From 824fe27a7984f56d2cf75d33aca99710e24f8adc Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 6 Oct 2025 12:45:39 +0000 Subject: [PATCH 1/2] Update quay.io/keycloak/keycloak Docker tag to v26 | datasource | package | from | to | | ---------- | ------------------------- | ------ | ------ | | docker | quay.io/keycloak/keycloak | 25.0.2 | 26.4.0 | | docker | quay.io/keycloak/keycloak | 20.0.5 | 26.4.0 | Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- examples/custom-resources/jwks/keycloak.yaml | 2 +- examples/custom-resources/oidc/keycloak.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/examples/custom-resources/jwks/keycloak.yaml b/examples/custom-resources/jwks/keycloak.yaml index 6f5d962c3d..73d4363860 100644 --- a/examples/custom-resources/jwks/keycloak.yaml +++ b/examples/custom-resources/jwks/keycloak.yaml @@ -31,7 +31,7 @@ spec: spec: containers: - name: keycloak - image: quay.io/keycloak/keycloak:20.0.5 + image: quay.io/keycloak/keycloak:26.4.0 args: ["start-dev"] env: - name: KEYCLOAK_ADMIN diff --git a/examples/custom-resources/oidc/keycloak.yaml b/examples/custom-resources/oidc/keycloak.yaml index 0e879dfa11..73d4363860 100644 --- a/examples/custom-resources/oidc/keycloak.yaml +++ b/examples/custom-resources/oidc/keycloak.yaml @@ -31,7 +31,7 @@ spec: spec: containers: - name: keycloak - image: quay.io/keycloak/keycloak:25.0.2 + image: quay.io/keycloak/keycloak:26.4.0 args: ["start-dev"] env: - name: KEYCLOAK_ADMIN From 44fe1788c364f61036c3e917f930dd265d523651 Mon Sep 17 00:00:00 2001 From: Paul Abel Date: Mon, 6 Oct 2025 15:23:55 +0100 Subject: [PATCH 2/2] Update docs that use keycloak --- examples/custom-resources/jwks/README.md | 4 ++-- examples/custom-resources/jwks/keycloak.yaml | 10 ++++++---- examples/custom-resources/oidc/keycloak.yaml | 10 ++++++---- examples/custom-resources/oidc/keycloak_setup.md | 2 +- 4 files changed, 15 insertions(+), 11 deletions(-) diff --git a/examples/custom-resources/jwks/README.md b/examples/custom-resources/jwks/README.md index f26bd81c88..a84b29ad5f 100644 --- a/examples/custom-resources/jwks/README.md +++ b/examples/custom-resources/jwks/README.md @@ -66,7 +66,7 @@ To set up Keycloak: 3. Create a new Client called `jwks-client`. This can be done by selecting the `Client`s tab on the left and then selecting `Create client`. - - When creating the Client, ensure both `Client authentication` and `Authorization` are enabled. + - When creating the Client, ensure both `Client authentication`, `Authorization` & `Direct access grants` are enabled. 4. Once the client is created, navigate to the `Credentials` tab for that client and copy the client secret. - This can be saved in the `SECRET` shell variable for later: @@ -75,7 +75,7 @@ To set up Keycloak: export SECRET= ``` -5. Create a new User called `jwks-user` by selecting the Users tab on the left and then selecting Create client. +5. Create a new User called `jwks-user` by selecting the Users tab on the left and then selecting Create client. Ensure an email, first & last name are set. 6. Once the user is created, navigate to the `Credentials` tab for that user and select `Set password`. For this example the password can be whatever you want. diff --git a/examples/custom-resources/jwks/keycloak.yaml b/examples/custom-resources/jwks/keycloak.yaml index 73d4363860..c9645de450 100644 --- a/examples/custom-resources/jwks/keycloak.yaml +++ b/examples/custom-resources/jwks/keycloak.yaml @@ -34,12 +34,14 @@ spec: image: quay.io/keycloak/keycloak:26.4.0 args: ["start-dev"] env: - - name: KEYCLOAK_ADMIN + - name: KC_BOOTSTRAP_ADMIN_USERNAME value: "admin" - - name: KEYCLOAK_ADMIN_PASSWORD + - name: KC_BOOTSTRAP_ADMIN_PASSWORD value: "admin" - - name: KC_PROXY - value: "edge" + - name: KC_HTTP_ENABLED + value: "true" + - name: KC_PROXY_HEADERS + value: "xforwarded" ports: - name: http containerPort: 8080 diff --git a/examples/custom-resources/oidc/keycloak.yaml b/examples/custom-resources/oidc/keycloak.yaml index 73d4363860..c9645de450 100644 --- a/examples/custom-resources/oidc/keycloak.yaml +++ b/examples/custom-resources/oidc/keycloak.yaml @@ -34,12 +34,14 @@ spec: image: quay.io/keycloak/keycloak:26.4.0 args: ["start-dev"] env: - - name: KEYCLOAK_ADMIN + - name: KC_BOOTSTRAP_ADMIN_USERNAME value: "admin" - - name: KEYCLOAK_ADMIN_PASSWORD + - name: KC_BOOTSTRAP_ADMIN_PASSWORD value: "admin" - - name: KC_PROXY - value: "edge" + - name: KC_HTTP_ENABLED + value: "true" + - name: KC_PROXY_HEADERS + value: "xforwarded" ports: - name: http containerPort: 8080 diff --git a/examples/custom-resources/oidc/keycloak_setup.md b/examples/custom-resources/oidc/keycloak_setup.md index 278e0fe32c..9874fc07bb 100644 --- a/examples/custom-resources/oidc/keycloak_setup.md +++ b/examples/custom-resources/oidc/keycloak_setup.md @@ -7,7 +7,7 @@ This guide will help you configure KeyCloak using Keycloak's API: **Notes**: -- This guide has been tested with keycloak 19.0.2 and later. If you modify `keycloak.yaml` to use an older version, +- This guide has been tested with keycloak 26.4.0 and later. If you modify `keycloak.yaml` to use an older version, Keycloak may not start correctly or the commands in this guide may not work as expected. The Keycloak OpenID endpoints `oidc.yaml` might also be different in older versions of Keycloak. - if you changed the admin username and password for Keycloak in `keycloak.yaml`, modify the commands accordingly.