Commit Graph

579 Commits

Author SHA1 Message Date
Ryan Emerson
82dc98a0d9 Document configuration changes that prevent rolling updates
Closes #41214

Signed-off-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-07-22 10:38:11 +00:00
SoMin Park
0ebf87920b docs: hide Containerfile note in product docs
Closes #41029

Signed-off-by: Somin Park <ps4708@naver.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-07-17 15:02:00 +00:00
Martin Bartoš
0b402f47fe Fix typo for MDC enabled property in logging guide (#41212)
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-07-17 09:05:36 +02:00
SoMin Park
0d71b4ebe8 DOC: Explain Containerfile usage and fix docker build example (#41213)
Closes #41029

Signed-off-by: Somin Park <ps4708@naver.com>
2025-07-17 08:28:15 +02:00
Björn Eickvonder
d62d5030fe Adds log context information for MDC for realm, users, etc.
Closes #39812

Signed-off-by: Björn Eickvonder <b.eicki@gmx.net>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Bjoern Eickvonder <bjoern.eickvonder@inform-software.com>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-07-16 17:46:46 +02:00
Steven Hawkins
be6ba05444 fix: using unversioned key in docs (#41142)
closes: #40959

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-07-14 18:11:24 +02:00
Steven Hawkins
2397ff9b8e fix: providing a single property to declare management interface as http (#41089)
closes: #40945

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-07-14 12:54:22 +02:00
Pedro Ruivo
9322d71d61 UserSession Offline removed from DB if not in cache
Fixes #40754

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-07-07 20:52:06 +02:00
Alexander Schwartz
0077b27c1f Update documentation when no rolling update is performed
Closes #40962

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-07-07 17:50:02 +02:00
Steven Hawkins
eba4934950 fix: correcting spi-theme options
closes: #40930

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-07-07 13:18:24 +00:00
Ryan Emerson
eb7ce6ae15 Provide CLI Parameters for jgroups.* options
Closes #40481

Signed-off-by: Ryan Emerson <remerson@redhat.com>
2025-07-07 13:07:45 +02:00
Alexander Schwartz
05d0c34681 Automatically connect to a writer instance of PostgreSQL (#40384)
Closes #40383

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2025-07-04 16:46:49 +02:00
Steven Hawkins
3760e726cd fix: map just logging env wildcards to . (#40834)
* fix: map just logging env wildcards to .

closes: #40833

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* updates based upon review comments

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-07-02 10:06:29 +02:00
Steven Hawkins
2b44c5676f fix: adding logic to isolate realm migration processing (#39377)
* fix: adding logic to isolate realm migration processing

also adding an info log for each realm migrated

closes: #33978 #38649

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* switching to an export strategy tolerant to read committed

also preventing creating cached users during export

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* updating the docs to still recommend shutting the server down for export

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* accounting for null managed users

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* refinements based upon review comments

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Scaling back the docs

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>

* Remove rogue release note

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Václav Muzikář <vmuzikar@redhat.com>
2025-06-30 08:31:57 -04:00
AvivGuiser
3a87dcd2eb update docs regarding to use statefulset and not a deployment
Closes #40090

Signed-off-by: AvivGuiser <avivguiser@gmail.com>
2025-06-30 14:23:06 +02:00
Michal Hajas
d944823277 Make rolling-updates-v2 preview feature (#40732)
Closes #38883
Signed-off-by: Michal Hajas <mhajas@redhat.com>
2025-06-26 19:28:35 +02:00
Martin Bartoš
d475c5aecc Missing Quarkus flag for Syslog counting framing (#40621)
* Missing Quarkus flag for Syslog counting framing

Closes #39893

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Remove handling of mapFrom

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Add notable change

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-06-25 17:36:41 +02:00
Pedro Ruivo
f4d5fa68c1 Update documentation about volatile sessions
Closes #40639

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-06-20 16:45:22 +00:00
burnedoutman
be57744a5f [docs] fix spelling error Update hostname.adoc
Closes #40641

Signed-off-by: burnedoutman <97279475+burnedoutman@users.noreply.github.com>
2025-06-20 16:59:21 +02:00
Alexander Schwartz
7fac1531bc Applying escaping of theme contents (#40597)
Closes #40596

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-06-19 12:03:44 -04:00
Zach Callahan
c2987ea8b4 docs(caching): clarified wording for the jgroups fd port offset
This change updates the documentation for caching to better
explain the relationship between the default jgroups failure
detection port offset and the actual port.

Closes #40564

Signed-off-by: Zach Callahan <zach@zmc.dev>
2025-06-18 06:35:36 +00:00
Gilvan Filho
e5bb7f5249 add labels and annotations to service (httpSpec) (#39925)
closes #23283

Signed-off-by: Gilvan Filho <gfilho@redhat.com>
2025-06-17 11:27:16 +02:00
Alexander Schwartz
61586ff328 Disabling persistent sessions affects also offline session cache
Closes #40483

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-06-17 08:02:28 +00:00
andymunro
75cc28a9d1 Clarify FIPS instructions
Closes #40533

Signed-off-by: AndyMunro <amunro@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-06-17 09:54:46 +02:00
Thomas Darimont
0ae49b96c3 Fix link to client-registration in docs
Fixes #40444

Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>
2025-06-13 20:59:46 +02:00
AvivGuiser
7736ca20e9 support setting periodSeconds and failureThreashold in the Keyclock CR (#40117)
* add probe spec

Signed-off-by: AvivGuiser <avivguiser@gmail.com>

* make default for probes if not configured, add skeleton test files

Signed-off-by: AvivGuiser <avivguiser@gmail.com>

* fix tests

Signed-off-by: AvivGuiser <avivguiser@gmail.com>

* fix tests

Signed-off-by: AvivGuiser <avivguiser@gmail.com>

* add docs

Signed-off-by: AvivGuiser <avivguiser@gmail.com>

* move test to unittest and apiserver test

Signed-off-by: AvivGuiser <avivguiser@gmail.com>

* adding asserts to check new fields

Signed-off-by: AvivGuiser <avivguiser@gmail.com>

* fix test

Signed-off-by: AvivGuiser <aviv.guiser@placer.ai>

* update docs

Signed-off-by: AvivGuiser <aviv.guiser@placer.ai>

---------

Signed-off-by: AvivGuiser <avivguiser@gmail.com>
Signed-off-by: AvivGuiser <aviv.guiser@placer.ai>
2025-06-13 17:32:20 +00:00
Steven Hawkins
76bc9fadcb fix: adding a -- separator for spi options (#40005)
* fix: adding a -- separator for spi options

closes: #39063

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* adding a warning for ambiguous spi options

also adding a note about the change

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
# Conflicts:
#	docs/documentation/upgrading/topics/changes/changes-26_3_0.adoc

* updating docs to the new format

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
# Conflicts:
#	docs/guides/high-availability/examples/generated/keycloak-ispn.yaml
#	docs/guides/high-availability/examples/generated/keycloak.yaml

* internally using the new spi options

also adding a deprecation notice

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Apply suggestions from code review

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* correcting options output

adding + + inlining where needed

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* adding test showing the env mapping with __

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2025-06-13 16:13:53 +02:00
Steven Hawkins
0e28bd3981 fix: adding a mapping directly from an env property to a wildcard (#39602)
* fix: adding a map directly from an env property to a wildcard

closes: #38259

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* switching unit test logic to not directly manipulate env vars

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Apply suggestions from code review

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* modifications based upon review feedback

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2025-06-13 08:26:18 +00:00
Thomas Darimont
a89be114e9 Add link to OIDC discovery specification to the docs.
Fixes #40440

Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>
2025-06-12 11:35:44 +02:00
Niko Köbler
2e7a88f052 update links to OAuth 2.1 draft spec and change link from BCP to RFC9700
closes #40419

Signed-off-by: Niko Köbler <niko@n-k.de>
2025-06-11 18:48:43 +02:00
Alexander Schwartz
74027bfbfe Remove obsolete information from the Keycloak deployment
Closes #40375

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-06-11 09:17:48 -03:00
Alexander Schwartz
4af3d7cc9d Redirect requests from outdated theme version to the current theme version
Closes #39723

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-06-11 11:13:55 +02:00
Steven Hawkins
f8ba9d3429 fix: adding docs about Keycloak CR security (#40260)
closes: #40188

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-06-06 16:47:33 +02:00
Ryan Emerson
0c62bd0878 Change discovery in Kubernetes to jdbc-ping
Closes #39544

Signed-off-by: Ryan Emerson <remerson@redhat.com>
2025-06-05 16:48:30 +02:00
SoMin Park
a115a442f4 Add warning about using exec in custom entrypoint scripts
Closes #39817

Signed-off-by: Somin Park <ps4708@naver.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-06-02 17:49:20 +02:00
Michal Hajas
88f660b235 Add experimental feature rolling-updates:v2 that allows rolling updat… (#39751)
...e for patch releases
Closes #38882
Signed-off-by: Michal Hajas <mhajas@redhat.com>
2025-05-27 11:17:42 -03:00
Pedro Ruivo
077173d24f Improve JGroups network bind address documentation (#39874)
Closes #39872

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2025-05-27 08:35:01 +00:00
Stan Silvert
b7db98383b New UI Customization Guide (#39756)
* New UI Customization Guide

Closes #33721

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

* Fix grammatical error.

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

* Minor changes.

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

* Fix typo.

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

* Added preview warning.

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

---------

Signed-off-by: Stan Silvert <ssilvert@redhat.com>
2025-05-22 08:23:34 -04:00
mposolda
fe2790a09d Fix documentation link to quickstarts to point to 'main' branch instead of 'latest' branch
closes #39798

Signed-off-by: mposolda <mposolda@gmail.com>
2025-05-19 10:32:06 +02:00
Steven Hawkins
603ecf20eb fix: adding a doc note about clean up (#39731)
closes: #39338

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-05-15 14:08:31 +02:00
Steven Hawkins
a74b60199b fix: updating the examples to bind docker/podman 8080 only to localhost (#39584)
closes: #39144

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-05-13 09:40:33 +02:00
andymunro
afe6d4d4a0 Fix callouts
Closes #39590

Signed-off-by: AndyMunro <amunro@redhat.com>
2025-05-09 14:10:59 +00:00
andymunro
1e2b0fdfc4 Edit Observability guide
Close #39572

Signed-off-by: AndyMunro <amunro@redhat.com>
2025-05-09 15:02:47 +02:00
andymunro
0b3de6ee6c Fix link to FGAP v1
Closes #39541

Signed-off-by: AndyMunro <amunro@redhat.com>
2025-05-08 09:00:40 +02:00
andymunro
eb51c03f90 Edit Operator Guide
Closes #39543

Signed-off-by: AndyMunro <amunro@redhat.com>
2025-05-08 08:45:41 +02:00
Steven Hawkins
3e05f676e5 fix: adds a warning about auto-build behavior (#38899)
also correcting the language across the warnings

closes: #38662

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-05-05 18:24:19 +02:00
andymunro
d106de4f83 Clarify podman use
Closes #39418

Signed-off-by: AndyMunro <amunro@redhat.com>
Signed-off-by: andymunro <48995441+andymunro@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-05-05 16:16:58 +02:00
Alexander Schwartz
f79408788d Document how to configure Istio to allow for JGroups mTLS
Closes #39065

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
2025-05-02 12:08:02 +00:00
Steven Hawkins
faa1c194f3 fix: remove ANY mode modification of truststores (#39366)
also note that ANY should not be used in production

closes: CVE-2025-3501 #39350 #38392



Add a test for the error (#1)



Update docs/guides/server/keycloak-truststore.adoc

Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Marek Posolda <mposolda@gmail.com>
2025-04-30 15:00:12 +00:00
Steven Hawkins
24910d9e1c addresses slow import/export performance by limiting persistence context size (#37926)
* fix: addresses slow import/export performance with more batching

closes: #37991

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* removing flush/detach manipulation

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* refining the doc note about using multiple files for larger user counts

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* adding doc note about useExistingSession method removal

and expanding javadocs

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-04-29 18:57:45 -04:00