RHBK/KC v26

[hwo-wd]

Important Docs:

• Upgrade guide
• Supported Configurations

Known upstream issues, relevant for ppl thinking about upgrading to RHBK 26 just yet:

• Admin UI doesn't show realms when using login through identity provider keycloak/keycloak#34356

@guidograzioli this one has quite some braking changes, most noteworthy hostname v2 and I was unsure about the way to deal with it: on the one hand, keycloak will move forward with hostname v2 (and that's what I implemented), on the other hand, there could be a try to be downwards compatible.
However, the relative_path option confuses me still a bit: it needs to be part of the keycloak_quarkus_hostname var but should also be set in the http_relative_path; the latter is now really only used for ressources and the thing that really matters is keycloak_quarkus_hostname.
This, of course, is even more important for RH-SSO users wanting to upgrade and who are stuck with /auth keyword.

I've tried in deprecations.yaml to mitigate some of the issues, but in my personal opinion I would go the route that the playbook exits when legacy hostname vars are used such that the user is forced to upgrade to keycloak_quarkus_hostname.

Alltogether this will be a v3 one way or the other, but let me know your thoughts, thx

[idNoRD]

Hi @hwo-wd I tried your changes and got this error:

Unexpected templating type error occurred on ({{ keycloak_quarkus_health_check_url | default(keycloak_quarkus_hostname + '/' + (keycloak_quarkus_health_check_url_path | default('realms/master/.well-known/openid-configuration'))) }}): unsupported operand type(s) for +: 'NoneType' and 'str'. unsupported operand type(s) for +: 'NoneType' and 'str'

As a solution I propose to replace + with ~ because ~ operator in Jinja2 can handle None gracefully.

[hwo-wd]

Thanks, @idNoRD, today I learned ;-).
Would you mind giving it another try? -- Thanks

@guidograzioli any thoughts about this PR from your side?
Update: molecule tests are failing now due to:

fatal: [instance]: FAILED! => {"changed": false, "module_stderr": "sudo: PAM account management error: Authentication service cannot retrieve authentication info\nsudo: a password is required\n", "module_stdout": "", "msg": "MODULE FAILURE\nSee stdout/stderr for the exact error", "rc": 1}