middleware_automation.keycloak Release Notes
+middleware_automation.keycloak Release Notes
This changelog describes changes after version 0.2.6.
v2.4.4-devel
+v2.4.4-devel
Minor Changes
+Minor Changes
Add theme cache invalidation handler #252
Breaking Changes / Porting Guide
+-
+
Role support for keycloak/RHBK v26 #254
+
Bugfixes
+Bugfixes
v2.4.3
-Minor Changes
+v2.4.3
+Minor Changes
Update keycloak to 24.0.5 #241
v2.4.2
-Minor Changes
+v2.4.2
+Minor Changes
New parameter
keycloak_quarkus_download_path#239
Bugfixes
+Bugfixes
Add wait_for_port number parameter #237
v2.4.1
+v2.4.1
Release Summary
+Release Summary
Internal release, documentation or test changes only.
v2.4.0
+v2.4.0
Major Changes
+Major Changes
v2.3.0
-Major Changes
+v2.3.0
+Major Changes
Minor Changes
+Minor Changes
Bugfixes
+Bugfixes
kc.sh builduses configured jdk #211
v2.2.2
-Minor Changes
+v2.2.2
+Minor Changes
Bugfixes
+Bugfixes
Turn off controller privilege escalation #209
v2.2.1
-Release Summary
+v2.2.1
+Release Summary
Internal release, documentation or test changes only.
Bugfixes
+Bugfixes
JDBC provider: fix clause in argument validation #204
v2.2.0
-Major Changes
+v2.2.0
+Major Changes
Support java keystore for configuration of sensitive options #189
Minor Changes
+Minor Changes
v2.1.2
-Release Summary
+v2.1.2
+Release Summary
Internal release, documentation or test changes only.
v2.1.1
-Minor Changes
+v2.1.1
+Minor Changes
Bugfixes
+Bugfixes
v2.1.0
-Major Changes
+v2.1.0
+Major Changes
Implement infinispan TCPPING discovery protocol #159
Minor Changes
+Minor Changes
Breaking Changes / Porting Guide
+Breaking Changes / Porting Guide
keycloak_quarkus: renamed infinispan host list configuration #157
Bugfixes
+Bugfixes
keycloak_quarkus: fix custom JAVA_HOME parameter name #171
v2.0.2
-Minor Changes
+v2.0.2
+Minor Changes
Bugfixes
+Bugfixes
v2.0.1
-Minor Changes
+v2.0.1
+Minor Changes
Bugfixes
+Bugfixes
keycloak_quarkus: template requires lowercase boolean values #138
v2.0.0
-Minor Changes
+v2.0.0
+Minor Changes
Breaking Changes / Porting Guide
+Breaking Changes / Porting Guide
v1.3.0
-Major Changes
+v1.3.0
+Major Changes
Run service as
keycloak_service_user#106
Minor Changes
+Minor Changes
Bugfixes
+Bugfixes
keycloak_quarkus: fix validation failure upon port configuration change #113
v1.2.8
-Minor Changes
+v1.2.8
+Minor Changes
Bugfixes
+Bugfixes
v1.2.7
-Minor Changes
+v1.2.7
+Minor Changes
v1.2.6
-Minor Changes
+v1.2.6
+Minor Changes
Bugfixes
+Bugfixes
Handle WFLYCTL0117 when background validation millis is 0 #90
v1.2.5
-Minor Changes
+v1.2.5
+Minor Changes
v1.2.4
-Minor Changes
+v1.2.4
+Minor Changes
Bugfixes
+Bugfixes
v1.2.1
-Minor Changes
+v1.2.1
+Minor Changes
Allow to setup keycloak HA cluster without remote cache store #68
Bugfixes
+Bugfixes
Pass attributes to realm clients #69
v1.2.0
-Major Changes
+v1.2.0
+Major Changes
Provide config for multiple modcluster proxies #60
Minor Changes
+Minor Changes
v1.1.1
-Bugfixes
+v1.1.1
+Bugfixes
keycloak-quarkus: fix
cache-config-filepath in keycloak.conf.j2 template #53
v1.1.0
-Minor Changes
+v1.1.0
+Minor Changes
Breaking Changes / Porting Guide
+Breaking Changes / Porting Guide
Rename variables from
infinispan_prefix tokeycloak_infinispan_#42
Bugfixes
+Bugfixes
keycloak_quarkus: fix /var/log/keycloak symlink to keycloak log directory #44
v1.0.7
-Breaking Changes / Porting Guide
+v1.0.7
+Breaking Changes / Porting Guide
keycloak_quarkus: use absolute path for certificate files #39
Bugfixes
+Bugfixes
keycloak_quarkus: use become for tasks that will otherwise fail #38
v1.0.6
-Bugfixes
+v1.0.6
+Bugfixes
v1.0.5
-Minor Changes
+v1.0.5
+Minor Changes
Update config options: keycloak and quarkus #32
v1.0.4
-Release Summary
+v1.0.4
+Release Summary
Internal release, documentation or test changes only.
v1.0.3
-Major Changes
+v1.0.3
+Major Changes
New role for installing keycloak >= 17.0.0 (quarkus) #29
Minor Changes
+Minor Changes
Add
keycloak_config_override_templateparameter for passing a custom xml config template #30
Bugfixes
+Bugfixes
Make sure systemd unit starts with selected java JVM #31
v1.0.2
-Minor Changes
+v1.0.2
+Minor Changes
Bugfixes
+Bugfixes
Set
keycloak_frontend_urldefault according to other defaults #25
v1.0.1
-Release Summary
+v1.0.1
+Release Summary
Minor enhancements, bug and documentation fixes.
Major Changes
+Major Changes
Apply latest cumulative patch of RH-SSO automatically when new parameter
keycloak_rhsso_apply_patchesistrue#18
Minor Changes
+Minor Changes
Clustered installs now perform database initialization on first node to avoid locking issues #17
v1.0.0
-Release Summary
+v1.0.0
+Release Summary
This is the first stable release of the middleware_automation.keycloak collection.
keycloak_quarkus_version
keycloak.org package version
24.0.5
26.0.7
keycloak_quarkus_offline_install
Perform an offline install
keycloak_quarkus_admin_user
keycloak_quarkus_bootstrap_admin_user
Administration console user account
admin
keycloak_quarkus_bind_address
keycloak_quarkus_admin_user
Deprecated, use keycloak_quarkus_bootstrap_admin_user instead.
keycloak_quarkus_bind_address
Address for binding service ports
0.0.0.0
keycloak_quarkus_host
Hostname for the Keycloak server
localhost
keycloak_quarkus_port
The port used by the proxy when exposing the hostname
-1
keycloak_quarkus_path
This should be set if proxy uses a different context-path for Keycloak
keycloak_quarkus_host
Deprecated, use keycloak_quarkus_hostname instead.
keycloak_quarkus_http_port
keycloak_quarkus_port
Deprecated, use keycloak_quarkus_hostname instead.
keycloak_quarkus_path
Deprecated, use keycloak_quarkus_hostname instead.
keycloak_quarkus_http_port
HTTP listening port
8080
keycloak_quarkus_https_port
keycloak_quarkus_https_port
TLS HTTP listening port
8443
keycloak_quarkus_http_management_port
Port of the management interface. Relevant only when something is exposed on the management interface - see the guide for details.
9000
keycloak_quarkus_ajp_port
AJP port
8009
keycloak_quarkus_jvm_package
RHEL java package runtime
java-17-openjdk-headless
java-21-openjdk-headless
keycloak_quarkus_java_home
JAVA_HOME of installed JRE, leave empty for using specified keycloak_quarkus_jvm_package RPM path
List of additional env variables of { key: str, value: str} to be put in sysconfig file
[]
keycloak_quarkus_frontend_url
Set the base URL for frontend URLs, including scheme, host, port and path
keycloak_quarkus_hostname
Address at which is the server exposed. Can be a full URL, or just a hostname. When only hostname is provided, scheme, port and context path are resolved from the request.
keycloak_quarkus_frontend_url
Deprecated, use keycloak_quarkus_hostname instead.
keycloak_quarkus_admin
Set the base URL for accessing the administration console, including scheme, host, port and path
keycloak_quarkus_admin_url
Set the base URL for accessing the administration console, including scheme, host, port and path
Deprecated, use keycloak_quarkus_admin instead.
keycloak_quarkus_http_relative_path
Set the path relative to / for serving resources. The path must start with a /
/
keycloak_quarkus_http_enabled
keycloak_quarkus_http_management_relative_path
Set the path relative to / for serving resources from management interface. The path must start with a /. If not given, the value is inherited from HTTP options. Relevant only when something is exposed on the management interface - see the guide for details.
/
keycloak_quarkus_http_enabled
Enable listener on HTTP port
True
keycloak_quarkus_health_check_url
Full URL (including scheme, host, path, fragment etc.) used for health check endpoint; keycloak_quarkus_hostname will NOT be prepended; helpful when health checks should happen against http port, but keycloak_quarkus_hostname uses https scheme per default
``
keycloak_quarkus_health_check_url_path
Path to the health check endpoint; scheme, host and keycloak_quarkus_http_relative_path will be prepended automatically
Path to the health check endpoint; keycloak_quarkus_hostname will be prepended automatically; Note that keycloak_quarkus_health_check_url takes precedence over this property
realms/master/.well-known/openid-configuration
keycloak_quarkus_https_key_file_enabled
Disables dynamically resolving the hostname from request headers
true
keycloak_quarkus_hostname_strict_backchannel
By default backchannel URLs are dynamically resolved from request headers to allow internal and external applications. If all applications use the public URL this option should be enabled.
keycloak_quarkus_hostname_backchannel_dynamic
Enables dynamic resolving of backchannel URLs, including hostname, scheme, port and context path. Set to true if your application accesses Keycloak via a private network. If set to true, hostname option needs to be specified as a full URL.
false
keycloak_quarkus_hostname_strict_backchannel
Deprecated, use (the inverted!)keycloak_quarkus_hostname_backchannel_dynamic instead.
False
keycloak_quarkus_health_enabled
If the server should expose health check endpoints
If the server should expose health check endpoints on the management interface
True
keycloak_quarkus_archive
Remove pre-existing versions of service
False
keycloak_url
URL for configuration rest calls
http://{{ keycloak_quarkus_host }}:{{ keycloak_http_port }}
keycloak_quarkus_log
keycloak_quarkus_log
Enable one or more log handlers in a comma-separated list
file
keycloak_quarkus_log_level
keycloak_quarkus_log_level
The log level of the root category or a comma-separated list of individual categories and their levels
info
keycloak_quarkus_log_file
keycloak_quarkus_log_file
Set the log file path and filename relative to keycloak home
data/log/keycloak.log
keycloak_quarkus_log_format
keycloak_quarkus_log_format
Set a format specific to file log entries
%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n
keycloak_quarkus_log_target
keycloak_quarkus_log_target
Set the destination of the keycloak log folder link
/var/log/keycloak
keycloak_quarkus_log_max_file_size
keycloak_quarkus_log_max_file_size
Set the maximum log file size before a log rotation happens; A size configuration option recognises string in this format (shown as a regular expression): [0-9]+[KkMmGgTtPpEeZzYy]?. If no suffix is given, assume bytes.
10M
keycloak_quarkus_log_max_backup_index
keycloak_quarkus_log_max_backup_index
Set the maximum number of archived log files to keep”
10
keycloak_quarkus_log_file_suffix
keycloak_quarkus_log_file_suffix
Set the log file handler rotation file suffix. When used, the file will be rotated based on its suffix; Note: If the suffix ends with .zip or .gz, the rotation file will also be compressed.
.yyyy-MM-dd.zip
keycloak_quarkus_proxy_mode
keycloak_quarkus_proxy_mode
The proxy address forwarding mode if the server is behind a reverse proxy
edge
keycloak_quarkus_start_dev
keycloak_quarkus_start_dev
Whether to start the service in development mode (start-dev)
False
keycloak_quarkus_transaction_xa_enabled
keycloak_quarkus_transaction_xa_enabled
Whether to use XA transactions
True
keycloak_quarkus_spi_sticky_session_encoder_infinispan_should_attach_route
keycloak_quarkus_spi_sticky_session_encoder_infinispan_should_attach_route
If the route should be attached to cookies to reflect the node that owns a particular session. If false, route is not attached to cookies and we rely on the session affinity capabilities from reverse proxy
True
keycloak_quarkus_show_deprecation_warnings
keycloak_quarkus_show_deprecation_warnings
Whether deprecation warnings should be shown
True
keycloak_quarkus_admin_pass
keycloak_quarkus_bootstrap_admin_password
Password of console admin account
yes
keycloak_quarkus_frontend_url
keycloak_quarkus_admin_pass
Deprecated, use keycloak_quarkus_bootstrap_admin_password instead.
keycloak_quarkus_frontend_url
Base URL for frontend URLs, including scheme, host, port and path
no
keycloak_quarkus_admin_url
keycloak_quarkus_admin_url
Base URL for accessing the administration console, including scheme, host, port and path
no
keycloak_quarkus_ks_vault_pass
keycloak_quarkus_ks_vault_pass
The password for accessing the keystore vault SPI
no
keycloak_quarkus_alternate_download_url
keycloak_quarkus_alternate_download_url
Alternate location with optional authentication for downloading RHBK
no
keycloak_quarkus_download_user
keycloak_quarkus_download_user
Optional username for http authentication
no*
keycloak_quarkus_download_pass
keycloak_quarkus_download_pass
Optional password for http authentication
no*
keycloak_quarkus_download_validate_certs
keycloak_quarkus_download_validate_certs
Whether to validate certs for URL keycloak_quarkus_alternate_download_url
no
keycloak_quarkus_jdbc_download_user
keycloak_quarkus_jdbc_download_user
Optional username for http authentication
no*
keycloak_quarkus_jdbc_download_pass
keycloak_quarkus_jdbc_download_pass
Optional password for http authentication
no*
keycloak_quarkus_jdbc_download_validate_certs
keycloak_quarkus_jdbc_download_validate_certs
Whether to validate certs for URL keycloak_quarkus_download_validate_certs
no
general.bootstrapped
A custom fact indicating whether this role has been used for bootstrapping keycloak on the respective host before; set to false (e.g., when starting off with a new, empty database) ensures that the initial admin user as defined by keycloak_quarkus_admin_user[_pass] gets created
A custom fact indicating whether this role has been used for bootstrapping keycloak on the respective host before; set to false (e.g., when starting off with a new, empty database) ensures that the initial admin user as defined by keycloak_quarkus_bootstrap_admin_user[_password] gets created