289 Commits

Author SHA1 Message Date
github-actions[bot]
e2159c32d1 Set version to 26.2.12 2025-12-01 07:00:59 +00:00
Ricardo Martin
9f653d7e64 Allow and control sending UTF-8 emails in the default email sender impl
Closes #41023

Signed-off-by: rmartinc <rmartinc@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
(cherry picked from commit 949ef35a3bda916b24763c435033258a84ba8596)
2025-08-19 09:46:39 +02:00
Steven Hawkins
08c0426dfe
fix: ensuring update job handles secrets when none exist in the cr (#41700)
closes #39939




(cherry picked from commit 72d3063a54c90c9bd05ecfad19d0ba36fe325578)

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2025-08-06 14:36:50 +00:00
Steven Hawkins
9e6e9e37c4
fix: switching to the registry addon for olm testing (#40334) (#40349)
closes: #40099


(cherry picked from commit eb96b4a59f25b0cf0715c21f0b0d8325b4d4c5b9)

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-06-10 12:12:35 +02:00
Steven Hawkins
313700624c
fix: keeping the image consistent for the recreate strategy
closes: #39710


(cherry picked from commit fdcd89cae70d890e1143504cd7f70d52cc355002)

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-05-14 21:15:16 +02:00
Pedro Ruivo
ca6e3a8003
Update Job Pod is listed in the keycloak service
Fixes #39500

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2025-05-07 19:50:29 +00:00
Steven Hawkins
1c1a814035
making the update reason and recreate annotations stable
closes: #38487

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
(cherry picked from commit f21c486dfb3d32f2797d6c19ae1b207a4d92ec83)
2025-05-02 12:37:10 +00:00
Steven Hawkins
8d74eaf5d3
fix: relaxing the ready=false reason to make the test less flaky
closes: #39124

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
(cherry picked from commit a39adf7b4fffa7fd8269324f7f7772ca9db62cc8)
2025-05-02 12:10:11 +00:00
Václav Muzikář
b1286b5561
fix: preventing statefulset infinite reconciliation loop (#38849) (#39113)
closes: #38846

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
(cherry picked from commit 0afe3aa14d7c71c7925f4f91fbda47b3eb640b95)

Co-authored-by: Steven Hawkins <shawkins@redhat.com>
2025-04-22 12:36:44 +00:00
Steven Hawkins
d46b72267a
fix: adding imagePullSecret to update job
closes: #39015

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
(cherry picked from commit 26de9efff334f70dbfc3bcbe7f0c6417afa3a32e)
2025-04-17 21:18:44 +02:00
Falko Modler
770a575f95
Allow zero tracing-sampler-ratio
Closes #38764

Signed-off-by: Falko Modler <famod@users.noreply.github.com>
2025-04-09 11:57:03 +00:00
Steven Hawkins
48a80d7680
fix: lowering level of errors - the operator sdk logs this as well (#38599)
closes: #38529

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-04-03 17:01:08 +00:00
Pedro Ruivo
f3b7628f98
Set the correct revision number in stateful set
Fixes #38617

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2025-04-02 21:03:08 +02:00
Laurids Møller Jepsen
8f7c1871a7 Add client OIDC configuration for setting the header type in access tokens.
If this setting is On, the access token header type will be "at+jwt" in compliance with RFC 9068, see https://datatracker.ietf.org/doc/html/rfc9068#section-2.1. If the setting is Off, the access token header type will be "JWT". The setting is Off per default.

Closes #36696

Signed-off-by: Laurids Møller Jepsen <laurids.jepsen@cryptomathic.com>
2025-03-24 10:35:41 +01:00
Alexander Schwartz
c9b88c6bf6
Finalizing release notes and documentation for initial rolling update
Closes #38168

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-03-19 21:34:09 +01:00
Steven Hawkins
0aa14c19e1
fix: separating api server tests, and splitting the operator tests (#38118)
closes: #37853

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-03-17 14:34:28 +01:00
Pedro Ruivo
96a5b19110
Operator: Implement an explicit update strategy
Closes #37416

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2025-03-17 08:28:26 +01:00
Alexander Schwartz
151e019935
Make NetworkPolicy supported and enabled by default
Closes #36036

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
2025-03-10 11:12:38 +01:00
Václav Muzikář
eff9e8d95e
Upgrade to Quarkus 3.19.2 (#37851)
Closes #37850

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2025-03-06 15:45:51 +01:00
Pedro Ruivo
14c5e2454e
[Operator] Make UpgradeTest stable
Fixes #37690

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2025-03-05 23:01:07 +01:00
Alexander Schwartz
41c8623a94
Remove ForceRecreate Operation
Closes #37661

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-03-03 12:26:33 -03:00
Pedro Ruivo
7263b70f06
Disable UpgradeTest (#37688)
Related to #37690

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2025-02-27 12:04:45 +01:00
Pedro Ruivo
a04c99e100
Operator: new CR status condition for upgrades
Closes #37220

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2025-02-26 08:32:13 +01:00
Steven Hawkins
acfca3ad74
fix: making the deadline override applicable to all remote tests (#37408)
closes: #37392

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-02-19 11:25:37 +01:00
Akbar Husain
9d3cfe0672
Remove X-XSS-Protection header (#36881)
Closes #21728

Signed-off-by: akbarhusainpatel <apatel@intermiles.com>
2025-02-19 08:42:26 +01:00
Václav Muzikář
764ca50fc4
Upgrade to Quarkus 3.18.2 (#37300)
* Upgrade to Quarkus 3.18.2

Closes #37056

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>

* Update docs/documentation/upgrading/topics/changes/changes-26_2_0.adoc

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>

---------

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-02-17 16:30:05 +01:00
Pedro Ruivo
81c65c8174
Rename operator strategy options
Closes #37090

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2025-02-12 11:21:22 +01:00
Pedro Ruivo
c650984267
Operator: automatic upgrade strategy
Closes #36748

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2025-02-10 18:54:14 +01:00
Pedro Ruivo
0f91e67b90
Feature flag: rolling-updates
Closes #36840

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2025-02-06 17:03:50 +01:00
Steven Hawkins
332bf122f1
fix: detecting provider changes when running start optimized (#35845)
closes: #34665

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-02-03 16:20:42 +00:00
Steven Hawkins
b841788343
fix: allow the keycloak instances to stop gracefully on deletion (#36655)
also reusing curl pods when there is no label

closes: #34868 #28244

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-01-28 18:27:13 +01:00
Steven Hawkins
ece56095a7
fix: refinements to comparison logic (#36875)
related to #36520

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-01-28 18:10:25 +01:00
Pedro Ruivo
a6e9736697
New operator spec: upgrade strategy
Closes #36520

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-01-28 10:57:33 +01:00
rmartinc
6cf92d9dc7 Add crl cache to certificate validation
Closes #26473

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-01-22 14:58:35 +01:00
Steven Hawkins
6a31777024
fix: adding the jgroups bind address for ipv6 support (#36504)
* fix: adding the jgroups bind address

closes: #36383

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update operator/src/main/java/org/keycloak/operator/controllers/KeycloakDeploymentDependentResource.java

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-01-16 13:38:46 +01:00
Steven Hawkins
8f49f70ed3
Revert "fix: increasing the startup timeout to 1 hour" (#36358)
This reverts commit cdebe8c2a384390c45282962e1eda1c3ac56faf9.

closes: #36347

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-01-13 08:57:59 +01:00
Steve Hawkins
cdebe8c2a3 fix: increasing the startup timeout to 1 hour
closes: #36308

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-01-09 14:57:23 +01:00
Martin Bartoš
7cb7718ae4
OTEL: merge Operator tracing test cases (#36264)
Closes #36263

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-01-07 12:54:09 +01:00
Pedro Ruivo
3767642f93
[Operator] Network Policy Rules
Closes #35598

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2024-12-19 10:06:25 +01:00
Martin Bartoš
9f13b271ec
OTEL: Fix #podNamePropagation test for Operator (#35769)
Fixes #32490

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2024-12-16 13:20:03 +01:00
Martin Bartoš
41356dff24
Add Keycloak CR support for Tracing options (#35703)
Closes #32092

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2024-12-12 12:59:27 +01:00
Pedro Ruivo
e8841b6ae3
Enhance the Keycloak Operator with Network Policies (#34788)
Closes #34659

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2024-12-04 09:50:28 +01:00
Steven Hawkins
8d314a69a0
fix: adding doc note about admin ingress (#33392)
* fix: adding doc note about admin ingress

closes: #33203

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/operator/basic-deployment.adoc

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2024-09-30 14:11:58 +00:00
Jon Koops
fa08cef8ef
Disable broken operator test instead of entire suite (#33118)
Signed-off-by: Jon Koops <jonkoops@gmail.com>
2024-09-19 21:23:44 +00:00
Bernhard Strähle
bfe9d2343c
Remove crd-generator-apt from operator (#32555)
* Remove crd-generator-apt from operator to avoid generating CRDs multiple times

Signed-off-by: Bernhard Strähle <bernhard.straehle@gmail.com>

* Add io.sundr/builder-annotations to managed dependencies

Signed-off-by: Bernhard Strähle <bernhard.straehle@gmail.com>

---------

Signed-off-by: Bernhard Strähle <bernhard.straehle@gmail.com>
2024-09-13 12:01:55 +02:00
Martin Bartoš
afcbf79582 OTEL: Profile Feature
Closes #32231

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2024-08-30 13:19:09 +02:00
Joshua Cuellar
3d340d17a4
Removes startup probe from KeycloakRealmImport job container (#32370)
Closes #32368

Signed-off-by: Joshua Cuellar <joshuac.cuellar@outlook.com>
2024-08-26 08:01:46 +00:00
Martin Bartoš
607ab01405
OTEL: Dynamic service name for tracing in K8s environment (#32140)
* OTEL: Dynamic service name for tracing in K8s environment

Closes #32095

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/guides/server/tracing.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2024-08-21 17:22:36 +02:00
Václav Muzikář
cb418b0bfc
Upgrade to Quarkus 3.13.2 (#31678)
* Upgrade to Quarkus 3.13.2

Closes #31676

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Co-authored-by: Peter Zaoral <pzaoral@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2024-08-16 11:41:34 +02:00
Steven Hawkins
ea3937f37c
fix: always replacing placeholders (#31871)
closes: #31625

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2024-08-12 16:20:47 +00:00