diff --git a/pom.xml b/pom.xml index 520d4b8..c38c154 100644 --- a/pom.xml +++ b/pom.xml @@ -5,7 +5,7 @@ io.kokuwa.maven maven-parent - 0.6.15 + 0.6.16 @@ -64,7 +64,7 @@ 1.0.0 - 1.2.4 + 1.3.0 19.0.0 25.0.1 diff --git a/src/main/docker/Dockerfile b/src/main/docker/Dockerfile index 26746ec..45efcfd 100644 --- a/src/main/docker/Dockerfile +++ b/src/main/docker/Dockerfile @@ -5,25 +5,14 @@ RUN mv "/tmp/keycloak-$VERSION" /app && rm -rf /app/bin/client /app/bin/*.bat FROM docker.io/eclipse-temurin:${maven.compiler.target}-jre AS keycloak-runtime # https://www.keycloak.org/server/all-config -ENV \ - KC_DB=postgres \ - KC_CACHE=ispn \ - KC_CACHE_STACK=kubernetes \ - KC_CACHE_DNS=keycloak-headless \ - KC_CACHE_OWNERS=2 \ - KC_HEALTH_ENABLED=true \ - KC_METRICS_ENABLED=true \ - KC_METRICS_EVENT_REPLACE_IDS=true \ - KC_METRICS_STATS_ENABLED=true \ - URI_METRICS_ENABLED=false \ - URI_METRICS_DETAILED=false +ENV KC_DB=postgres KC_HEALTH_ENABLED=true KC_METRICS_ENABLED=true COPY --from=keycloak /app /app COPY cache-ispn.xml /app/conf/cache-ispn.xml COPY keycloak-event-metrics-${version.io.kokuwa.keycloak.metrics}.jar /app/providers/metrics-spi.jar RUN java -Dkc.home.dir=/app -jar /app/lib/quarkus-run.jar build FROM docker.io/eclipse-temurin:${maven.compiler.target}-jre AS keycloak-import -ENV KC_DB=postgres KC_CACHE=local KC_LOG_CONSOLE_OUTPUT=json +ENV KC_DB=postgres COPY --from=keycloak /app /app RUN java -Dkc.home.dir=/app -jar /app/lib/quarkus-run.jar build @@ -50,6 +39,8 @@ LABEL org.opencontainers.image.base.name docker.io/eclipse-temurin:${maven.com # https://www.keycloak.org/server/all-config ENV \ KC_DB=postgres \ + KC_HTTP_ENABLED=true \ + KC_HTTP_METRICS_HISTOGRAMS_ENABLED=true \ KC_CACHE=ispn \ KC_CACHE_STACK=kubernetes \ KC_CACHE_DNS=keycloak-headless \ @@ -58,9 +49,6 @@ ENV \ KC_METRICS_ENABLED=true \ KC_METRICS_EVENT_REPLACE_IDS=true \ KC_METRICS_STATS_ENABLED=true \ - URI_METRICS_ENABLED=false \ - URI_METRICS_DETAILED=false \ - KC_PROXY=edge \ KC_LOG_CONSOLE_OUTPUT=json COPY --from=keycloak-runtime /app /app @@ -117,6 +105,8 @@ LABEL org.opencontainers.image.base.name gcr.io/distroless/java${maven.compile # https://www.keycloak.org/server/all-config ENV \ KC_DB=postgres \ + KC_HTTP_ENABLED=true \ + KC_HTTP_METRICS_HISTOGRAMS_ENABLED=true \ KC_CACHE=ispn \ KC_CACHE_STACK=kubernetes \ KC_CACHE_DNS=keycloak-headless \ @@ -125,9 +115,6 @@ ENV \ KC_METRICS_ENABLED=true \ KC_METRICS_EVENT_REPLACE_IDS=true \ KC_METRICS_STATS_ENABLED=true \ - URI_METRICS_ENABLED=false \ - URI_METRICS_DETAILED=false \ - KC_PROXY=edge \ KC_LOG_CONSOLE_OUTPUT=json COPY --from=keycloak-runtime /app /app diff --git a/src/test/java/io/kokuwa/keycloak/k8s/Kubernetes.java b/src/test/java/io/kokuwa/keycloak/k8s/Kubernetes.java index 803f1fa..71642d9 100644 --- a/src/test/java/io/kokuwa/keycloak/k8s/Kubernetes.java +++ b/src/test/java/io/kokuwa/keycloak/k8s/Kubernetes.java @@ -9,7 +9,6 @@ import org.slf4j.Logger; import org.slf4j.LoggerFactory; -import io.kokuwa.keycloak.FailoverIT; import io.kubernetes.client.custom.V1Patch; import io.kubernetes.client.openapi.ApiClient; import io.kubernetes.client.openapi.ApiException; @@ -22,7 +21,7 @@ public class Kubernetes { public static final String KEYCLOAK_NAME = "keycloak"; public static final int KEYCLOAK_REPLICAS = 3; - private final Logger log = LoggerFactory.getLogger(FailoverIT.class); + private final Logger log = LoggerFactory.getLogger(Kubernetes.class); private final AppsV1Api appApi; Kubernetes(ApiClient client) { diff --git a/src/test/k3s/test/keycloak/job.yaml b/src/test/k3s/test/keycloak/job.yaml index 9114117..b5a888c 100644 --- a/src/test/k3s/test/keycloak/job.yaml +++ b/src/test/k3s/test/keycloak/job.yaml @@ -56,6 +56,8 @@ spec: capabilities: drop: [ALL] volumeMounts: + - name: data + mountPath: /app/data - name: tmp mountPath: /tmp - name: realms @@ -64,6 +66,8 @@ spec: automountServiceAccountToken: false terminationGracePeriodSeconds: 2 volumes: + - name: data + emptyDir: {} - name: tmp emptyDir: {} - name: realms diff --git a/src/test/k3s/test/keycloak/kustomization.yaml b/src/test/k3s/test/keycloak/kustomization.yaml index 26186f9..9dce173 100644 --- a/src/test/k3s/test/keycloak/kustomization.yaml +++ b/src/test/k3s/test/keycloak/kustomization.yaml @@ -7,8 +7,11 @@ resources: configMapGenerator: - name: keycloak-config literals: - - KC_HOSTNAME_STRICT=false - - KC_HOSTNAME_STRICT_HTTPS=false + - KC_HOSTNAME=http://keycloak.127.0.0.1.nip.io + - KC_HOSTNAME_DEBUG=true + - KC_HOSTNAME_BACKCHANNEL_DYNAMIC=true + - KC_PROXY_HEADERS=xforwarded + - KC_LOG_CONSOLE_OUTPUT=default - name: keycloak-realms files: - files/kokuwa-realm.json diff --git a/src/test/k3s/test/keycloak/statefulset.yaml b/src/test/k3s/test/keycloak/statefulset.yaml index c1c5976..8eaeffe 100644 --- a/src/test/k3s/test/keycloak/statefulset.yaml +++ b/src/test/k3s/test/keycloak/statefulset.yaml @@ -49,10 +49,12 @@ spec: ports: - name: http containerPort: 8080 + - name: management + containerPort: 9000 startupProbe: httpGet: path: /health - port: http + port: management initialDelaySeconds: 1 periodSeconds: 1 successThreshold: 1 @@ -60,11 +62,11 @@ spec: readinessProbe: httpGet: path: /health/ready - port: http + port: management livenessProbe: httpGet: path: /health/live - port: http + port: management securityContext: runAsUser: 1000 runAsGroup: 1000