1372 Commits

Author SHA1 Message Date
rmartinc
c05b84a0d2 Ignore external links to https://www.npmjs.com/package
Closes #42856

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-09-23 12:36:46 +02:00
Alexander Schwartz
a9ed355bfc
Adding missing time column to index
Closes #42792

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-23 07:33:08 -03:00
vramik
23043b40b4 Fix reset-password scope documentation and upgrading guide
Closes #42790

Signed-off-by: vramik <vramik@redhat.com>
2025-09-23 07:31:35 -03:00
Ryan Emerson
93ede306f5
Refine high-availability guide wording
Closes #42869

Signed-off-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-09-23 10:14:49 +00:00
rmartinc
2015e08e38 Move DPoP option to the capability section in the admin UI
Closes #42746

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-09-22 17:27:48 +02:00
Pedro Ruivo
47f85631f3
Automatically create external caches for MULTI_SITE deployments
Closes #32129

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-09-19 18:56:38 +02:00
Ryan Emerson
bda79de605
Update docs to reflect that Operator ClusterRoleBinding contains hardcoded namespace
- Added missing labels to Operator roles

Closes #42678

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2025-09-19 17:27:26 +02:00
Pedro Ruivo
f9ec39bc5f
Update tested load numbers
Closes #42757

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Pedro Ruivo <pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-19 15:42:17 +02:00
stianst
fb83a8ba09 Documentation for federated client authentication
Closes #42721

Signed-off-by: stianst <stianst@gmail.com>
2025-09-19 11:54:03 +01:00
Stian Thorgersen
3841fea16d
Promote CLIENT_AUTH_FEDERATED and SPIFFE features to preview (#42753)
Closes #42722

Signed-off-by: stianst <stianst@gmail.com>
Co-authored-by: Ryan Emerson <remerson@ibm.com>
2025-09-19 09:46:37 +00:00
Steven Hawkins
327e9a9207
fix: adding supported database versions (#42562)
closes: #42294

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-18 17:34:20 +02:00
Stan Silvert
f99c91291c
Remove duplicated themes documentation. (#42571)
* Remove duplicated themes documentation.

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

* Move Theme SPI documentation to Themes Guide

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

* Fix link so test will pass.

Fixes #42396

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

* Fix broken links.

Closes #42396

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

* Fix broken link.

Closes #42396

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

---------

Signed-off-by: Stan Silvert <ssilvert@redhat.com>
2025-09-18 10:31:52 +02:00
Ryan Emerson
aa8321b837
Update 26.4 release notes to refer to old multi-site architecture
Closes #42702

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2025-09-17 17:56:24 +02:00
Pedro Ruivo
f7ff7e55d8
Replace UUID with composite key for client session cache
Closes #42547

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-17 10:25:51 +00:00
Ryan Emerson
0c5b6398a9
Document Operator ServiceMonitor generation in release notes
Closes #42642

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2025-09-16 18:04:58 +02:00
Marek Posolda
d9d19791a4
Clarifying OIDC logout documentation. Removing obsolete unused docs p… (#42636)
closes #41792


Signed-off-by: mposolda <mposolda@gmail.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
2025-09-16 17:37:42 +02:00
Steven Hawkins
e9bf3bc2f8
fix: updating docs related to the number of executor threads
closes: #39342

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-16 17:02:15 +02:00
Steven Hawkins
26597c2d9a
fix: adding docs about mTLS and probes (#42561)
closes: #42191

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-16 16:30:37 +02:00
Ricardo Martin
a2acdda535
Automatic download and cache of the SAML client public keys (#41947)
Closes #17028

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-09-16 13:07:33 +02:00
Ryan Emerson
728118d62a
Validate wait_timeout parameter on MySQL and MariaDB
Closes #42300

Signed-off-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-16 09:38:52 +00:00
Ryan Emerson
6e7a836c96
Create default ServiceMonitor with Operator
Closes #40406

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2025-09-16 10:57:35 +02:00
andymunro
bbe2beebbb
Keycloak 26.4 Upgrading Guide
Closes #42564

Signed-off-by: AndyMunro <amunro@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-16 08:59:28 +02:00
Alexander Schwartz
78ab69b0e7
Edit Keycloak 26.4 release notes
Closes #42532

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
2025-09-11 14:26:12 -03:00
andymunro
801e892be1
Edit Keycloak 26.4 release notes
Closes #42532

Signed-off-by: AndyMunro <amunro@redhat.com>
2025-09-11 14:17:19 +02:00
Alexander Schwartz
5cfdaebcea
Add missing fields for client offline session timeout and lifespan
Closes #42369

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-11 11:46:50 +02:00
Steven Hawkins
ae1e1d3cc3
fix: allows for schedulings to be defined for operator jobs (#42310)
* fix: allows for schedulings to be defined for operator jobs

closes: #42057

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/operator/advanced-configuration.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2025-09-10 16:28:12 +00:00
Alexander Schwartz
473864a45d
Fixing the indentation of the sections
Closes #42501

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-10 13:54:50 +02:00
Takashi Norimatsu
91fa1fe6b1 FAPI 2.0 Message Signing Final - Documentation
closes #41313

Signed-off-by: Takashi Norimatsu <takashi.norimatsu.ws@hitachi.com>
2025-09-10 09:32:23 +02:00
Ricardo Martin
93791f67fb
Add User_agent header for documentation links checker
Closes #42164

Signed-off-by: rmartinc <rmartinc@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-09 21:02:42 +00:00
Ryan Emerson
a3c95a2a34
Document tested and supported configurations for single-cluster deployments
Closes #42304

Signed-off-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-09 19:49:22 +00:00
mposolda
5a05d2123e Unbounded login_hint parameter Can Corrupt KC_RESTART Cookie
closes #40857

Signed-off-by: mposolda <mposolda@gmail.com>
2025-09-09 11:05:19 +02:00
Takashi Norimatsu
d740c0f3db FAPI 2.0 Security Profile Final - Add FAPI 2.0 Final security profile as default profile of client policies
closes #41120

Signed-off-by: Takashi Norimatsu <takashi.norimatsu.ws@hitachi.com>
2025-09-08 17:23:53 +02:00
Pedro Igor
40476b53d9 fixup! align /users/count with /users behavior around service-accounts 2025-09-08 11:30:45 -03:00
Ryan Emerson
05e731f098
Fix broken HA guide links
Closes #42426

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2025-09-08 14:20:08 +02:00
Eugen Stan
c0537cbbe8
Specify link to where containers are published in start-keycloak-container.adoc
Closes #42392

Signed-off-by: Eugen Stan <eugen@ieugen.ro>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-05 15:21:33 +00:00
Ryan Emerson
17684f8011
Remove usage of the term stretched from single-cluster HA guides
Closes #42358

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2025-09-05 15:49:19 +02:00
Alexander Schwartz
ad12b418b4 Review
Closes #42369

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-05 10:28:32 -03:00
Alexander Schwartz
78dce37197 Update documentation after changes to RFC8414 handling
Closes #42323

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-05 10:28:32 -03:00
Bagautdino
d225bce21f feat(FGAPv2): introduce RESET_PASSWORD scope and evaluation
- Add RESET_PASSWORD to AdminPermissionsSchema.USERS
- Require RESET_PASSWORD in UserResource.resetPassword()
- Expose canResetPassword()/requireResetPassword()
- Implement FGAP v2 deny-overrides + secure-by-default + optional fallback
- Include access.resetPassword for Admin Console

Closes #41901

Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>
Signed-off-by: Bagautdino <336373@edu.itmo.ru>
2025-09-03 15:10:56 -03:00
Ryan Emerson
4fec0a8630
Document that single-cluster deployments expect all Keycloak instances to serve traffic
Closes #42305

Signed-off-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-09-03 18:30:13 +02:00
Alexander Schwartz
665f4140da
Adding missing docs for 26.4 release notes
Closes #42252

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Vinod Anandan <vinod@owasp.org>
2025-09-02 17:47:12 -03:00
vramik
4aa604ad04 Updated the screenshot to correctly show "Apply to Resource Type" enabled,
which is required for typed resource permissions.

Closes #42159

Signed-off-by: vramik <vramik@redhat.com>
2025-09-02 12:27:36 -03:00
Pedro Ruivo
935caa97ea
Disable peristent user session batching
Closes #41662

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-01 14:33:21 +00:00
Tobias Genannt
ca93863d60
fix: Update to new dash standard
Closes #42270

Signed-off-by: Tobias Genannt <tobias.genannt@gmail.com>
2025-09-01 12:49:02 +00:00
Pedro Ruivo
f4ec4cff1a
Configure topology information in Infinispan
Closes #41933

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-09-01 14:40:39 +02:00
am97
0c91d106a2
Add build documentation for REST API and Javadoc
Closes #42176

Signed-off-by: Andrés Maldonado <maldonado@codelutin.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-09-01 11:37:26 +00:00
Alexander Schwartz
1eba022149
Document network latency requirements for high available setups
Closes #42186

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-08-28 23:46:20 +02:00
Steven Hawkins
e891336167
fix: expands our warnings/notes around placeholder usage (#42151)
addresses CVE-2025-9162

closes: #42046

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-08-28 17:06:55 +02:00
Steven Hawkins
183a96d6a1
enhance: adding the ability to set truststores via configmaps (#41796)
closes: #34114

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-08-28 16:55:52 +02:00
Steven Hawkins
565e195f48
enhance: allow for control over what port health checks are exposed on (#41759)
closes: #39506

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-08-28 10:18:22 +02:00