KeyCloak/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-05-26 13:50:48 +00:00
Code Issues Packages Projects Releases Wiki Activity
31,095 Commits 34 Branches 307 Tags
main
Commit Graph
332 Commits
Author SHA1 Message Date
Peter Skopek 480c730efb Mention SHA1 is deprecated in the documentation 
Closes #40706

Signed-off-by: Peter Skopek <peter.skopek@ibm.com>
 2026-05-13 10:58:36 +02:00
Martin Bartošandrmartinc 9d1e562f03 Update WebAuthn Metadata service and show icons (#48551) 
* Update WebAuthn Metadata service and show icons

Closes #48539
Closes #48540

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: rmartinc <rmartinc@redhat.com>

* Revert back the transport type for providerId-less authenticators

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: rmartinc <rmartinc@redhat.com>
 2026-05-11 17:15:38 +02:00
vramik e1329516d5 Introduce ORGANIZATIONS resource type in Fine-Grained Admin Permissions 
Closes #47284

Signed-off-by: vramik <vramik@redhat.com>
 2026-04-29 11:10:05 -03:00
vramik 13560136cf Introduce manage-organizations, view-organizations admin roles for Organization management 
Closes #45497
Closes #31641

Signed-off-by: vramik <vramik@redhat.com>
 2026-04-21 11:45:35 -03:00
tre2man 024a9026e6 Search realms by displayName 
closes #45292

Signed-off-by: tre2man <kimtree3940@gmail.com>
 2026-04-20 19:34:05 -03:00
Rahul Ramkumar 799699a808 Add KCRAW_ prefix for environment variables to preserve literal values (#47197) 
Closes #46657

Signed-off-by: Rahul Ramkumar <rahulram226@gmail.com>
 2026-04-07 10:12:18 +02:00
Alexander Schwartz 97fce120ac Finalizing release notes and migration guide for 26.6 (#47791) 
Closes #47790

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-04-07 09:44:13 +02:00
Václav Muzikář 3560286f0d Update docs to better reflect FIPS support with Java 25. (#47699) 
Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>
 2026-04-02 15:04:15 +02:00
Stefan Guilhen 7e8eb64a52 Add troubleshooting section to workflows documentation 
- also add workflows as supported in release notes

Closes #47692

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2026-04-02 00:05:04 +02:00
Václav Muzikář d7238a77ba Clarify Java 25 support scope in docs (#47539) 
Closes #47537

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>
 2026-04-01 15:20:37 +02:00
Takashi Norimatsu a504df1a1c Update release-notes for CIMD 
closes #47667

Signed-off-by: Takashi Norimatsu <takashi.norimatsu.ws@hitachi.com>
 2026-04-01 12:42:53 +02:00
Martin BartošandDaniele Mams c0458c0801 Provide documentation for customizable log service properties 
Closes #47586

Co-authored-by: Daniele Mams <mammarella.daniele@gmail.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2026-03-31 11:16:29 +02:00
mposolda 5b82688883 Moving identity-broker-api to 'security and standards' section of release notes for 26.6.0 
closes #45839

Signed-off-by: mposolda <mposolda@gmail.com>
 2026-03-26 17:46:32 +01:00
rmartinc b6fe6c2db8 Documentation for brokering API V2 and make it preview 
Closes #46590
Closes #47259

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2026-03-26 11:13:58 +01:00
Gilvan FilhoandVáclav Muzikář ed66ac6b0c add labels and annotations to service monitor (serviceMonitorSpec) (#47298) 
* add labels and annotations to service monitor (serviceMonitorSpec)

closes #42626

Signed-off-by: Gilvan Filho <gilvan.sfilho@gmail.com>

* add labels and annotations to service monitor (serviceMonitorSpec)

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Gilvan Filho <gilvan.sfilho@gmail.com>

---------

Signed-off-by: Gilvan Filho <gilvan.sfilho@gmail.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
 2026-03-23 17:35:44 +00:00
Alexander SchwartzandStian Thorgersen 86a44bd378 Review release notes about missing items (#47359) 
* Review release notes about missing items

Closes #47358

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>

* Apply suggestion from @stianst

Signed-off-by: Stian Thorgersen <stianst@gmail.com>

* Apply suggestion from @stianst

Signed-off-by: Stian Thorgersen <stianst@gmail.com>

---------

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Signed-off-by: Stian Thorgersen <stianst@gmail.com>
Co-authored-by: Stian Thorgersen <stianst@gmail.com>
 2026-03-23 07:58:34 +01:00
Alexander Schwartz b9cd14f931 Regroup the release notes by category 
Closes #47239

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-03-18 14:29:17 +01:00
Stian Thorgersen 607096fd4e Promote federated client authentication, including OIDC and Kube to fully supported 
Closes #42634, closes #42635, closes #42826, closes #44412

Signed-off-by: stianst <stianst@gmail.com>
 2026-03-17 05:15:13 +01:00
Ricardo Martin a712d01234 Change links from issues.redhat.com to redhat.atlassian.net (#47181) 
Closes #47179

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2026-03-16 14:58:08 +01:00
Tero Saarni e2e89523c5 Add release note for Envoy client certificate lookup (#47096) 
* Add release note for Envoy client certificate lookup

Signed-off-by: Tero Saarni <tero.saarni@est.tech>

* Fixed heading level, combined into one chapter

Signed-off-by: Tero Saarni <tero.saarni@est.tech>

---------

Signed-off-by: Tero Saarni <tero.saarni@est.tech>
 2026-03-12 15:26:23 -04:00
vramik 367f9e2cc8 Organization Groups Documentation 
Closes #45516

Signed-off-by: vramik <vramik@redhat.com>
 2026-03-10 10:31:50 -03:00
Václav Muzikář 5c062a9e59 Downgrade server container image back to OpenJDK 21 (#46813) 
* Downgrade server container image back to OpenJDK 21

Closes #46812

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>

* Remove JDK downgrade note, rename attribute

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>

---------

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>
 2026-03-10 14:26:11 +01:00
rmartinc db7d9bfc8c Promote JWT Authorization Grant feature to supported 
Closes #45463

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2026-03-10 09:13:44 +01:00
Oluwatobi Mustapha 24a819eabc Fix FGAP deny evaluation for manage-group-membership 
Add the missing Users FGAP scope alias from manage-group-membership to Groups manage-membership so deny permissions on group members apply during user membership updates.

Add a regression test covering a protected group member, an unrelated user, and the no-mutation postcondition after a forbidden request.

Closes keycloak#46693
 2026-03-09 12:01:17 -03:00
CopilotshawkinsSteve Hawkins
 		8d318c552a Add Traefik-specific X509 client certificate lookup provider (#46616) 
* Add Traefik-specific X509 client certificate lookup provider

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

* correcting the header handling and adding documentation

closes: #46395

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
# Conflicts:
#	docs/documentation/release_notes/topics/26_6_0.adoc

* Update docs/guides/server/reverseproxy.adoc

Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* Apply suggestion from @shawkins

Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* removing optional traefik behavior

and further refining the docs

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>
Co-authored-by: Steve Hawkins <shawkins@redhat.com>
 2026-03-05 15:00:05 +01:00
CopilotshawkinsSteve HawkinsMartin Bartoš
 		9682f6a9a0 Add log file rotation configuration options to allow disabling rotation (#46724) 
* Add log file rotation configuration options to Keycloak

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

* Update approved help texts and add release note for log file rotation
options

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

* updating expected possible options

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/documentation/release_notes/topics/26_6_0.adoc

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/documentation/release_notes/topics/26_6_0.adoc

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>
Co-authored-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Martin Bartoš <mabartos@redhat.com>
 2026-03-05 10:37:41 +00:00
CopilotshawkinsSteve Hawkins
 		d600298df7 operator: add support for configurable Kubernetes Service port and name in Keycloak CRD (#46683) 
closes: #46633

* Add support for configurable Kubernetes Service port and name in Keycloak CRD

- Add serviceHttpPort and serviceHttpsPort fields to HttpSpec for configuring the service port independently of container port
- Add serviceName field to HttpSpec for customizing the service name
- Update KeycloakServiceDependentResource to use service ports with targetPort
- Update KeycloakClientBaseController to use service ports for admin URL
- Add unit tests and update test YAML

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

* Remove HasMetadata getServiceName overload; add integration test for custom service name and port

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

* refining the integration test

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Add documentation for configurable Service name and port in operator guide and release notes

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

* Apply review suggestions to documentation wording

Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>

---------

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: shawkins <2475669+shawkins@users.noreply.github.com>
Co-authored-by: Steve Hawkins <shawkins@redhat.com>
 2026-03-04 10:49:51 -05:00
Sebastian ŁaskawiecCopilotVáclav MuzikářSteven Hawkins
 		35d725fe1b Moved adding Kubernetes/OpenShift CAs to the server (#44506) 
* Kubernetes Truststore moved to the server

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>

* Update quarkus/config-api/src/main/java/org/keycloak/config/TruststoreOptions.java

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>

* addressing review comments and updating upgrade instructions

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* updating help command output

Signed-off-by: Steve Hawkins <shawkins@redhat.com>

* Update docs/guides/server/keycloak-truststore.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>

* Comments addressed

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>

* lint errors fix

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>

* Update docs/documentation/upgrading/topics/changes/changes-26_6_0.adoc

Signed-off-by: Steven Hawkins <shawkins@redhat.com>

---------

Signed-off-by: Sebastian Łaskawiec <sebastian.laskawiec@gmail.com>
Signed-off-by: Steven Hawkins <shawkins@redhat.com>
Signed-off-by: Steve Hawkins <shawkins@redhat.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
 2026-03-04 16:39:10 +01:00
Lukas Hanusovsky accf95cfd9 Keycloak Test Framework - 26.6.0 release notes (#46611) 
Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com>
 2026-02-26 14:08:57 +01:00
Ricardo Martin 2bd386842a Step up authentication for saml - preview (#44185) 
Closes #10155


Signed-off-by: rmartinc <rmartinc@redhat.com>
 2026-02-23 19:57:00 +01:00
Michal Vavřík 8e816f749c feat: Update container images to use OpenJDK 25 (#46386) 
This PR is mostly based on https://github.com/vmuzikar/keycloak/commit/303446b465f2896b269df42388a685ec69b22560.
Additionally, I made few tweaks to documentation and introduce a doc variable for the recommended Java version so limit required changing when migrating the recommended JDK version.

* Closes: https://github.com/keycloak/keycloak/issues/45830

Signed-off-by: Michal Vavřík <michal.vavrik@aol.com>
 2026-02-17 15:35:46 +01:00
Ruchika JhaandAlexander Schwartz f92c27e26d Make rolling updates for patch releases fully supported and Updated docs, release notes and upgrading guide for zero-downtime patch releases 
Closes #45381
Closes #45756

Signed-off-by: Ruchika <ruchika.jha1@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-02-16 15:11:16 +00:00
Ruchika JhaandAlexander Schwartz e82e107b85 Enable graceful HTTP shutdown and document default behavior 
Closes #43589

Signed-off-by: Ruchika <ruchika.jha1@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2026-02-13 14:28:49 +00:00
Václav Muzikář d45dfeb44a Java 25 support (#45872) 
Closes #45905

Signed-off-by: Václav Muzikář <vmuzikar@ibm.com>
 2026-02-10 23:35:35 +00:00
Martin BartošandRyan Emerson eac504cce5 OTEL: Ability to specify headers for exporters 
Closes #45220

Co-authored-by: Ryan Emerson <remerson@ibm.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2026-01-27 10:36:18 +00:00
Martin BartošSteven HawkinsVáclav Muzikář
 		57f0b15c80 OTEL: Add Telemetry options to Keycloak CR (#45397) 
* OTEL: Add Telemetry options to Keycloak CR

Closes #45348

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>

* Add validation to resource attributes

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Avoid unnecessary warning logs during the operator tests execution

Closes #45623

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/documentation/upgrading/topics/changes/changes-26_6_0.adoc

Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
 2026-01-22 16:02:06 +00:00
Martin Bartoš 1138952ba7 Provide HTTP access logs written to file with rotation (#45437) 
Closes #41353

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2026-01-20 15:16:33 +01:00
Martin BartošandVáclav Muzikář 137a35c110 Mask certain HTTP headers and cookies in the HTTP access log (#45400) 
* Mask certain HTTP headers and cookies in the HTTP access log

Closes #43811

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>

* Improve tests, Improve docs

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Fix test

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
 2026-01-19 19:01:45 +01:00
Ryan Emerson 4a2ed7c4e6 Use correct anchor for mdc logging in 26.5.0 release notes 
Closes #45185

Signed-off-by: Ryan Emerson <remerson@ibm.com>
 2026-01-06 17:21:48 +01:00
Alexander SchwartzandStian Thorgersen e43cf55028 Finalizing 26.5 release notes 
Closes #45131

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Stian Thorgersen <stian@redhat.com>
 2026-01-05 14:10:32 +01:00
Peter Zaoral 7da8a8a2e3 feat: add Windows service support (#44496) 
Closes: #37704

Signed-off-by: Peter Zaoral <pepo48@gmail.com>
 2025-12-19 16:55:42 +00:00
Stephan SeifermannStephan SeifermannVáclav Muzikář
 		aefecade5c Client cert lookup provider compliant to RFC 9440 (#36161) 
* Client cert lookup provider compliant to RFC 9440 (#20761)

Signed-off-by: Stephan Seifermann <seiferma@users.noreply.github.com>

* Release notes

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>

---------

Signed-off-by: Stephan Seifermann <seiferma@users.noreply.github.com>
Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Co-authored-by: Stephan Seifermann <seiferma@users.noreply.github.com>
Co-authored-by: Václav Muzikář <vmuzikar@redhat.com>
 2025-12-19 12:38:54 +01:00
Pedro IgorAlexander SchwartzStian Thorgersen
 		6a437521a9 Only allow LDAP URL references when following referrals (#44993) 
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Signed-off-by: Stian Thorgersen <stian@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@ibm.com>
Co-authored-by: Stian Thorgersen <stianst@gmail.com>
 2025-12-18 14:27:10 +01:00
Marek Posolda 4b68f6998b Release notes update for Keycloak 26.5 with core-clients related contributions (#44986) 
closes #44192

Signed-off-by: mposolda <mposolda@gmail.com>
 2025-12-18 10:48:27 +01:00
Martin BartošandRyan Emerson 548a89c823 [OTel] Micrometer to OpenTelemetry bridge support for metrics (#41716) 
* [OTel] Micrometer to OpenTelemetry bridge support for metrics

Closes #41006

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Review: Docs rewording

Signed-off-by: Ryan Emerson <remerson@ibm.com>

* Review: Make TELEMETRY Option descriptions consistently use OpenTelemetry to reflect pattern established by telemetry-enabled, telemetry-endpoint etc

Signed-off-by: Ryan Emerson <remerson@ibm.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Ryan Emerson <remerson@ibm.com>
Co-authored-by: Ryan Emerson <remerson@ibm.com>
 2025-12-17 17:03:56 +01:00
Martin BartošandRyan Emerson <remerson@redhat.com 29fdcedbc8 [OTel] Introduce preview support for OpenTelemetry Logs (#41265) 
Closes #41264

Co-authored-by: Ryan Emerson <remerson@redhat.com

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
 2025-12-15 10:50:30 +01:00
Václav MuzikářandSteven Hawkins da6c4df5ec Support EDB 18 (#44856) 
* Support EDB 18

Closes #44494

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>

* Update test-framework/db-edb/container/README.md

Co-authored-by: Steven Hawkins <shawkins@redhat.com>
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>

---------

Signed-off-by: Václav Muzikář <vmuzikar@redhat.com>
Signed-off-by: Václav Muzikář <vaclav@muzikari.cz>
Co-authored-by: Steven Hawkins <shawkins@redhat.com>
 2025-12-15 07:36:26 +01:00
Giuseppe Graziano c0c4067bdd JWT Authorization Grant feature to preview 
Closes #44492

Signed-off-by: Giuseppe Graziano <g.graziano94@gmail.com>
 2025-12-11 10:37:30 +01:00
Martin BartošRyan EmersonVáclav Muzikář
 		8def691053 [OTel] Provide general options for telemetry settings (#41705) 
* [OTel] Provide general options for telemetry settings

Closes #41263

Co-authored-by: Ryan Emerson <remerson@redhat.com>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Update docs/guides/observability/telemetry.adoc

Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Provide release notes and deprecation note

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

* Ignore link to the telemetry guide for now

Signed-off-by: Martin Bartoš <mabartos@redhat.com>

---------

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Co-authored-by: Ryan Emerson <remerson@redhat.com>
Co-authored-by: Václav Muzikář <vaclav@muzikari.cz>
 2025-12-10 12:03:46 +00:00
Alexander Schwartz 2f81a2fb76 Updating and ordering the release notes 
Closes #44706

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
 2025-12-08 10:55:33 +01:00