1081 Commits

Author SHA1 Message Date
Steven Hawkins
49305d1567
fix: generalizing the misconfiguration detection. (#43500)
closes: #43166

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-10-21 11:44:00 +02:00
Steven Hawkins
3b7f364b4f
fix: allow for --optimized to receive signals (#43580)
* fix: allowing --optimized to terminate gracefully

closes: #43561

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update quarkus/dist/src/main/content/bin/kc.sh

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2025-10-20 17:52:27 +02:00
Martin Bartoš
37bea126c7
[PERF] Jackson reflection-free serialization/deserialization (#42946)
* [PERF] Jackson reflection-free serialization/deserialization

Closes #42945

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/guides/server/configuration-production.adoc

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Docs improvements

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/guides/server/configuration-production.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Polish the features template macros

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2025-10-17 20:24:47 +02:00
Steven Hawkins
f28e34ee79
fix: fully sanitizing mappers and changing duplicated log to trace (#42959)
closes: #38438

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-10-14 12:28:29 -04:00
Steven Hawkins
aa04ff8781
fix: adding checks around the hostname path (#43193)
closes: #43166

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-10-14 17:41:25 +02:00
Martin Bartoš
38909da47d
[quarkus-next] DatasourcesConfigurationTest fails (#43448)
Closes #43447

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-10-14 14:50:33 +00:00
Steven Hawkins
700b86fad8
fix: refining https-protocols documentation (#43420)
closes: #43164

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-10-14 08:01:08 -04:00
rmartinc
248d6d1feb Upgrade xmlsec to 3.0.4 and remove KeycloakFipsSecurityProvider workaround
Closes #43263

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-10-13 15:38:58 +02:00
stianst
aedd7fe5db Remove unused imports as part of #43233
Signed-off-by: stianst <stianst@gmail.com>
2025-10-13 13:32:01 +02:00
Steven Hawkins
a74c178195
fix: making picocli ansi handling match quarkus (#43268)
closes: #42446

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-10-08 08:51:09 +02:00
rmartinc
94a4e062f7 Add a debug statement when the KeycloakFipsSecurityProvider is created
Closes #43015

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-10-07 16:59:22 +02:00
Steven Hawkins
7bfc33fd5f
fix: auto-defaulting log console color (#42669)
closes: #42445

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2025-10-06 17:14:30 +00:00
Ryan Emerson
5cb0562fd2
Prevent users configuring max-count=-1 for caches with a default upper-bound
Closes #33146

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2025-10-02 19:58:28 +00:00
Erasure5959
3d9eb434b8
Disable Secure Client-Initiated Renegotiation by default
The parameter  -Djdk.tls.rejectClientInitiatedRenegotiation=true disables Secure Client-Initiated Renegotiation in Keycloak to resolve a potential DoS vulnerability. Note this is applicable only to TLS 1.2.

Closes #43020

Signed-off-by: Erasure5959 <154384607+Erasure5959@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-10-01 14:35:29 +00:00
rmartinc
a44758d4ae Upgrade bc-fips testing and documentation to 2.1.2
Closes #42958

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-09-29 09:04:43 +02:00
Martin Bartoš
f53e5ebdac
[Docs] Additional datasources support (#42655)
* [Docs] Additional datasources support

Closes #40388

Closes #42263

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Rename namedKey to wildcardKey in the code

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Clarify the defaults for DB kind

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Be more clear about the Named key reference in guide

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Vasek's review

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2025-09-27 08:45:12 +00:00
Václav Muzikář
b65a60e40d
Support for EDB 17 (#42341)
Closes #42742
Closes #42293

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2025-09-26 16:04:47 +02:00
Pedro Ruivo
56c1823082
Document Caffeine cache metrics
Closes #42705

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-09-25 12:55:31 +02:00
Steven Hawkins
87a6a3d445
perf: using resourceAsStream rather than zip (#42884)
closes: #42882

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-24 09:22:37 -04:00
Peter Skopek
14e4e1aed2
Enable branding without code changes (#34246)
closes #34244

Signed-off-by: Peter Skopek <pskopek@redhat.com>
2025-09-24 07:25:40 +02:00
Pedro Ruivo
47f85631f3
Automatically create external caches for MULTI_SITE deployments
Closes #32129

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-09-19 18:56:38 +02:00
Guido Grazioli
2d34ebe33e
federation-sssd-setup add ifp section
Closes #42726

Signed-off-by: Guido Grazioli <ggraziol@redhat.com>
2025-09-18 09:09:52 +00:00
Lukas Hanusovsky
d9b4bd047f
[Keycloak Test Framework] Infinispan cache + ClusterlessTestSuite configuration (#42172)
* [Keycloak Test Framework] Infinispan server + ClusterlessTestSuite and MultisiteTestSuite configuration

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>

* Utilise ClientIntelligence.BASIC to ensure that internal docker IPs
never used by Infinispan client

Signed-off-by: Ryan Emerson <remerson@ibm.com>

* Code refactoring + properties utility

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>

---------

Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
Signed-off-by: Ryan Emerson <remerson@ibm.com>
Co-authored-by: Ryan Emerson <remerson@ibm.com>
2025-09-17 07:13:11 +00:00
Ryan Emerson
728118d62a
Validate wait_timeout parameter on MySQL and MariaDB
Closes #42300

Signed-off-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-16 09:38:52 +00:00
Steven Hawkins
c7ae7185e6
fix: updating export option text (#42621)
closes: #42011

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-15 15:25:54 +00:00
Steven Hawkins
bb7e5ab7b2
fix: cleaning up dockerfile build warnings (#42573)
closes: #42572

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-15 17:07:27 +02:00
Ryan Emerson
73a4020baa
Remove default cache configurations from cache-local.xml
Closes #42351

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2025-09-11 21:11:56 +02:00
Steven Hawkins
3724409c5e
fix: further refining when profile info is logged (#42483)
closes: #42334

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-11 18:17:01 +02:00
Stian Thorgersen
1e5d52975e
Refactor JWTValidator to allow use both for self-signed and federated client assertions (#42472)
Closes: #42463

Signed-off-by: stianst <stianst@gmail.com>
2025-09-10 08:11:18 +02:00
Steven Hawkins
fcedd14e40
fix: moving multi-option validation to propertymappergrouping interface (#42125)
* fix: moving multi-option validation to propertymappergrouping interface

closes: #27025

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* refinements based upon review comments

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-09 10:32:15 +02:00
Steven Hawkins
32a268c68d
fix: default to not performing migrations with nonserver commands (#42361)
closes: #42321

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-08 16:51:36 +02:00
Steven Hawkins
beae28f1cc
fix: allowing resolution of log color at build time (#42393)
closes: #42335

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-08 16:47:16 +02:00
Steven Hawkins
0897560513
fix: moves unsupported feature logging (#42380)
closes: #42334

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-05 19:21:20 +02:00
Steven Hawkins
b743b3d3b1
fix: adding better management of closed entitymanagers
closes: #42114

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-05 16:57:47 +02:00
Steve Hawkins
2a16655d84 fix: setting the built flag for embedded usage
closes: #23972

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-05 01:56:41 -03:00
Steven Hawkins
fc467f48c8
fix: removing script logic for determining if a build is necessary (#41771)
closes: #23972

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-04 08:23:04 -04:00
Alexander Schwartz
4d3589c776
Lock the database before doing migrations
Closes #41801

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-03 15:22:04 -03:00
Steven Hawkins
f52421fe44
fix: improve handling when expressions are disabled (#42189)
closes: #42158

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-08-29 15:21:38 +02:00
Steven Hawkins
565e195f48
enhance: allow for control over what port health checks are exposed on (#41759)
closes: #39506

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-08-28 10:18:22 +02:00
Alexander Schwartz
ca1e61047a
Adding TiDB dialect for Quarkus
Closes #41897

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Dennis Kniep <kniepdennis@gmail.com>
Co-authored-by: Dennis Kniep <kniepdennis@gmail.com>
2025-08-26 17:44:45 -03:00
Pedro Ruivo
61e488bbf0
Skip configuring jdbc-ping stack in local mode
Closes #42047

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-08-22 15:11:58 +02:00
Pedro Ruivo
2f131fa56c
Detect and handle KC split brain clusters
Closes #41561

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Pedro Ruivo <pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-08-21 11:18:34 +02:00
Steven Hawkins
c2a7914c73
fix: removing test os restriction (#41952)
closes: #13501

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-08-20 17:45:28 -04:00
Steven Hawkins
03b5753c84
enhance: add KC_ env variables for verbose and .sh options (#41847)
* enhance: add KC_ env variables for verbose and .sh options

closes: #19213

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Peter Zaoral <pepo48@gmail.com>
Co-authored-by: Peter Zaoral <pepo48@gmail.com>
2025-08-20 14:46:06 -03:00
Ryan Emerson
b0f4b4efee
Log applied cache configurations as part of debug logs
Closes #41950

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2025-08-19 17:01:19 +02:00
Steven Hawkins
b7aaf80433
fix: simplifying/docing places where the config is initted (#41949)
closes: #25668

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-08-19 09:58:32 +02:00
Sebastian Łaskawiec
988bf9cb0b
WelcomeResource do not create temporary admins (#41416)
Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@defenseunicorns.com>
2025-08-18 17:31:26 +02:00
Steven Hawkins
02cd3ddfb7
fix: warn instead of an error if optimized provider timestamps change (#41798)
closes: #41268

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-08-18 09:29:08 +02:00
Ryan Emerson
168d9cc090
Simplify Cache Configuration file by removing built-in cache configurations
Closes #41559

Signed-off-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-08-15 16:16:56 +00:00
Martin Bartoš
4526d2d445
Upgrade to Quarkus 3.26.0.CR1
Closes #41880

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-08-15 15:29:19 +02:00