Commit graph

238 commits

Author SHA1 Message Date
Steven Hawkins
6a91436746
enhance: add bootstrap admin handling to the operator (#31646)
switching to manual invocation of statefulset reconciliation

closes: #30004



* Update docs/guides/operator/advanced-configuration.adoc




* enhance: add bootstrap admin handling to the operator

closes: #30004



---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2024-07-29 14:08:31 +02:00
Steven Hawkins
22f8e5cdf0
Added field to the RealmImport spec to replace environment variables within the realm import (#31232)
* Added field to the RealmImport spec to replace environment variables within the realm import

Closes #26470

Signed-off-by: stustison <scott.tustison@gmail.com>

* Added field to the RealmImport spec to replace environment variables within the realm import

Closes #26470

Signed-off-by: stustison <scott.tustison@gmail.com>

* testing refinement for placeholder handling

closes: #26470

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* changing from placeholdersecret to placeholder

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/operator/realm-import.adoc

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* Update docs/documentation/release_notes/topics/26_0_0.adoc

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: stustison <scott.tustison@gmail.com>
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: stustison <scott.tustison@gmail.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2024-07-29 11:16:09 +02:00
Alexander Schwartz
28a27c9148 Improving the error messages in the Operator Test
Closes #31598

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-07-29 10:37:42 +02:00
Alexander Schwartz
6c8aa65346
All CURL commands should check the HTTP response code (#31602)
Closes #31598

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-07-26 12:38:06 +02:00
Václav Muzikář
6f62e6768c Revert "operator bootstrap admin handling (#30711)"
This reverts commit 3139b82e3c.
2024-07-26 10:02:13 +02:00
Steven Hawkins
3139b82e3c
operator bootstrap admin handling (#30711)
* enhance: add bootstrap admin handling to the operator

closes: #30004

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/operator/advanced-configuration.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* enhance: add bootstrap admin handling to the operator

closes: #30004

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2024-07-24 17:35:13 +02:00
Steven Hawkins
14a9927e29
fix: scaling and tuning getting started guide
closes: #29388

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
2024-07-18 13:31:37 +00:00
Steve Hawkins
9247029ca3 fix: removes the operator's usage of the v1 proxy option
closes: #30945

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-07-11 14:21:50 +02:00
Alexander Schwartz
bebb314a16
Use port name instead of port number for the ingress (#30925)
Also adding a retry if server-side-apply fails

Closes #30924

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
2024-07-10 13:27:06 -04:00
Steven Hawkins
a7ae90cbb6
fix: adds affinity and other scheduling to the operator (#29977)
closes: #29258

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-07-03 20:07:03 +02:00
Peter Zaoral
add45a25a8
Add default CPU limit/request for the operator (#30601)
Closes: #27432

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
2024-07-01 15:12:43 +02:00
Steven Hawkins
bc38b5db1b
fix: add proxy env propagation (#30741)
* fix: add proxy env propagation

closes: #30165

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update operator/src/main/java/org/keycloak/operator/controllers/KeycloakDeploymentDependentResource.java

Co-authored-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2024-06-25 18:02:27 +02:00
Sascha Marcel Schmidt
13ef6fb1c8
fix(operator): Scale statefulset to 0 to prepare for update (#30450)
When performing a keycloak update, the operator is supposed to make sure that
potential database migrations are run with only one pod active. This change
makes the operator scale down the stateful set to zero pods in preparation for
the update. The next reconciliation loop will scale the stateful set back up
and change the image, making sure migrations are being run on the first pod
that is brought up. This also makes sure that the rollover works even if the
infinispan versions are incompatible. (ref: #30449)

Signed-off-by: Schmidt, Sascha (sasschmidt) <sascha.schmidt@breuninger.de>
2024-06-21 13:44:54 +00:00
Jon Koops
df18629ffe
Use a default Java version from root POM (#29927)
Signed-off-by: Jon Koops <jonkoops@gmail.com>
2024-06-21 14:19:31 +02:00
Václav Muzikář
0846181809
Use only plain hostname in Ingress (#30345)
Closes #30332

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2024-06-12 08:54:54 +02:00
Steven Hawkins
5059a02eb2
fix: minor refinements to collection utils (#29536)
closes: #29535

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-06-06 10:07:34 -04:00
Alexander Schwartz
792a3457ff
Use Maven wrapper instead of platform dependent Maven version (#29988)
Closes #29987

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-06-03 15:45:39 +02:00
Martin Bartoš
262fc09edc
OpenJDK 21 support (#28518)
* OpenJDK 21 support

Closes #28517

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* x509 SAN UPN other name is not handled in JDK 21 (#904)

closes #29968

Signed-off-by: mposolda <mposolda@gmail.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: mposolda <mposolda@gmail.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Marek Posolda <mposolda@gmail.com>
2024-06-03 14:17:28 +02:00
Steven Hawkins
a74b084d9d
diagnostic: add a thread dump on failure (#29749)
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-05-21 16:22:11 +00:00
Pedro Ruivo
cbce548e71 Infinispan 15.0.3.Final
Closes #29068

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2024-05-08 17:18:39 +02:00
Steven Hawkins
a3d67a2b64
fix: add / clean labels on community images (#28760)
closes: #24414

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-04-25 11:48:13 +02:00
Steven Hawkins
d7ef650623
task: use informer rather than 0 interval polling (#28901)
related to: #28869

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-04-19 09:05:32 +02:00
Steve Hawkins
a3b4b487d5 fix: adjusting the test to use a fully valid config
closes: #28638

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-04-12 21:17:52 +02:00
Steven Hawkins
a1feb167d6
fix: adds a test and permissions for cache configmap (#28652)
closes: #28638

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-04-12 13:37:49 +02:00
Václav Muzikář
33f580daa4
Hostname v2 for Operator (#28599)
Closes #27728

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2024-04-10 18:56:47 +02:00
Martin Bartoš
7f048300fe
Support management port for health and metrics (#27629)
* Support management port for health and metrics

Closes #19334

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Deprecate option

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Remove relativePath first-class citizen, rename ManagementSpec

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Fix KeycloakDistConfiguratorTest

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2024-04-03 16:18:44 +02:00
Steven Hawkins
c2a2d04950
fix: correcting test assertions (#28373)
closes: #28370

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-04-02 17:48:40 +00:00
Steven Hawkins
26dc81a92f
fix: ensuring test state is clean between tests (#27904)
closes: #27080

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-03-27 15:23:26 +01:00
Anh Pham
0286e7ad5d
To support the Istio choose protocol, add the port name to the discovery service. (#27940)
Signed-off-by: Anh Pham <anhpn.uit@gmail.com>
Co-authored-by: Anh Pham <anh.pham4@hitachids.com>
2024-03-26 17:36:53 +01:00
Steven Hawkins
05056330dc
fix: making the truststore name field optional (#28013)
closes: #28012

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-03-19 18:02:29 +00:00
Alexander Schwartz
bba701437f
Use JDK17 features to simplify code with multiline strings (#27495)
Closes #27494

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2024-03-05 09:37:38 +01:00
Steven Hawkins
ffc1b69afa
task: adding more diagnostics for remote failed runs (#27441)
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-03-01 17:54:51 +00:00
Steven Hawkins
daa6cf5951
fix: waiting more time for the log to appear (#27208)
closes: #26790

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-02-21 16:48:30 +00:00
Václav Muzikář
33425dacd9
Add proxy-headers option to the Keycloak CR (#27092)
Closes #25179

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2024-02-21 12:19:37 +01:00
Václav Muzikář
de60c9b469
Tweak the default memory request and limit in the Operator (#27170)
Closes #27169

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2024-02-21 10:03:17 +01:00
Steven Hawkins
7ea595d27b
fix: address test failure by using the previous log (#27172)
closes: #26790

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-02-20 18:09:51 +00:00
Martin Bartoš
59007844d9
Supported option to specify resource management for pods in Keycloak CR (#26661)
Closes #26456

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2024-02-15 13:38:41 +01:00
Martin Bartoš
531b386c97
Do not print executed commands in loop when checking deployments (#26872)
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2024-02-14 19:41:50 +01:00
Steven Hawkins
ee126f73e5
fix: switching to clusterip service (#26975)
also adding the previous log when things fail

closes: #26790

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-02-13 08:59:29 +01:00
Steven Hawkins
5f0ee7b0f7
fix: adds service-ca.crt to the trust stores (#26912)
closes: #26910

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-02-09 14:32:12 +01:00
Martin Bartoš
b48a1f41fe
Use latest OLM version for Operator CI (#26922)
Closes #26921

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2024-02-09 12:08:02 +01:00
Steven Hawkins
77581d2527
fix: change from operator. to kc.operator. keys (#26414)
closes #12352

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-02-08 15:03:20 +01:00
Steven Hawkins
402c7d9b18
Removing version overrides and further aligning with quarkus versions (#26788)
* elevating wildfly-elytron-http-oidc version management

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* removing testing dependency overrides

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* further version aligment with quarkus

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* adding a resteay-core-spi that can be overriden

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* removing hamcrest override

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* aligning with 3.7.1

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-02-07 17:57:23 +01:00
Steven Hawkins
d03b25b4b5
task: adds event diagnostics for failed tests (#26864)
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-02-07 10:11:03 -05:00
Sol Roberts
5401c63c9e
Update Keycloak operator example with correct hostname syntax (#26796)
* Update Keycloak operator example with correct hostname syntax

Closes #26281

Signed-off-by: badgerops <github@badgerops.net>

* Adding missing ',' to ensure valid JSON structure

Closes #26281

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>

---------

Signed-off-by: badgerops <github@badgerops.net>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2024-02-06 12:21:26 +01:00
Steven Hawkins
3001855858
fix: using iteration to allow recursive structures (#26789)
closes: #21130

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-02-05 20:10:27 +01:00
Václav Muzikář
be66bf1957
Fix Operator tests on ARM-based machines (#26786)
postgres-15-c9s image now supports arm64

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2024-02-05 15:04:47 +00:00
Michal Hajas
c579cf737f
Fix Keycloak operator setting for cache-config-file (#26666)
Fixes: #26458

Signed-off-by: Michal Hajas <mhajas@redhat.com>
2024-02-01 12:47:35 +01:00
Steven Hawkins
37acb2fd09
task: upgrading to quarkus 3.7.0.CR1 (#26203)
there are several downgrades from the quarkus versions, and some
additional logic needed to handle changes with re-creating the
configuration

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-01-31 18:23:07 +00:00
Steven Hawkins
f55e903092
Convert watching to polling and adding infinispan config file support (#26510)
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-01-31 12:57:34 +00:00