From 426e162e394aa9c58924be4ba6f74e9e994589ec Mon Sep 17 00:00:00 2001 From: kimo Date: Sat, 26 Sep 2026 22:14:51 -0400 Subject: [PATCH] upgrade keycloak to 26.7.4 --- keycloak/keycloak-operator.yaml | 437 -------------------------------- keycloak/kustomization.yaml | 5 + 2 files changed, 5 insertions(+), 437 deletions(-) delete mode 100644 keycloak/keycloak-operator.yaml create mode 100644 keycloak/kustomization.yaml diff --git a/keycloak/keycloak-operator.yaml b/keycloak/keycloak-operator.yaml deleted file mode 100644 index 91776f3..0000000 --- a/keycloak/keycloak-operator.yaml +++ /dev/null @@ -1,437 +0,0 @@ ---- -apiVersion: v1 -kind: ServiceAccount -metadata: - annotations: - app.quarkus.io/quarkus-version: 3.27.2 - app.quarkus.io/vcs-uri: https://github.com/keycloak/keycloak.git - app.quarkus.io/build-timestamp: 2026-02-20 - 09:27:35 +0000 - labels: - app.kubernetes.io/name: keycloak-operator - app.kubernetes.io/version: 26.5.4 - app.kubernetes.io/managed-by: quarkus - name: keycloak-operator ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - app.kubernetes.io/name: keycloak-operator - name: keycloak-operator-clusterrole -rules: - - apiGroups: - - config.openshift.io - resources: - - ingresses - verbs: - - get ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - app.kubernetes.io/name: keycloak-operator - app.kubernetes.io/version: 26.5.4 - name: keycloakrealmimportcontroller-cluster-role -rules: - - apiGroups: - - k8s.keycloak.org - resources: - - keycloakrealmimports - - keycloakrealmimports/status - - keycloakrealmimports/finalizers - verbs: - - get - - list - - watch - - patch - - update - - create - - delete - - apiGroups: - - batch - resources: - - jobs - verbs: - - create - - delete - - get - - list - - patch - - watch - - apiGroups: - - "" - resources: - - secrets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - app.kubernetes.io/name: keycloak-operator - app.kubernetes.io/version: 26.5.4 - name: keycloakcontroller-cluster-role -rules: - - apiGroups: - - k8s.keycloak.org - resources: - - keycloaks - - keycloaks/status - - keycloaks/finalizers - verbs: - - get - - list - - watch - - patch - - update - - create - - delete - - apiGroups: - - "" - resources: - - services - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - networking.k8s.io - resources: - - networkpolicies - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - apps - resources: - - statefulsets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - networking.k8s.io - resources: - - ingresses - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - "" - resources: - - secrets - verbs: - - create - - delete - - get - - list - - watch ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - labels: - app.kubernetes.io/name: keycloak-operator - name: keycloak-operator-clusterrole-binding -roleRef: - kind: ClusterRole - apiGroup: rbac.authorization.k8s.io - name: keycloak-operator-clusterrole -subjects: - - kind: ServiceAccount - name: keycloak-operator - namespace: keycloak ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - labels: - app.kubernetes.io/name: keycloak-operator - name: keycloak-operator-role -rules: - - apiGroups: - - apps - resources: - - statefulsets - verbs: - - get - - list - - watch - - create - - delete - - patch - - update - - apiGroups: - - "" - resources: - - configmaps - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - secrets - - services - verbs: - - get - - list - - watch - - create - - delete - - patch - - update - - apiGroups: - - "" - resources: - - pods - verbs: - - list - - apiGroups: - - "" - resources: - - pods/log - verbs: - - get - - apiGroups: - - batch - resources: - - jobs - verbs: - - get - - list - - watch - - create - - delete - - patch - - update - - apiGroups: - - networking.k8s.io - resources: - - ingresses - verbs: - - get - - list - - watch - - create - - delete - - patch - - update - - apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - verbs: - - create - - delete - - get - - list - - update - - watch - - patch ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - labels: - app.kubernetes.io/name: keycloak-operator - name: keycloak-operator-role-binding -roleRef: - kind: Role - apiGroup: rbac.authorization.k8s.io - name: keycloak-operator-role -subjects: - - kind: ServiceAccount - name: keycloak-operator ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - labels: - app.kubernetes.io/name: keycloak-operator - app.kubernetes.io/version: 26.5.4 - name: keycloakrealmimportcontroller-role-binding -roleRef: - kind: ClusterRole - apiGroup: rbac.authorization.k8s.io - name: keycloakrealmimportcontroller-cluster-role -subjects: - - kind: ServiceAccount - name: keycloak-operator ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - labels: - app.kubernetes.io/name: keycloak-operator - app.kubernetes.io/version: 26.5.4 - name: keycloakcontroller-role-binding -roleRef: - kind: ClusterRole - apiGroup: rbac.authorization.k8s.io - name: keycloakcontroller-cluster-role -subjects: - - kind: ServiceAccount - name: keycloak-operator ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - labels: - app.kubernetes.io/name: keycloak-operator - app.kubernetes.io/version: 26.5.4 - name: keycloak-operator-view -roleRef: - kind: ClusterRole - apiGroup: rbac.authorization.k8s.io - name: view -subjects: - - kind: ServiceAccount - name: keycloak-operator ---- -apiVersion: v1 -kind: Service -metadata: - annotations: - app.quarkus.io/quarkus-version: 3.27.2 - app.quarkus.io/vcs-uri: https://github.com/keycloak/keycloak.git - app.quarkus.io/build-timestamp: 2026-02-20 - 09:27:35 +0000 - labels: - app.kubernetes.io/name: keycloak-operator - app.kubernetes.io/version: 26.5.4 - app.kubernetes.io/managed-by: quarkus - name: keycloak-operator -spec: - ports: - - name: http - port: 80 - protocol: TCP - targetPort: 8080 - selector: - app.kubernetes.io/name: keycloak-operator - type: ClusterIP ---- -apiVersion: apps/v1 -kind: Deployment -metadata: - annotations: - app.quarkus.io/quarkus-version: 3.27.2 - app.quarkus.io/vcs-uri: https://github.com/keycloak/keycloak.git - app.quarkus.io/build-timestamp: 2026-02-20 - 09:27:35 +0000 - labels: - app.kubernetes.io/name: keycloak-operator - app.kubernetes.io/version: 26.5.4 - app.kubernetes.io/managed-by: quarkus - name: keycloak-operator -spec: - replicas: 1 - selector: - matchLabels: - app.kubernetes.io/name: keycloak-operator - template: - metadata: - annotations: - app.quarkus.io/quarkus-version: 3.27.2 - app.quarkus.io/vcs-uri: https://github.com/keycloak/keycloak.git - app.quarkus.io/build-timestamp: 2026-02-20 - 09:27:35 +0000 - labels: - app.kubernetes.io/managed-by: quarkus - app.kubernetes.io/version: 26.5.4 - app.kubernetes.io/name: keycloak-operator - spec: - containers: - - env: - - name: KUBERNETES_NAMESPACE - valueFrom: - fieldRef: - fieldPath: metadata.namespace - - name: RELATED_IMAGE_KEYCLOAK - value: quay.io/keycloak/keycloak:26.5.4 - - name: QUARKUS_OPERATOR_SDK_CONTROLLERS_KEYCLOAKREALMIMPORTCONTROLLER_NAMESPACES - value: JOSDK_WATCH_CURRENT - - name: QUARKUS_OPERATOR_SDK_CONTROLLERS_KEYCLOAKCONTROLLER_NAMESPACES - value: JOSDK_WATCH_CURRENT - image: quay.io/keycloak/keycloak-operator:26.5.4 - imagePullPolicy: Always - livenessProbe: - failureThreshold: 3 - httpGet: - path: /q/health/live - port: 8080 - scheme: HTTP - initialDelaySeconds: 5 - periodSeconds: 10 - successThreshold: 1 - timeoutSeconds: 10 - name: keycloak-operator - ports: - - containerPort: 8080 - name: http - protocol: TCP - readinessProbe: - failureThreshold: 3 - httpGet: - path: /q/health/ready - port: 8080 - scheme: HTTP - initialDelaySeconds: 5 - periodSeconds: 10 - successThreshold: 1 - timeoutSeconds: 10 - resources: - limits: - cpu: 700m - memory: 450Mi - requests: - cpu: 300m - memory: 450Mi - startupProbe: - failureThreshold: 3 - httpGet: - path: /q/health/started - port: 8080 - scheme: HTTP - initialDelaySeconds: 5 - periodSeconds: 10 - successThreshold: 1 - timeoutSeconds: 10 - serviceAccountName: keycloak-operator \ No newline at end of file diff --git a/keycloak/kustomization.yaml b/keycloak/kustomization.yaml new file mode 100644 index 0000000..ca80cd9 --- /dev/null +++ b/keycloak/kustomization.yaml @@ -0,0 +1,5 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization + +resources: + - github.com/keycloak/keycloak-k8s-resources/kubernetes?ref=26.7.4