1097 Commits

Author SHA1 Message Date
Martin Bartoš
1f9694358f
Ability to enable/disable feature via single property (#43542)
* Ability to enable/disable feature via single property

Closes #43541

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Provide support for specifying profile preview

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Remove duplication check, use the new WildcardOptionUtil

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Create quarkus specific single profile config resolver

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Remove the feature profile capability for single feature option

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-11-07 13:35:39 +01:00
Martin Bartoš
229cd9450e
Improve error message for the HTTPS material loading (#44006)
Closes #44005

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-11-07 09:48:32 +01:00
Steven Hawkins
4a63fcffaf
fix: considering source ordinality with spi options (#43805)
closes: #43793

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-11-06 18:01:18 +01:00
Martin Bartoš
1d3a1b554b
Print a warning on duplicate options (#43918)
* Print a warning on duplicate options

Closes #43604

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Print duplicated CLI keys and even sys props

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-11-06 14:47:29 +00:00
Lukas Hanusovsky
768cea1b82
Add FIPS suite to the new tests (#43431)
* Add FIPS test suite to the new tests

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>

* Tweaks to FIPS suite in new test

Signed-off-by: stianst <stianst@gmail.com>

---------

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
Signed-off-by: stianst <stianst@gmail.com>
Co-authored-by: stianst <stianst@gmail.com>
2025-11-06 14:08:19 +01:00
Steven Hawkins
a04d5d7b5e
task: clarifying home dir unset logic (#43904)
closes: #43903

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-11-05 08:45:06 +01:00
Václav Muzikář
9c86eae7ed
Initial Client API v2 impl (#43395)
Closes #43224

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Peter Zaoral <pzaoral@redhat.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Robin Meese <39960884+robson90@users.noreply.github.com>
2025-11-03 14:31:54 +01:00
Steven Hawkins
f7735b573c
fix: removing the fast start optimization (#43686)
* fix: removing the fast start optimization

closes: #38790 #42960

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* updating the docs based upon a review comment

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-11-03 12:37:13 +01:00
Martin Bartoš
8502cc3ae1
Including OTLP headers for tracing (#43122)
* Including OTLP headers for tracing

Closes #41007

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Polishing, add test for the util class, address review

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Remove the WildcardOptionsUtil#isKcWildcardOption

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-10-31 15:46:05 +01:00
Martin Bartoš
12d9ec048b
[quarkus-next] Removed exception escaped OTel attribute (#43848)
Closes #43845

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-10-31 08:52:07 +01:00
Steven Hawkins
74e5da49c7
fix: moving h2 logic out of Database so that it can be resolved (#43750)
closes: #43687

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-10-30 11:08:10 -04:00
Steven Hawkins
9e98f2bf96
fix: simplify debug handling and remove the 0.0.0.0 default (#43574)
* fix: simplify debug handling and remove the 0.0.0.0 default

closes: #43160

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update quarkus/dist/src/main/content/bin/kc.sh

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* removing the ability to specify just the ip

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Apply suggestions from code review

Co-authored-by: Peter Zaoral <pepo48@gmail.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Peter Zaoral <pepo48@gmail.com>
2025-10-30 15:57:37 +01:00
Alexander Schwartz
0f01444543
Allow only normalized paths in requests (#43765)
Closes #43763

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2025-10-30 14:37:50 +01:00
Alexander Schwartz
ba0fe9bd70
Cleaning up threadlocals to prevent (small) memory leak
Closes #43759

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-10-28 10:36:27 -03:00
Steven Hawkins
422eadecf4
fix: adding type validation and lazily adding cli options (#43467)
* fix: adding type validation and lazily adding cli options

closes: #43466

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* consolidating empty value checking

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* stripping the smallrye code if possible

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-10-23 13:46:35 +00:00
vramik
b5ed45f2a0 Ability to define workflows with YAML
Closes #42687

Signed-off-by: vramik <vramik@redhat.com>
Co-authored-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-10-23 09:33:50 -03:00
Steven Hawkins
49305d1567
fix: generalizing the misconfiguration detection. (#43500)
closes: #43166

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-10-21 11:44:00 +02:00
Steven Hawkins
3b7f364b4f
fix: allow for --optimized to receive signals (#43580)
* fix: allowing --optimized to terminate gracefully

closes: #43561

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update quarkus/dist/src/main/content/bin/kc.sh

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2025-10-20 17:52:27 +02:00
Martin Bartoš
37bea126c7
[PERF] Jackson reflection-free serialization/deserialization (#42946)
* [PERF] Jackson reflection-free serialization/deserialization

Closes #42945

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/guides/server/configuration-production.adoc

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Docs improvements

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/guides/server/configuration-production.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Polish the features template macros

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2025-10-17 20:24:47 +02:00
Steven Hawkins
f28e34ee79
fix: fully sanitizing mappers and changing duplicated log to trace (#42959)
closes: #38438

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-10-14 12:28:29 -04:00
Steven Hawkins
aa04ff8781
fix: adding checks around the hostname path (#43193)
closes: #43166

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-10-14 17:41:25 +02:00
Martin Bartoš
38909da47d
[quarkus-next] DatasourcesConfigurationTest fails (#43448)
Closes #43447

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-10-14 14:50:33 +00:00
Steven Hawkins
700b86fad8
fix: refining https-protocols documentation (#43420)
closes: #43164

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-10-14 08:01:08 -04:00
rmartinc
248d6d1feb Upgrade xmlsec to 3.0.4 and remove KeycloakFipsSecurityProvider workaround
Closes #43263

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-10-13 15:38:58 +02:00
stianst
aedd7fe5db Remove unused imports as part of #43233
Signed-off-by: stianst <stianst@gmail.com>
2025-10-13 13:32:01 +02:00
Steven Hawkins
a74c178195
fix: making picocli ansi handling match quarkus (#43268)
closes: #42446

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-10-08 08:51:09 +02:00
rmartinc
94a4e062f7 Add a debug statement when the KeycloakFipsSecurityProvider is created
Closes #43015

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-10-07 16:59:22 +02:00
Steven Hawkins
7bfc33fd5f
fix: auto-defaulting log console color (#42669)
closes: #42445

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2025-10-06 17:14:30 +00:00
Ryan Emerson
5cb0562fd2
Prevent users configuring max-count=-1 for caches with a default upper-bound
Closes #33146

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2025-10-02 19:58:28 +00:00
Erasure5959
3d9eb434b8
Disable Secure Client-Initiated Renegotiation by default
The parameter  -Djdk.tls.rejectClientInitiatedRenegotiation=true disables Secure Client-Initiated Renegotiation in Keycloak to resolve a potential DoS vulnerability. Note this is applicable only to TLS 1.2.

Closes #43020

Signed-off-by: Erasure5959 <154384607+Erasure5959@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-10-01 14:35:29 +00:00
rmartinc
a44758d4ae Upgrade bc-fips testing and documentation to 2.1.2
Closes #42958

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-09-29 09:04:43 +02:00
Martin Bartoš
f53e5ebdac
[Docs] Additional datasources support (#42655)
* [Docs] Additional datasources support

Closes #40388

Closes #42263

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Rename namedKey to wildcardKey in the code

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Clarify the defaults for DB kind

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Be more clear about the Named key reference in guide

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Vasek's review

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2025-09-27 08:45:12 +00:00
Václav Muzikář
b65a60e40d
Support for EDB 17 (#42341)
Closes #42742
Closes #42293

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2025-09-26 16:04:47 +02:00
Pedro Ruivo
56c1823082
Document Caffeine cache metrics
Closes #42705

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-09-25 12:55:31 +02:00
Steven Hawkins
87a6a3d445
perf: using resourceAsStream rather than zip (#42884)
closes: #42882

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-24 09:22:37 -04:00
Peter Skopek
14e4e1aed2
Enable branding without code changes (#34246)
closes #34244

Signed-off-by: Peter Skopek <pskopek@redhat.com>
2025-09-24 07:25:40 +02:00
Pedro Ruivo
47f85631f3
Automatically create external caches for MULTI_SITE deployments
Closes #32129

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-09-19 18:56:38 +02:00
Guido Grazioli
2d34ebe33e
federation-sssd-setup add ifp section
Closes #42726

Signed-off-by: Guido Grazioli <ggraziol@redhat.com>
2025-09-18 09:09:52 +00:00
Lukas Hanusovsky
d9b4bd047f
[Keycloak Test Framework] Infinispan cache + ClusterlessTestSuite configuration (#42172)
* [Keycloak Test Framework] Infinispan server + ClusterlessTestSuite and MultisiteTestSuite configuration

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>

* Utilise ClientIntelligence.BASIC to ensure that internal docker IPs
never used by Infinispan client

Signed-off-by: Ryan Emerson <remerson@ibm.com>

* Code refactoring + properties utility

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>

---------

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
Signed-off-by: Ryan Emerson <remerson@ibm.com>
Co-authored-by: Ryan Emerson <remerson@ibm.com>
2025-09-17 07:13:11 +00:00
Ryan Emerson
728118d62a
Validate wait_timeout parameter on MySQL and MariaDB
Closes #42300

Signed-off-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-16 09:38:52 +00:00
Steven Hawkins
c7ae7185e6
fix: updating export option text (#42621)
closes: #42011

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-15 15:25:54 +00:00
Steven Hawkins
bb7e5ab7b2
fix: cleaning up dockerfile build warnings (#42573)
closes: #42572

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-15 17:07:27 +02:00
Ryan Emerson
73a4020baa
Remove default cache configurations from cache-local.xml
Closes #42351

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2025-09-11 21:11:56 +02:00
Steven Hawkins
3724409c5e
fix: further refining when profile info is logged (#42483)
closes: #42334

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-11 18:17:01 +02:00
Stian Thorgersen
1e5d52975e
Refactor JWTValidator to allow use both for self-signed and federated client assertions (#42472)
Closes: #42463

Signed-off-by: stianst <stianst@gmail.com>
2025-09-10 08:11:18 +02:00
Steven Hawkins
fcedd14e40
fix: moving multi-option validation to propertymappergrouping interface (#42125)
* fix: moving multi-option validation to propertymappergrouping interface

closes: #27025

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* refinements based upon review comments

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-09 10:32:15 +02:00
Steven Hawkins
32a268c68d
fix: default to not performing migrations with nonserver commands (#42361)
closes: #42321

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-08 16:51:36 +02:00
Steven Hawkins
beae28f1cc
fix: allowing resolution of log color at build time (#42393)
closes: #42335

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-08 16:47:16 +02:00
Steven Hawkins
0897560513
fix: moves unsupported feature logging (#42380)
closes: #42334

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-05 19:21:20 +02:00
Steven Hawkins
b743b3d3b1
fix: adding better management of closed entitymanagers
closes: #42114

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-05 16:57:47 +02:00