1258 Commits

Author SHA1 Message Date
Steven Hawkins
2397ff9b8e
fix: providing a single property to declare management interface as http (#41089)
closes: #40945

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-07-14 12:54:22 +02:00
mposolda
274afa88fa Add option 'Requires short state parameter' to OIDC IDP
closes #40237

Signed-off-by: mposolda <mposolda@gmail.com>
2025-07-11 16:17:03 +02:00
Pascal Knüppel
f39a37d8d1
[OID4VCI] Move realm attributes to clientScope and protocol-mappers (#39768)
fixes #39527


Signed-off-by: Pascal Knüppel <pascal.knueppel@governikus.de>
Signed-off-by: Captain-P-Goldfish <captain.p.goldfish@gmx.de>
2025-07-10 14:46:36 +02:00
Pedro Ruivo
9322d71d61
UserSession Offline removed from DB if not in cache
Fixes #40754

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-07-07 20:52:06 +02:00
Alexis Rico
c834e7473c
Fix typo in consent scope)
* Deprecate `displayTest`

Closes #40786

Signed-off-by: Alexis Rico <sferadev@gmail.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-07-07 16:38:47 +00:00
Alexander Schwartz
0077b27c1f
Update documentation when no rolling update is performed
Closes #40962

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-07-07 17:50:02 +02:00
Steven Hawkins
eba4934950
fix: correcting spi-theme options
closes: #40930

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-07-07 13:18:24 +00:00
Ryan Emerson
eb7ce6ae15
Provide CLI Parameters for jgroups.* options
Closes #40481

Signed-off-by: Ryan Emerson <remerson@redhat.com>
2025-07-07 13:07:45 +02:00
Alexander Schwartz
05d0c34681
Automatically connect to a writer instance of PostgreSQL (#40384)
Closes #40383

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2025-07-04 16:46:49 +02:00
Jon Koops
89af7fe56d
Remove myself from the Dutch language maintainers (#40893)
Signed-off-by: Jon Koops <jonkoops@gmail.com>
2025-07-03 21:24:33 +02:00
Michael-AT-Corporation
ff9e7c2371 Added new searchByAttributes function to UsersResource with the exact parameter
Closes #39609

Signed-off-by: Michael-AT-Corporation <michael-hu@ooutlook.de>
2025-07-03 13:51:46 -03:00
Martin Bartoš
b8ce83772b
Mark options for additional datasources as preview (#40839)
* Mark options for additional datasources as preview

Closes #40838

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/documentation/upgrading/topics/changes/changes-26_3_1.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2025-07-02 10:46:45 +00:00
Steven Hawkins
3760e726cd
fix: map just logging env wildcards to . (#40834)
* fix: map just logging env wildcards to .

closes: #40833

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* updates based upon review comments

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-07-02 10:06:29 +02:00
Pedro Igor
2a9f4336c3
Updating upgrading guide about changes in user-profile-commons.ftl template
Closes #39562

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
2025-07-01 13:11:23 +02:00
Steven Hawkins
2b44c5676f
fix: adding logic to isolate realm migration processing (#39377)
* fix: adding logic to isolate realm migration processing

also adding an info log for each realm migrated

closes: #33978 #38649

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* switching to an export strategy tolerant to read committed

also preventing creating cached users during export

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* updating the docs to still recommend shutting the server down for export

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* accounting for null managed users

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* refinements based upon review comments

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Scaling back the docs

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>

* Remove rogue release note

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Václav Muzikář <vmuzikar@redhat.com>
2025-06-30 08:31:57 -04:00
AvivGuiser
3a87dcd2eb
update docs regarding to use statefulset and not a deployment
Closes #40090

Signed-off-by: AvivGuiser <avivguiser@gmail.com>
2025-06-30 14:23:06 +02:00
Ricardo Martin
8624101701
Documentation changes for Passkeys (#40728)
Closes #40705

Signed-off-by: rmartinc <rmartinc@redhat.com>


Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Ricardo Martin <rmartinc@redhat.com>
2025-06-27 14:59:46 +02:00
Alexander Schwartz
7e2a38ae4c
Move section in the upgrading guide
Closes #39063

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-06-27 13:25:25 +02:00
Michal Hajas
d944823277
Make rolling-updates-v2 preview feature (#40732)
Closes #38883
Signed-off-by: Michal Hajas <mhajas@redhat.com>
2025-06-26 19:28:35 +02:00
Martin Bartoš
d475c5aecc
Missing Quarkus flag for Syslog counting framing (#40621)
* Missing Quarkus flag for Syslog counting framing

Closes #39893

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Remove handling of mapFrom

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Add notable change

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-06-25 17:36:41 +02:00
Steven Hawkins
a50d15be05
fix: refining breaking behavior (#40697)
closes: #39063

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-06-25 17:28:00 +02:00
rmartinc
86f0a7864f Disable email verification when email manually changed by idp review
Closes #40446

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-06-25 08:56:03 +02:00
Ricardo Martin
dd4c21700f
Deprecate the original Passkeys Conditional UI Authenticator (#40674)
Closes #40033

Signed-off-by: rmartinc <rmartinc@redhat.com>


Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
Signed-off-by: Ricardo Martin <rmartinc@redhat.com>
2025-06-24 20:32:39 +02:00
Pedro Ruivo
f4d5fa68c1
Update documentation about volatile sessions
Closes #40639

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-06-20 16:45:22 +00:00
andymunro
e7b4f745ad
Clarify OpenShift instructions (#40488)
Closes #40487

Signed-off-by: AndyMunro <amunro@redhat.com>
2025-06-20 17:07:48 +02:00
burnedoutman
be57744a5f
[docs] fix spelling error Update hostname.adoc
Closes #40641

Signed-off-by: burnedoutman <97279475+burnedoutman@users.noreply.github.com>
2025-06-20 16:59:21 +02:00
Alexander Schwartz
7fac1531bc
Applying escaping of theme contents (#40597)
Closes #40596

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-06-19 12:03:44 -04:00
Alexander Schwartz
c4eafcf2ae
Rework AsciiDoc warnings
Closes #40445

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-06-18 14:57:39 +02:00
Alexander Schwartz
872a56f237
Reworking the release notes for the upcoming release
Closes #40547
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
2025-06-18 10:45:31 +02:00
Zach Callahan
c2987ea8b4
docs(caching): clarified wording for the jgroups fd port offset
This change updates the documentation for caching to better
explain the relationship between the default jgroups failure
detection port offset and the actual port.

Closes #40564

Signed-off-by: Zach Callahan <zach@zmc.dev>
2025-06-18 06:35:36 +00:00
Gilvan Filho
e5bb7f5249
add labels and annotations to service (httpSpec) (#39925)
closes #23283

Signed-off-by: Gilvan Filho <gfilho@redhat.com>
2025-06-17 11:27:16 +02:00
Alexander Schwartz
61586ff328
Disabling persistent sessions affects also offline session cache
Closes #40483

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-06-17 08:02:28 +00:00
andymunro
75cc28a9d1
Clarify FIPS instructions
Closes #40533

Signed-off-by: AndyMunro <amunro@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-06-17 09:54:46 +02:00
Henrik S.
c952cb66ad
Update authentication flows documentation to match new GUI
Closes #40514

Signed-off-by: Henrik S. <henrik.strath@volvocars.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-06-16 08:24:43 +00:00
Ryan Emerson
78f575b53b
Default to num_owners=2 when the persistent-user-sessions feature is disabled
Closes #39429
Closes #40472

Signed-off-by: Ryan Emerson <remerson@redhat.com>
2025-06-16 09:43:39 +02:00
Thomas Darimont
0ae49b96c3
Fix link to client-registration in docs
Fixes #40444

Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>
2025-06-13 20:59:46 +02:00
AvivGuiser
7736ca20e9
support setting periodSeconds and failureThreashold in the Keyclock CR (#40117)
* add probe spec

Signed-off-by: AvivGuiser <avivguiser@gmail.com>

* make default for probes if not configured, add skeleton test files

Signed-off-by: AvivGuiser <avivguiser@gmail.com>

* fix tests

Signed-off-by: AvivGuiser <avivguiser@gmail.com>

* fix tests

Signed-off-by: AvivGuiser <avivguiser@gmail.com>

* add docs

Signed-off-by: AvivGuiser <avivguiser@gmail.com>

* move test to unittest and apiserver test

Signed-off-by: AvivGuiser <avivguiser@gmail.com>

* adding asserts to check new fields

Signed-off-by: AvivGuiser <avivguiser@gmail.com>

* fix test

Signed-off-by: AvivGuiser <aviv.guiser@placer.ai>

* update docs

Signed-off-by: AvivGuiser <aviv.guiser@placer.ai>

---------

Signed-off-by: AvivGuiser <avivguiser@gmail.com>
Signed-off-by: AvivGuiser <aviv.guiser@placer.ai>
2025-06-13 17:32:20 +00:00
Steven Hawkins
76bc9fadcb
fix: adding a -- separator for spi options (#40005)
* fix: adding a -- separator for spi options

closes: #39063

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* adding a warning for ambiguous spi options

also adding a note about the change

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
# Conflicts:
#	docs/documentation/upgrading/topics/changes/changes-26_3_0.adoc

* updating docs to the new format

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
# Conflicts:
#	docs/guides/high-availability/examples/generated/keycloak-ispn.yaml
#	docs/guides/high-availability/examples/generated/keycloak.yaml

* internally using the new spi options

also adding a deprecation notice

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Apply suggestions from code review

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* correcting options output

adding + + inlining where needed

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* adding test showing the env mapping with __

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2025-06-13 16:13:53 +02:00
Steven Hawkins
0e28bd3981
fix: adding a mapping directly from an env property to a wildcard (#39602)
* fix: adding a map directly from an env property to a wildcard

closes: #38259

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* switching unit test logic to not directly manipulate env vars

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Apply suggestions from code review

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* modifications based upon review feedback

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2025-06-13 08:26:18 +00:00
Martin Bartoš
21bd46cb18
Add templates for release notes and migration guide
Closes #40441

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-06-12 11:38:06 +02:00
Thomas Darimont
a89be114e9
Add link to OIDC discovery specification to the docs.
Fixes #40440

Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>
2025-06-12 11:35:44 +02:00
Alexander Schwartz
0b3950529e
Re-sort the release notes and upgrading guide (#40424)
Closes #40422

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Michal Hajas <mhajas@redhat.com>
2025-06-12 10:25:42 +02:00
Ricardo Martin
b89f8a0225
Documentation changes for the 2FA additions
Closes #40001

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-06-12 09:30:27 +02:00
Niko Köbler
2e7a88f052
update links to OAuth 2.1 draft spec and change link from BCP to RFC9700
closes #40419

Signed-off-by: Niko Köbler <niko@n-k.de>
2025-06-11 18:48:43 +02:00
Alexander Schwartz
74027bfbfe
Remove obsolete information from the Keycloak deployment
Closes #40375

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-06-11 09:17:48 -03:00
Alexander Schwartz
4af3d7cc9d
Redirect requests from outdated theme version to the current theme version
Closes #39723

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-06-11 11:13:55 +02:00
vramik
aafb140529 Add a note to release notes about admin roles mapping
Fixes #39956

Signed-off-by: vramik <vramik@redhat.com>
2025-06-09 09:34:45 -03:00
Steven Hawkins
f8ba9d3429
fix: adding docs about Keycloak CR security (#40260)
closes: #40188

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-06-06 16:47:33 +02:00
Ryan Emerson
0c62bd0878
Change discovery in Kubernetes to jdbc-ping
Closes #39544

Signed-off-by: Ryan Emerson <remerson@redhat.com>
2025-06-05 16:48:30 +02:00
mposolda
b03b9f9e3a Improve documentation of service-accounts and make it more clear. Delete the unused file service-accounts.adoc
closes #39748

Signed-off-by: mposolda <mposolda@gmail.com>
2025-06-05 08:45:12 +02:00