1
0
mirror of https://github.com/keycloak/keycloak.git synced 2026-10-23 19:29:23 +03:00

398 Commits

Author SHA1 Message Date
Chethann
8a081db466 Set appVersion in the operator Helm chart (#53955)
Chart.yaml was generated without appVersion, so templates that use .Chart.AppVersion rendered app.kubernetes.io/version as null on the controller RoleBindings. Set quarkus.helm.app-version from the project version.

Closes #53804

Signed-off-by: Chethann <chethankumar0544@gmail.com>
2026-10-14 16:02:38 -04:00
Alexander Schwartz
18443ea4be Stabilize the pause Operator workflow
Closes #53665

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
2026-10-07 14:03:03 +00:00
Václav Muzikář
9c95aff969 Promote Client v2 to preview (#53215)
* Promote Client v2 to preview

Closes #53212

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>

* Update also Querying guide

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>

* Mark Querying guide as Preview

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>

* Update KeycloakSharedCsvMetadata

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>

---------

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>
2026-09-30 13:59:24 +00:00
Steven Hawkins
319d7c205a fix: verifies that the server cert is a leaf (#53021)
* fix: verifies that the server cert is a leaf

and will only disable hostname verification if the service name is not
valid

closes: #50493

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* updates based upon review comment

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-09-29 13:10:09 +02:00
Steven Hawkins
1232738075 fix: requiring secrets to be labeled for use with client crs (#53129)
closes: #52320

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-09-25 16:11:43 +02:00
Steven Hawkins
2097f97aac fix: adding pause before deletion to ensure statefulset removal (#52758)
closes: #52715

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-09-25 13:26:45 +02:00
Copilot
78ce22a2a2 Remove operator version-tolerant workaround (#53065)
* Remove operator version-tolerant workaround Closes #48282

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

* Add upgrade mapper coverage

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>
2026-09-25 13:22:38 +02:00
Alexander Schwartz
3b35daebf1 Use Pod name as Infinispan/JGroups node name for stable metrics
Closes #44605

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-09-16 19:02:24 +02:00
Alexander Schwartz
0a0c8c36e6 Stabilize test cleanup in the Operator tests
Closes #52497

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-09-09 16:15:21 +02:00
Steven Hawkins
dce893ba38 fix: renaming the helm chart and adding a release note (#52146)
* fix: renaming the helm chart and adding a release note

closes: #52089

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Refactor helm chart post-processing script

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-09-03 15:58:18 +02:00
Peter Zaoral
8a08dfe812 Use BOM-managed Helm extension versions (#52045)
Closes #51943

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
Co-authored-by: Michal Vavřík <dev@michalvavrik.net>
2026-08-26 15:03:09 -04:00
Steven Hawkins
1346f48711 fix: renaming the admin client tests module for use by the operator (#51675)
closes: #50598

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-08-24 15:14:32 -04:00
AvivGuiser
8d62835786 create helm chart for keycloak-operator (#42079)
* Add Helm chart generation for the Keycloak Operator

Signed-off-by: AvivGuiser <avivguiser@gmail.com>

* remove maven.test.skip flag and add -Pcluster-wide

Signed-off-by: AvivGuiser <avivguiser@gmail.com>

* Update Number of CRDS expected in helm ci

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Signed-off-by: AvivGuiser <avivguiser@gmail.com>

* add ci job to install the chart, do not tar the file via the plugin

Signed-off-by: AvivGuiser <avivguiser@gmail.com>

* Update docs/guides/operator/installation.adoc

Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Signed-off-by: AvivGuiser <avivguiser@gmail.com>

* update docs

Signed-off-by: AvivGuiser <avivguiser@gmail.com>

---------

Signed-off-by: AvivGuiser <avivguiser@gmail.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
2026-08-12 14:24:22 +02:00
Michal Vavřík
c1cfde7d5e introduce a new keycloak admin client based on jackson 3 (#50848)
Closes: https://github.com/keycloak/keycloak/issues/48216

Signed-off-by: Michal Vavřík <dev@michalvavrik.net>
2026-08-05 16:13:56 +02:00
Steven Hawkins
5743ad6760 fix: removing defaultBackend from Ingress (#50896)
closes: #50892

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-07-21 18:50:11 +02:00
Steven Hawkins
20b09018b4 fix: correcting cluster-wide mode permissions (#50843)
closes: #50836 #38879

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-07-14 14:56:56 +02:00
Steven Hawkins
48297d2e07 fix: excluding synced-common dependency, and adding enforcement (#50584)
* fix: excluding synced-common dependency, and adding enforcement

closes: #50582

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-07-07 14:48:59 +02:00
Steven Hawkins
1e405590c4 fix: removing the initial workaround of preferring http (#50541)
closes: #50494

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-07-02 09:29:16 +02:00
Erik Jan de Wit
b1c293fcc5 update documentation to expose multi-namespace install modes (#49966)
* update documentation to expose multi-namespace install modes

fixes: #49037
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* updated csv

also changed docs and ci to no longer mention/execute patching the csv

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* changed experimental to preview

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* PR review commments

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* Update docs/guides/operator/installation.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Erik Jan de Wit <edewit@redhat.com>
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* Update docs/guides/operator/installation.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Erik Jan de Wit <edewit@redhat.com>
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Erik Jan de Wit <edewit@redhat.com>
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* removed rbac reference

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* web based installation

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* PR comments

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* merged clusterwide with kustomize

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* Cosmetic tweaks

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>

---------

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
Signed-off-by: Erik Jan de Wit <edewit@redhat.com>
Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-06-30 18:08:29 +00:00
Marcel Sander
a27ab58b58 Add preview cluster-wide kubectl install for the operator (#46980)
* Add experimental cluster-wide kubectl install support for the operator

Signed-off-by: Marcel Sander <marcel.sander@actidoo.com>

* standardizing the usage of kustomize and reducing artifact duplication

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* removing the process call to kustomize, and refining docs

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* running spotless

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* preventing both instances from having the same hostname

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Apply suggestion from @shawkins

Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* switching to dynamic detection of crds

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* switching to generating multiple installs rather than an overlay
approach

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* addressing review comments and adding a ci test

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* removing the crd dedup

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* updating the other ci waiting for crd

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* adding an own namespace test

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Marcel Sander <marcel.sander@actidoo.com>
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-06-29 17:12:23 +00:00
Peter Zaoral
4db2780ca2 Fix typo "operatiorn" in KeycloakClientBaseController error message (#49798)
Closes: #49797

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
2026-06-10 21:23:08 +00:00
Michal Vavřík
96bdd0d424 feat(operator): add client CRDs to operator bundle (#49754)
* Closes: https://github.com/keycloak/keycloak/issues/46749

Signed-off-by: Michal Vavřík <michal.vavrik@aol.com>
2026-06-08 15:06:01 -04:00
Steven Hawkins
e960bb6cdc correcting oidcConfig and removing the client_id from the request (#49773)
closes: #49445

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-06-08 13:43:51 -04:00
Steven Hawkins
2e798840e2 fix: allowing the kubernetes jwt test to pass on openshift (#49488)
closes: #49445

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-06-02 16:56:40 +02:00
Steven Hawkins
4934e2c2ee fix: changing the error log to work with an unoptimized image (#49384)
closes: #49383

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-05-28 18:49:01 -04:00
Steven Hawkins
2ffb8b676e fix: prevent service account name from being set in multi-namespace mode (#49036)
closes: #48382

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-05-22 19:40:31 +02:00
Steven Hawkins
918a74f930 fix: updating the auto logic if the pod cannot be found (#49030)
closes: #48812

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-05-19 14:26:12 -04:00
Steven Hawkins
0ab0e47b87 fix: updates to create a java admin client build (#48343)
* fix: updates to create a java admin client build

closes: #48340

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* addressing review comments

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-04-24 18:29:47 +02:00
Martin Bartoš
e299bb6551 Remove legacy Client API V2 service (#48091)
* Remove legacy Client API V2 service

Closes #47426

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Remove workarounds for Operator

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Fix compilation errors

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2026-04-21 14:31:08 +02:00
Steven Hawkins
1cf712511b fix: ensures that owner references are updated after an upgrade (#48213)
closes: #48030

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-04-20 16:43:20 +02:00
Steven Hawkins
e9f593020a fix: creating a cleaner module for use by java clients (#47874)
* fix: minimizing the dependencies for the rest module

closes: #48114

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* renaming the modules

also remove jsonnode logic from the oas filter and the databind
dependency

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* addressing review comments

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-04-16 15:18:41 +02:00
Steven Hawkins
4a94c05d40 fix: remove extra dependencies from the operator (#47912)
closes: #47872

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-04-09 17:09:47 +00:00
Steven Hawkins
51b6f9b291 fix: promotes keycloak and realm import to v2beta1 (#45840)
closes: #45795

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-04-04 16:46:28 +02:00
Martin Bartoš
8e0e2e8ab0 Upgrade to Quarkus 3.33.1 LTS (#47462)
* Upgrade to Quarkus 3.33.1 LTS

Closes #45278

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Remove OLM NativeAPIs workaround

Closes #42643

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2026-03-27 09:23:06 +00:00
Peter Zaoral
ca658e8a4a [quarkus-next] Fix operator controller stalling after JOSDK 5.3.0 event filtering upgrade (#47474)
Closes: #47473

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
2026-03-27 09:34:27 +01:00
Martin Bartoš
9d2b0fbd8a Test the new client service in the operator (#47318)
Closes #47317

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2026-03-25 11:32:05 +01:00
Gilvan Filho
ed66ac6b0c add labels and annotations to service monitor (serviceMonitorSpec) (#47298)
* add labels and annotations to service monitor (serviceMonitorSpec)

closes #42626

Signed-off-by: Gilvan Filho <gilvan.sfilho@gmail.com>

* add labels and annotations to service monitor (serviceMonitorSpec)

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Gilvan Filho <gilvan.sfilho@gmail.com>

---------

Signed-off-by: Gilvan Filho <gilvan.sfilho@gmail.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2026-03-23 17:35:44 +00:00
Václav Muzikář
3be2527a3d Reflect Client v2 UUIDs in Operator (#47301)
Closes #47300

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>
2026-03-20 18:03:29 +01:00
Alex Szczuczko
83b14f925f Use quay.io instead of DockerHub in testsuite createCurlContainer()
Closes #47025

Signed-off-by: Alex Szczuczko <aszczucz@redhat.com>
2026-03-11 08:12:53 +00:00
Copilot
d600298df7 operator: add support for configurable Kubernetes Service port and name in Keycloak CRD (#46683)
closes: #46633

* Add support for configurable Kubernetes Service port and name in Keycloak CRD

- Add serviceHttpPort and serviceHttpsPort fields to HttpSpec for configuring the service port independently of container port
- Add serviceName field to HttpSpec for customizing the service name
- Update KeycloakServiceDependentResource to use service ports with targetPort
- Update KeycloakClientBaseController to use service ports for admin URL
- Add unit tests and update test YAML

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

* Remove HasMetadata getServiceName overload; add integration test for custom service name and port

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

* refining the integration test

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Add documentation for configurable Service name and port in operator guide and release notes

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

* Apply review suggestions to documentation wording

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>
Co-authored-by: Steve Hawkins <shawkins@redhat.com>
2026-03-04 10:49:51 -05:00
Sebastian Łaskawiec
35d725fe1b Moved adding Kubernetes/OpenShift CAs to the server (#44506)
* Kubernetes Truststore moved to the server

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>

* Update quarkus/config-api/src/main/java/org/keycloak/config/TruststoreOptions.java

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* addressing review comments and updating upgrade instructions

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* updating help command output

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/server/keycloak-truststore.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>

* Comments addressed

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>

* lint errors fix

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>

* Update docs/documentation/upgrading/topics/changes/changes-26_6_0.adoc

Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2026-03-04 16:39:10 +01:00
Michal Vavřík
0937fe6574 feat(quarkus): validate and doc min poolMaxSize is 4+ for JDBC PING (#46737)
Currently when migration tasks are run, we see that the app startup fails with DB pool size 3 or less for JDBC_PING.
Hence, we started to validate that the minimal max pool size is 4 for JDBC PING.

Closes: https://github.com/keycloak/keycloak/issues/46673

Signed-off-by: Michal Vavřík <michal.vavrik@aol.com>
2026-03-03 14:19:55 +01:00
Steven Hawkins
40f39f0edc fix: adding server not ready to the status (#46143)
closes: #45802

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
2026-02-24 16:03:53 +01:00
Ruchika Jha
9ec61bfb52 Added the shutdown delay and shutdown timeout for the testcases to default options
Closes #46337

Signed-off-by: Ruchika <ruchika.jha1@ibm.com>
2026-02-24 14:47:04 +01:00
Steven Hawkins
1ce2447b72 fix: adding a check for the client api v2 feature (#46103) 2026-02-20 20:32:49 +01:00
Michal Vavřík
8e816f749c feat: Update container images to use OpenJDK 25 (#46386)
This PR is mostly based on 303446b465.
Additionally, I made few tweaks to documentation and introduce a doc variable for the recommended Java version so limit required changing when migrating the recommended JDK version.

* Closes: https://github.com/keycloak/keycloak/issues/45830

Signed-off-by: Michal Vavřík <michal.vavrik@aol.com>
2026-02-17 15:35:46 +01:00
Akbar Husain
3f62bb4d2b Make shebang in bash scripts consistent (#37369)
Closes #34983

Signed-off-by: akbarhusainpatel <apatel@intermiles.com>
2026-02-17 11:32:28 +01:00
Steven Hawkins
83159fc162 fix: removing client crds from prod operator (#46286)
remote testing now requires a build option

closes: #45794

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-02-13 15:56:32 +00:00
Steven Hawkins
3aa5ab0072 fix: updating the fix for docker ulimits (#46254)
it will now be applied by default

closes: #44232

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2026-02-12 10:28:53 +01:00
Václav Muzikář
d45dfeb44a Java 25 support (#45872)
Closes #45905

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>
2026-02-10 23:35:35 +00:00