Commit Graph

227 Commits

Author SHA1 Message Date
Ryan Emerson
82dc98a0d9 Document configuration changes that prevent rolling updates
Closes #41214

Signed-off-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-07-22 10:38:11 +00:00
SoMin Park
0ebf87920b docs: hide Containerfile note in product docs
Closes #41029

Signed-off-by: Somin Park <ps4708@naver.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-07-17 15:02:00 +00:00
Martin Bartoš
0b402f47fe Fix typo for MDC enabled property in logging guide (#41212)
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-07-17 09:05:36 +02:00
SoMin Park
0d71b4ebe8 DOC: Explain Containerfile usage and fix docker build example (#41213)
Closes #41029

Signed-off-by: Somin Park <ps4708@naver.com>
2025-07-17 08:28:15 +02:00
Björn Eickvonder
d62d5030fe Adds log context information for MDC for realm, users, etc.
Closes #39812

Signed-off-by: Björn Eickvonder <b.eicki@gmx.net>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Bjoern Eickvonder <bjoern.eickvonder@inform-software.com>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-07-16 17:46:46 +02:00
Steven Hawkins
be6ba05444 fix: using unversioned key in docs (#41142)
closes: #40959

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-07-14 18:11:24 +02:00
Steven Hawkins
2397ff9b8e fix: providing a single property to declare management interface as http (#41089)
closes: #40945

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-07-14 12:54:22 +02:00
Pedro Ruivo
9322d71d61 UserSession Offline removed from DB if not in cache
Fixes #40754

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-07-07 20:52:06 +02:00
Alexander Schwartz
0077b27c1f Update documentation when no rolling update is performed
Closes #40962

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-07-07 17:50:02 +02:00
Ryan Emerson
eb7ce6ae15 Provide CLI Parameters for jgroups.* options
Closes #40481

Signed-off-by: Ryan Emerson <remerson@redhat.com>
2025-07-07 13:07:45 +02:00
Alexander Schwartz
05d0c34681 Automatically connect to a writer instance of PostgreSQL (#40384)
Closes #40383

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2025-07-04 16:46:49 +02:00
Steven Hawkins
3760e726cd fix: map just logging env wildcards to . (#40834)
* fix: map just logging env wildcards to .

closes: #40833

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* updates based upon review comments

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-07-02 10:06:29 +02:00
Steven Hawkins
2b44c5676f fix: adding logic to isolate realm migration processing (#39377)
* fix: adding logic to isolate realm migration processing

also adding an info log for each realm migrated

closes: #33978 #38649

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* switching to an export strategy tolerant to read committed

also preventing creating cached users during export

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* updating the docs to still recommend shutting the server down for export

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* accounting for null managed users

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* refinements based upon review comments

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Scaling back the docs

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>

* Remove rogue release note

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Václav Muzikář <vmuzikar@redhat.com>
2025-06-30 08:31:57 -04:00
Michal Hajas
d944823277 Make rolling-updates-v2 preview feature (#40732)
Closes #38883
Signed-off-by: Michal Hajas <mhajas@redhat.com>
2025-06-26 19:28:35 +02:00
Martin Bartoš
d475c5aecc Missing Quarkus flag for Syslog counting framing (#40621)
* Missing Quarkus flag for Syslog counting framing

Closes #39893

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Remove handling of mapFrom

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Add notable change

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-06-25 17:36:41 +02:00
Pedro Ruivo
f4d5fa68c1 Update documentation about volatile sessions
Closes #40639

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-06-20 16:45:22 +00:00
burnedoutman
be57744a5f [docs] fix spelling error Update hostname.adoc
Closes #40641

Signed-off-by: burnedoutman <97279475+burnedoutman@users.noreply.github.com>
2025-06-20 16:59:21 +02:00
Zach Callahan
c2987ea8b4 docs(caching): clarified wording for the jgroups fd port offset
This change updates the documentation for caching to better
explain the relationship between the default jgroups failure
detection port offset and the actual port.

Closes #40564

Signed-off-by: Zach Callahan <zach@zmc.dev>
2025-06-18 06:35:36 +00:00
Alexander Schwartz
61586ff328 Disabling persistent sessions affects also offline session cache
Closes #40483

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-06-17 08:02:28 +00:00
andymunro
75cc28a9d1 Clarify FIPS instructions
Closes #40533

Signed-off-by: AndyMunro <amunro@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-06-17 09:54:46 +02:00
Steven Hawkins
76bc9fadcb fix: adding a -- separator for spi options (#40005)
* fix: adding a -- separator for spi options

closes: #39063

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* adding a warning for ambiguous spi options

also adding a note about the change

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
# Conflicts:
#	docs/documentation/upgrading/topics/changes/changes-26_3_0.adoc

* updating docs to the new format

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
# Conflicts:
#	docs/guides/high-availability/examples/generated/keycloak-ispn.yaml
#	docs/guides/high-availability/examples/generated/keycloak.yaml

* internally using the new spi options

also adding a deprecation notice

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Apply suggestions from code review

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* correcting options output

adding + + inlining where needed

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* adding test showing the env mapping with __

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2025-06-13 16:13:53 +02:00
Steven Hawkins
0e28bd3981 fix: adding a mapping directly from an env property to a wildcard (#39602)
* fix: adding a map directly from an env property to a wildcard

closes: #38259

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* switching unit test logic to not directly manipulate env vars

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Apply suggestions from code review

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* modifications based upon review feedback

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2025-06-13 08:26:18 +00:00
Alexander Schwartz
4af3d7cc9d Redirect requests from outdated theme version to the current theme version
Closes #39723

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-06-11 11:13:55 +02:00
Ryan Emerson
0c62bd0878 Change discovery in Kubernetes to jdbc-ping
Closes #39544

Signed-off-by: Ryan Emerson <remerson@redhat.com>
2025-06-05 16:48:30 +02:00
SoMin Park
a115a442f4 Add warning about using exec in custom entrypoint scripts
Closes #39817

Signed-off-by: Somin Park <ps4708@naver.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-06-02 17:49:20 +02:00
Michal Hajas
88f660b235 Add experimental feature rolling-updates:v2 that allows rolling updat… (#39751)
...e for patch releases
Closes #38882
Signed-off-by: Michal Hajas <mhajas@redhat.com>
2025-05-27 11:17:42 -03:00
Pedro Ruivo
077173d24f Improve JGroups network bind address documentation (#39874)
Closes #39872

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
2025-05-27 08:35:01 +00:00
Steven Hawkins
a74b60199b fix: updating the examples to bind docker/podman 8080 only to localhost (#39584)
closes: #39144

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-05-13 09:40:33 +02:00
andymunro
afe6d4d4a0 Fix callouts
Closes #39590

Signed-off-by: AndyMunro <amunro@redhat.com>
2025-05-09 14:10:59 +00:00
Steven Hawkins
3e05f676e5 fix: adds a warning about auto-build behavior (#38899)
also correcting the language across the warnings

closes: #38662

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-05-05 18:24:19 +02:00
andymunro
d106de4f83 Clarify podman use
Closes #39418

Signed-off-by: AndyMunro <amunro@redhat.com>
Signed-off-by: andymunro <48995441+andymunro@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-05-05 16:16:58 +02:00
Alexander Schwartz
f79408788d Document how to configure Istio to allow for JGroups mTLS
Closes #39065

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Pedro Ruivo <pruivo@users.noreply.github.com>
2025-05-02 12:08:02 +00:00
Steven Hawkins
faa1c194f3 fix: remove ANY mode modification of truststores (#39366)
also note that ANY should not be used in production

closes: CVE-2025-3501 #39350 #38392



Add a test for the error (#1)



Update docs/guides/server/keycloak-truststore.adoc

Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Marek Posolda <mposolda@gmail.com>
2025-04-30 15:00:12 +00:00
Steven Hawkins
24910d9e1c addresses slow import/export performance by limiting persistence context size (#37926)
* fix: addresses slow import/export performance with more batching

closes: #37991

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* removing flush/detach manipulation

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* refining the doc note about using multiple files for larger user counts

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* adding doc note about useExistingSession method removal

and expanding javadocs

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-04-29 18:57:45 -04:00
Steven Hawkins
68096ee27e fix: documenting known issues with docker (#39162)
* fix: documenting known issues with docker

closes: #38801 #38893

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/server/containers.adoc

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2025-04-25 11:21:04 +02:00
andymunro
75557bc312 Adjust introductory sentences
Closes #39008

Signed-off-by: AndyMunro <amunro@redhat.com>
2025-04-25 09:18:04 +02:00
Martin Bartoš
60fb7a5fa7 Support asynchronous logging (#38094)
Closes #38578

Closes #28851

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-04-16 15:08:15 +00:00
sophie [⛧-440729]
d1ff1b186e add option to the nginx x509 client cert lookup provider to not url-decode the passed client cert
Closes #17171 

Signed-off-by: ⛧-440729 [sophie] <sophie@999eagle.moe>
2025-04-11 10:38:38 +02:00
Alexander Schwartz
73ee966feb Sorting the chapters of the HA guide
Closes #38721

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-04-08 07:23:53 -03:00
Alexander Schwartz
38b543af19 Review comments to align with style guide
Closes #38338

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-04-05 14:04:21 -03:00
Akbar Husain
6d2de61b8e Fix some ascii doc warnings
Closes #38479

Signed-off-by: akbarhusainpatel <apatel@intermiles.com>
Co-authored-by: akbarhusainpatel <apatel@intermiles.com>
2025-03-27 19:42:18 +01:00
Peter Zaoral
1d6ef3c7a7 [Windows] Improve docs on handling quotes in PowerShell (#37468)
Closes: #36697

Signed-off-by: Peter Zaoral <pzaoral@redhat.com>
2025-03-27 17:00:15 +01:00
Alexander Schwartz
c9b88c6bf6 Finalizing release notes and documentation for initial rolling update
Closes #38168

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-03-19 21:34:09 +01:00
Alexander Schwartz
d4054032a6 Fix broken link to configuration for production
Closes #38152

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-03-17 09:31:50 -03:00
Steven Hawkins
d9c3511fa5 fix: adding a check if the proxy is trusted prior to using a cert header (#37465)
closes: #35861

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
2025-03-12 11:21:33 +01:00
Alexander Schwartz
bc7ec1208e Enable the TLS based JGroups encryption by default and update the docs
Closes #37696

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-03-03 10:50:51 -03:00
Pedro Ruivo
f7e21af82e JGroups certificate rotation
Closes #37316

Signed-off-by: Pedro Ruivo <pruivo@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-02-27 12:56:18 +01:00
Martin Bartoš
6f0ed46404 Upgrade to Quarkus 3.19.0.CR1 (#37492)
Closes #37436

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-02-24 19:52:01 +01:00
Steven Hawkins
a819a213f9 fix: hardening to prevent usage of proxy-protocol with proxy-headers (#37463)
* fix: hardening to prevent usage of proxy-protocol with proxy-headers

closes: #37458

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/server/reverseproxy.adoc

Co-authored-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
2025-02-24 14:48:06 +01:00
Martin Bartoš
324757316b Improve docs about JPA provider configuration for DB migration strategy (#37080)
Closes #37079

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-02-14 17:54:26 +01:00