Commit graph

650 commits

Author SHA1 Message Date
Alexander Schwartz
3b8bcd3f8a
Use quoted values for boolean and number values in Operator examples
Closes #43459

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-10-14 18:53:00 +02:00
Steven Hawkins
700b86fad8
fix: refining https-protocols documentation (#43420)
closes: #43164

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-10-14 08:01:08 -04:00
rmartinc
248d6d1feb Upgrade xmlsec to 3.0.4 and remove KeycloakFipsSecurityProvider workaround
Closes #43263

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-10-13 15:38:58 +02:00
Pedro Ruivo
48f1978531
Update docs to include PostgreSQL SSL certificate
Closes #43311

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-10-09 15:02:53 +02:00
Alexander Schwartz
94d428d450
Adding attributes for section links so they work in upstream and downstream
Closes #43286

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-10-08 11:37:13 -03:00
rmartinc
94a4e062f7 Add a debug statement when the KeycloakFipsSecurityProvider is created
Closes #43015

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-10-07 16:59:22 +02:00
Ryan Emerson
5cb0562fd2
Prevent users configuring max-count=-1 for caches with a default upper-bound
Closes #33146

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2025-10-02 19:58:28 +00:00
Pedro Ruivo
c1f108297e
Update Grafana dashboard version
Closes #43148

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-10-02 10:18:35 +02:00
Václav Muzikář
367fbdb78f
Remove a link to Docker web from the docs
Closes #43072

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2025-09-30 11:35:15 +00:00
Alexander Schwartz
37c808bd11
Reorder the release notes (#43026)
* Reorder the release notes

Closes #42994

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>

* Update docs/documentation/release_notes/topics/26_4_0.adoc

Co-authored-by: Stian Thorgersen <stian@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>

* Update docs/documentation/release_notes/topics/26_4_0.adoc

Co-authored-by: Stian Thorgersen <stian@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>

* Review

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>

* Review

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>

* Review

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>

* Review

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>

* Review

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>

* Review

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>

---------

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Stian Thorgersen <stian@redhat.com>
2025-09-30 06:47:55 +00:00
Alexander Schwartz
7bcf08fa31
Adding AWS reference to the documentation
Closes #43032

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-09-29 22:28:53 +02:00
Vít Zikmund
896f147075
docs: Use BASH TCP redirect for HEALTHCHECK (#38131)
* docs: Use BASH TCP redirect for HEALTHCHECK

Add a BASH script to perform an in-container healtcheck.

For the curious, here's how this works:

1. For the code within braces, a TCP connection is made to the keycloak's management port and a successful connection is redirected in the read-write fashion to the descriptor 0 (stdin).
   - When bash fails to connect (TCP RST), it ends up with an error right away.
   - When the connection is hanging (no reply till TCP retry timeout, usually about 1 minute), it just hangs, virtually being a subject to the HEALTHCHECK's timeout (which should be definitely smaller than the usual TCP retry timeout).
2. Then a simple hand-crafted HTTP HEAD request is sent to the socket using printf. This is supposed to always succeed, unless the send buffer of the socket is set ridiculously small on the target OS. In the other case it will just hang again, not being able to push all the bytes through, until that eventually happens or times out.
3. Next, the eventual response is being checked with grep to be the successful one. Only at this time it's return code (and the final) is 0.
   - When no response comes, it's hanging forever and is subject to timeout.
   - When a 503 response comes, grep doesn't match anything and returns 1.

Closes: #38126

Signed-off-by: Vit Zikmund <vit.zikmund@themama.ai>

* expanding bash healthcheck for scenarios that enable http health checks

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/observability/health.adoc

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* Update docs/guides/observability/health.adoc

Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* Update docs/guides/observability/health.adoc

Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Vit Zikmund <vit.zikmund@themama.ai>
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-09-29 18:04:02 +02:00
rmartinc
a44758d4ae Upgrade bc-fips testing and documentation to 2.1.2
Closes #42958

Signed-off-by: rmartinc <rmartinc@redhat.com>
2025-09-29 09:04:43 +02:00
Takashi Norimatsu
1649f8c847
Follow-up: FAPI 2.0 Message Signing final version support - updating the link to the final spec
closes #42499

Signed-off-by: Takashi Norimatsu <takashi.norimatsu.ws@hitachi.com>
2025-09-29 08:52:27 +02:00
Václav Muzikář
97ab82e483
Mark Azure SQL as supported (#42985)
Closes #42743

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2025-09-29 08:31:08 +02:00
Martin Bartoš
f53e5ebdac
[Docs] Additional datasources support (#42655)
* [Docs] Additional datasources support

Closes #40388

Closes #42263

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Rename namedKey to wildcardKey in the code

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Clarify the defaults for DB kind

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Be more clear about the Named key reference in guide

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Vasek's review

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2025-09-27 08:45:12 +00:00
Václav Muzikář
b65a60e40d
Support for EDB 17 (#42341)
Closes #42742
Closes #42293

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
2025-09-26 16:04:47 +02:00
Pedro Ruivo
746a8211ff
Update documentation to prefer CacheCR in multi-site
Closes #42980

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-09-26 11:06:28 +00:00
Pedro Ruivo
56c1823082
Document Caffeine cache metrics
Closes #42705

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-09-25 12:55:31 +02:00
Ryan Emerson
93ede306f5
Refine high-availability guide wording
Closes #42869

Signed-off-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
2025-09-23 10:14:49 +00:00
Pedro Ruivo
47f85631f3
Automatically create external caches for MULTI_SITE deployments
Closes #32129

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-09-19 18:56:38 +02:00
Ryan Emerson
bda79de605
Update docs to reflect that Operator ClusterRoleBinding contains hardcoded namespace
- Added missing labels to Operator roles

Closes #42678

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2025-09-19 17:27:26 +02:00
Pedro Ruivo
f9ec39bc5f
Update tested load numbers
Closes #42757

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Pedro Ruivo <pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-19 15:42:17 +02:00
Steven Hawkins
327e9a9207
fix: adding supported database versions (#42562)
closes: #42294

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-18 17:34:20 +02:00
Stan Silvert
f99c91291c
Remove duplicated themes documentation. (#42571)
* Remove duplicated themes documentation.

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

* Move Theme SPI documentation to Themes Guide

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

* Fix link so test will pass.

Fixes #42396

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

* Fix broken links.

Closes #42396

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

* Fix broken link.

Closes #42396

Signed-off-by: Stan Silvert <ssilvert@redhat.com>

---------

Signed-off-by: Stan Silvert <ssilvert@redhat.com>
2025-09-18 10:31:52 +02:00
Marek Posolda
d9d19791a4
Clarifying OIDC logout documentation. Removing obsolete unused docs p… (#42636)
closes #41792


Signed-off-by: mposolda <mposolda@gmail.com>
Signed-off-by: Marek Posolda <mposolda@gmail.com>
Co-authored-by: andymunro <48995441+andymunro@users.noreply.github.com>
2025-09-16 17:37:42 +02:00
Steven Hawkins
e9bf3bc2f8
fix: updating docs related to the number of executor threads
closes: #39342

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-16 17:02:15 +02:00
Steven Hawkins
26597c2d9a
fix: adding docs about mTLS and probes (#42561)
closes: #42191

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-09-16 16:30:37 +02:00
Ryan Emerson
728118d62a
Validate wait_timeout parameter on MySQL and MariaDB
Closes #42300

Signed-off-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-16 09:38:52 +00:00
Ryan Emerson
6e7a836c96
Create default ServiceMonitor with Operator
Closes #40406

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2025-09-16 10:57:35 +02:00
Steven Hawkins
ae1e1d3cc3
fix: allows for schedulings to be defined for operator jobs (#42310)
* fix: allows for schedulings to be defined for operator jobs

closes: #42057

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/operator/advanced-configuration.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
2025-09-10 16:28:12 +00:00
Takashi Norimatsu
91fa1fe6b1 FAPI 2.0 Message Signing Final - Documentation
closes #41313

Signed-off-by: Takashi Norimatsu <takashi.norimatsu.ws@hitachi.com>
2025-09-10 09:32:23 +02:00
Ryan Emerson
a3c95a2a34
Document tested and supported configurations for single-cluster deployments
Closes #42304

Signed-off-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-09 19:49:22 +00:00
Takashi Norimatsu
d740c0f3db FAPI 2.0 Security Profile Final - Add FAPI 2.0 Final security profile as default profile of client policies
closes #41120

Signed-off-by: Takashi Norimatsu <takashi.norimatsu.ws@hitachi.com>
2025-09-08 17:23:53 +02:00
Ryan Emerson
05e731f098
Fix broken HA guide links
Closes #42426

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2025-09-08 14:20:08 +02:00
Eugen Stan
c0537cbbe8
Specify link to where containers are published in start-keycloak-container.adoc
Closes #42392

Signed-off-by: Eugen Stan <eugen@ieugen.ro>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-05 15:21:33 +00:00
Ryan Emerson
17684f8011
Remove usage of the term stretched from single-cluster HA guides
Closes #42358

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2025-09-05 15:49:19 +02:00
Alexander Schwartz
78dce37197 Update documentation after changes to RFC8414 handling
Closes #42323

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-09-05 10:28:32 -03:00
Ryan Emerson
4fec0a8630
Document that single-cluster deployments expect all Keycloak instances to serve traffic
Closes #42305

Signed-off-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
2025-09-03 18:30:13 +02:00
Alexander Schwartz
665f4140da
Adding missing docs for 26.4 release notes
Closes #42252

Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Vinod Anandan <vinod@owasp.org>
2025-09-02 17:47:12 -03:00
Pedro Ruivo
f4ec4cff1a
Configure topology information in Infinispan
Closes #41933

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
2025-09-01 14:40:39 +02:00
Alexander Schwartz
1eba022149
Document network latency requirements for high available setups
Closes #42186

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
2025-08-28 23:46:20 +02:00
Steven Hawkins
e891336167
fix: expands our warnings/notes around placeholder usage (#42151)
addresses CVE-2025-9162

closes: #42046

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-08-28 17:06:55 +02:00
Steven Hawkins
183a96d6a1
enhance: adding the ability to set truststores via configmaps (#41796)
closes: #34114

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-08-28 16:55:52 +02:00
Steven Hawkins
565e195f48
enhance: allow for control over what port health checks are exposed on (#41759)
closes: #39506

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
2025-08-28 10:18:22 +02:00
Martin Bartoš
6149d66405
Update screenshot for traces in Jaeger (#42036)
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
2025-08-21 13:17:20 +02:00
Pedro Ruivo
2f131fa56c
Detect and handle KC split brain clusters
Closes #41561

Signed-off-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Signed-off-by: Pedro Ruivo <pruivo@users.noreply.github.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Pedro Ruivo <1492066+pruivo@users.noreply.github.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
2025-08-21 11:18:34 +02:00
Ryan Emerson
481555c97e
Define default topologySpreadConstraints
Closes #41729

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2025-08-20 13:58:37 +02:00
Ryan Emerson
cd42a503d2
Update observability metrics guides to reference single and multi-cluster architectures
Closes #41938

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2025-08-20 13:31:52 +02:00
Ryan Emerson
b0f4b4efee
Log applied cache configurations as part of debug logs
Closes #41950

Signed-off-by: Ryan Emerson <remerson@ibm.com>
2025-08-19 17:01:19 +02:00