middleware_automation.keycloak Release Notes
+middleware_automation.keycloak Release Notes
Topics
-
-
- +
middleware_automation.keycloak Release Notes
-
-
- -
- +
- -
- +
- -
- +
- -
- +
- + +
- +
This changelog describes changes after version 0.2.6.
v1.0.4
+v1.0.4
+Minor Changes
+-
+
Update config options: keycloak and quarkus #32
+
v1.0.3
+v1.0.3
Major Changes
+Major Changes
New role for installing keycloak >= 17.0.0 (quarkus) #29
Minor Changes
+Minor Changes
Add
keycloak_config_override_templateparameter for passing a custom xml config template #30
Bugfixes
+Bugfixes
Make sure systemd unit starts with selected java JVM #31
v1.0.2
-Minor Changes
+v1.0.2
+Minor Changes
Bugfixes
+Bugfixes
Set
keycloak_frontend_urldefault according to other defaults #25
v1.0.1
+v1.0.1
Release Summary
+Release Summary
Minor enhancements, bug and documentation fixes.
Major Changes
+Major Changes
Apply latest cumulative patch of RH-SSO automatically when new parameter
keycloak_rhsso_apply_patchesistrue#18
Minor Changes
+Minor Changes
Clustered installs now perform database initialization on first node to avoid locking issues #17
v1.0.0
-Release Summary
+v1.0.0
+Release Summary
This is the first stable release of the middleware_automation.keycloak collection.
Role Defaults
-
+
Installation options
+
Variable |
+Description |
+Default |
+
|---|---|---|
|
+keycloak.org package version |
+
|
+
Service configuration
jgroups cluster tcp port |
|
-|
|
-Additional JVM options |
-
|
-
|
+||
|
Posix account username |
|
|
+||
|
Posix account group |
|
|
+||
|
Pid file path for service |
|
|
+||
|
RHEL java package runtime |
|
|
+||
|
+JAVA_HOME of installed JRE, leave empty for using specified keycloak_quarkus_jvm_package RPM path |
+
|
+
|
+Additional JVM options |
+
|
+
|
Service public URL |
|
|
+||
|
Service context path |
|
|
+Enable listener on HTTP port |
+
|
+
|
+Enable listener on HTTPS port |
+
|
+
|
+The file path to a private key in PEM format |
+
|
+
|
+The file path to a server certificate or certificate chain in PEM format |
+
|
+
-
@@ -298,42 +335,66 @@
Whether to enable metrics
False
keycloak_quarkus_archive
keycloak_quarkus_health_enabled
If the server should expose health check endpoints
True
keycloak_quarkus_archive
keycloak install archive filename
keycloak-{{ keycloak_quarkus_version }}.zip
keycloak_quarkus_installdir
keycloak_quarkus_installdir
Installation path
{{ keycloak_quarkus_dest }}/keycloak-{{ keycloak_quarkus_version }}
keycloak_quarkus_home
keycloak_quarkus_home
Installation work directory
{{ keycloak_quarkus_installdir }}
keycloak_quarkus_config_dir
keycloak_quarkus_config_dir
Path for configuration
{{ keycloak_quarkus_home }}/conf
keycloak_quarkus_master_realm
keycloak_quarkus_master_realm
Name for rest authentication realm
master
keycloak_auth_client
keycloak_auth_client
Authentication client for configuration REST calls
admin-cli
keycloak_force_install
keycloak_force_install
Remove pre-existing versions of service
False
keycloak_url
keycloak_url
URL for configuration rest calls
http://{{ keycloak_quarkus_host }}:{{ keycloak_http_port }}
keycloak_management_url
keycloak_management_url
URL for management console rest calls
http://{{ keycloak_quarkus_host }}:{{ keycloak_management_http_port }}
keycloak_quarkus_log
Enable one or more log handlers in a comma-separated list
file
keycloak_quarkus_log_level
The log level of the root category or a comma-separated list of individual categories and their levels
info
keycloak_quarkus_log_file
Set the log file path and filename relative to keycloak home
data/log/keycloak.log
keycloak_quarkus_log_format
Set a format specific to file log entries
%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n
keycloak_quarkus_proxy_mode
The proxy address forwarding mode if the server is behind a reverse proxy
edge
Variable
Description
Required
keycloak_quarkus_admin_pass
Password of console admin account
yes
hostname
localhost
keycloak_http_port
keycloak_context
Context path for rest calls
/auth
keycloak_http_port
HTTP port
8080
keycloak_https_port
keycloak_https_port
TLS HTTP port
8443
keycloak_auth_realm
keycloak_auth_realm
Name of the main authentication realm
master
keycloak_rhsso_enable
keycloak_rhsso_enable
Define service is an upstream(Keycloak) or RHSSO
master
keycloak_management_http_port
keycloak_management_http_port
Management port
9990
keycloak_auth_client
keycloak_auth_client
Authentication client for configuration REST calls
admin-cli
keycloak_client_public
keycloak_client_public
Configure a public realm client
True
keycloak_client_web_origins
keycloak_client_web_origins
Web origins for realm client
+
keycloak_url
keycloak_url
URL for configuration rest calls
http://{{ keycloak_host }}:{{ keycloak_http_port }}
keycloak_management_url
keycloak_management_url
URL for management console rest calls
http://{{ keycloak_host }}:{{ keycloak_management_http_port }}