: adding more diagnostics for remote failed runs (#27441)
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-03-01 17:54:51 +00:00
Steven Hawkins
daa6cf5951
fix: waiting more time for the log to appear (#27208)
closes: #26790

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-02-21 16:48:30 +00:00
Václav Muzikář
33425dacd9
Add proxy-headers option to the Keycloak CR (#27092)
Closes #25179

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2024-02-21 12:19:37 +01:00
Václav Muzikář
de60c9b469
Tweak the default memory request and limit in the Operator (#27170)
Closes #27169

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2024-02-21 10:03:17 +01:00
Steven Hawkins
7ea595d27b
fix: address test failure by using the previous log (#27172)
closes: #26790

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-02-20 18:09:51 +00:00
Martin Bartoš
59007844d9
Supported option to specify resource management for pods in Keycloak CR (#26661)
Closes #26456

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2024-02-15 13:38:41 +01:00
Martin Bartoš
531b386c97
Do not print executed commands in loop when checking deployments (#26872)
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2024-02-14 19:41:50 +01:00
Steven Hawkins
ee126f73e5
fix: switching to clusterip service (#26975)
also adding the previous log when things fail

closes: #26790

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-02-13 08:59:29 +01:00
Steven Hawkins
5f0ee7b0f7
fix: adds service-ca.crt to the trust stores (#26912)
closes: #26910

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-02-09 14:32:12 +01:00
Martin Bartoš
b48a1f41fe
Use latest OLM version for Operator CI (#26922)
Closes #26921

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2024-02-09 12:08:02 +01:00
Steven Hawkins
77581d2527
fix: change from operator. to kc.operator. keys (#26414)
closes #12352

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-02-08 15:03:20 +01:00
Steven Hawkins
402c7d9b18
Removing version overrides and further aligning with quarkus versions (#26788)
* elevating wildfly-elytron-http-oidc version management

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* removing testing dependency overrides

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* further version aligment with quarkus

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* adding a resteay-core-spi that can be overriden

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* removing hamcrest override

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* aligning with 3.7.1

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-02-07 17:57:23 +01:00
Steven Hawkins
d03b25b4b5
task: adds event diagnostics for failed tests (#26864)
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-02-07 10:11:03 -05:00
Sol Roberts
5401c63c9e
Update Keycloak operator example with correct hostname syntax (#26796)
* Update Keycloak operator example with correct hostname syntax

Closes #26281

Signed-off-by: badgerops <github@badgerops.net>

* Adding missing ',' to ensure valid JSON structure

Closes #26281

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>

---------

Signed-off-by: badgerops <github@badgerops.net>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2024-02-06 12:21:26 +01:00
Steven Hawkins
3001855858
fix: using iteration to allow recursive structures (#26789)
closes: #21130

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-02-05 20:10:27 +01:00
Václav Muzikář
be66bf1957
Fix Operator tests on ARM-based machines (#26786)
postgres-15-c9s image now supports arm64

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2024-02-05 15:04:47 +00:00
Michal Hajas
c579cf737f
Fix Keycloak operator setting for cache-config-file (#26666)
Fixes: #26458

Signed-off-by: Michal Hajas <mhajas@redhat.com>
2024-02-01 12:47:35 +01:00
Steven Hawkins
37acb2fd09
task: upgrading to quarkus 3.7.0.CR1 (#26203)
there are several downgrades from the quarkus versions, and some
additional logic needed to handle changes with re-creating the
configuration

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-01-31 18:23:07 +00:00
Steven Hawkins
f55e903092
Convert watching to polling and adding infinispan config file support (#26510)
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-01-31 12:57:34 +00:00
Sol Roberts
29bc02a699
fix http_tlsSecret example for operator (#26282)
Signed-off-by: BadgerOps <github@badgerops.net>
2024-01-25 11:10:56 +01:00
Václav Muzikář
7a57bfb504
Fix createdAt format in Operator CSV (#26428)
Closes #26427

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2024-01-24 16:41:44 +01:00
Jon Koops
07f9ead128 Upgrade Welcome theme to PatternFly 5
Closes #21343

Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>
Signed-off-by: Jon Koops <jonkoops@gmail.com>
2024-01-03 14:46:01 -03:00
Steven Hawkins
bee7595275
fix: adding the kube ca cert to the truststores
closes #10794

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2023-12-18 15:56:43 +01:00
Àngel Ollé Blázquez
2c341d4bc5
Fixes KeycloakDistConfiguratorTest missingHostname test case. (#25643)
Closes #25642

Signed-off-by: Àngel Ollé Blázquez <angel@olleb.com>
2023-12-18 11:51:33 +00:00
Steven Hawkins
08751001db
enhance: adds truststores to the keycloak cr (#25215)
also generally correcting the misspelling trustore

closes: #24798

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2023-12-14 11:15:06 -03:00
Steven Hawkins
4db4982e9d
enhance: adding a start optimized flag (#25216)
closes: #25015



Update docs/guides/operator/customizing-keycloak.adoc
Update docs/documentation/release_notes/topics/24_0_0.adoc
Update operator/src/main/java/org/keycloak/operator/crds/v2alpha1/deployment/KeycloakSpec.java

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2023-12-11 16:15:16 +00:00
Steven Hawkins
319d9e78fb
fix: use name to find the admin secret (#25362)
closes: #25307

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2023-12-08 15:14:09 +01:00