## What this PR does Updates the Keycloak Operator Helm chart to v1.32.0 and builds a custom operator image from upstream master (epam/edp-keycloak-operator@facbc36) with the group rename detection patch from PR epam/edp-keycloak-operator#309 applied on top. Bumps Keycloak server from 26.0.4 to 26.5.2, which is required by the new operator client (sends `description` field rejected by older versions). Adds SSO session settings (idleTimeout: 86400, maxLifespan: 604800) to the ClusterKeycloakRealm to match the dashboard client's session attributes, as Keycloak 26 enforces realm-level session limits strictly. Removes `authorizationServicesEnabled` from the dashboard KeycloakClient, which is incompatible with Keycloak 26's stricter validation. ### Release note ```release-note [keycloak-operator] Update the operator to v1.32.0 with group rename fix (epam/edp-keycloak-operator#309). Bump Keycloak to 26.5.2. ``` Signed-off-by: Timofei Larkin <lllamnyp@gmail.com>
22 lines
802 B
Makefile
22 lines
802 B
Makefile
export NAME=keycloak-operator
|
|
export NAMESPACE=cozy-keycloak
|
|
|
|
include ../../../hack/common-envs.mk
|
|
include ../../../hack/package.mk
|
|
|
|
image:
|
|
docker buildx build images/keycloak-operator \
|
|
--tag $(REGISTRY)/keycloak-operator:$(call settag,$(TAG)) \
|
|
--cache-from type=registry,ref=$(REGISTRY)/keycloak-operator:latest \
|
|
--cache-to type=inline \
|
|
--metadata-file images/keycloak-operator.json \
|
|
$(BUILDX_ARGS)
|
|
TAG="$(call settag,$(TAG))@$$(yq e '."containerimage.digest"' images/keycloak-operator.json -r)" \
|
|
yq -i '.keycloak-operator.image.tag = strenv(TAG)' values.yaml
|
|
rm -f images/keycloak-operator.json
|
|
|
|
update:
|
|
rm -rf charts
|
|
helm repo add epamedp https://epam.github.io/edp-helm-charts/stable
|
|
helm repo update epamedp
|
|
helm pull epamedp/keycloak-operator --untar --untardir charts
|