Closes#34004
In upstream this was solved by e9c9efc3f4dac20cf6a791fd3efaa246612038bd
but the backport needs to strip the commit and just maintain the
certificate changes.
Signed-off-by: rmartinc <rmartinc@redhat.com>
Closes#33064
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
Signed-off-by: rmartinc <rmartinc@redhat.com>
Signed-off-by: Jon Koops <jonkoops@gmail.com>
Co-authored-by: Stefan Guilhen <sguilhen@redhat.com>
Co-authored-by: Jon Koops <jonkoops@gmail.com>
- prevent issues when ordering by guiOrder due to pagination of results
Closes#32669
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
(cherry picked from commit 6503d202ac9994a5ea6dafc0f800b1a5f1fd8e76)
Adjusted import file for KC24.
Fixes#32799
Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>
(cherry picked from commit 445a7da9020e4c48561d99040edca36cda61d4cf)
* better unset check
fixes: #32059
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
* better explanation
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
* fix min value
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
* Steal some code from `react-hook-form`
Signed-off-by: Jon Koops <jonkoops@gmail.com>
---------
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
Signed-off-by: Jon Koops <jonkoops@gmail.com>
Co-authored-by: Jon Koops <jonkoops@gmail.com>
(cherry picked from commit 862854bc2915516a1d7a9b3874c39bdfc48f8422)
Co-authored-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
Closes#31726
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Signed-off-by: Douglas Palmer <dpalmer@redhat.com>
Signed-off-by: mposolda <mposolda@gmail.com>
Necessary when running with external AD
Closes#27499
(cherry picked from commit be7775a9bee8debe35be6d1b2cf2df2838d6ca5a)
Signed-off-by: Pavel Drozd <pdrozd@redhat.com>
Co-authored-by: Pavel Drozd <pdrozd@redhat.com>
Closes#31558
Signed-off-by: Miquel Simon <msimonma@redhat.com>
(cherry picked from commit aab7a912c46527c3da2aa254aefd653504fd1cef)
Signed-off-by: Miquel Simon <msimonma@redhat.com>
Automatically forces the user to re-authenticate from the Admin and Account consoles when a single-logout occurs.
Closes#23832Closes#23833
(cherry picked from commit 957859d8465e3e72c036dca88f6ef73b5ade650e)
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
Signed-off-by: Jon Koops <jonkoops@gmail.com>
Co-authored-by: Jon Koops <jonkoops@gmail.com>
* Truncate the clientId
fixes: #28284
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
* fxed tests
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
---------
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
(cherry picked from commit 73e22b32c9b6c77c79d1e011efdf9902e63a295b)
* use label function to fetch the translation
fixes: #28443
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
* removed export from unWrap
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
---------
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
(cherry picked from commit 9190114c60ee165a795f3604c15526ebad5cb41c)
A bug in Infinispan prevents the metrics to be registered if the "stack"
is not specified.
Change the default configuration shipped with Keycloak to use the UDP
stack as default.
UDP is the default in previous Keycloak versions.
Fixes#31218
Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
Previously, the given connection string was check with URI.create(..) which
failed when multiple space separated LDAP URLs were given.
Closes#31267
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Thomas Darimont <thomas.darimont@googlemail.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
When performing a keycloak update, the operator is supposed to make sure that
potential database migrations are run with only one pod active. This change
makes the operator scale down the stateful set to zero pods in preparation for
the update. The next reconciliation loop will scale the stateful set back up
and change the image, making sure migrations are being run on the first pod
that is brought up. This also makes sure that the rollover works even if the
infinispan versions are incompatible. (ref: #30449)
Signed-off-by: Schmidt, Sascha (sasschmidt) <sascha.schmidt@breuninger.de>
(cherry picked from commit 13ef6fb1c8564aa22003cf4d1507d982f63e2f5f)
