From be6986616e4dc3f41b44aad1d130b22a9743bf62 Mon Sep 17 00:00:00 2001 From: Alexander Schwartz Date: Tue, 7 May 2024 15:37:13 +0200 Subject: [PATCH] Review of the title, embedding slides and video Signed-off-by: Alexander Schwartz --- .../keycloak-at-devoxx-france-2024-recap.adoc | 74 +-- .../keycloak-at-devoxx-france-2024-recap.html | 498 ----------------- .../keycloak-at-kubecon-eu-2024-recap.html | 504 ------------------ ...devoxx_2024.jpg => devoxx_france_2024.jpg} | Bin 4 files changed, 42 insertions(+), 1034 deletions(-) delete mode 100644 blog/2024/keycloak-at-devoxx-france-2024-recap.html delete mode 100644 blog/2024/keycloak-at-kubecon-eu-2024-recap.html rename blog/images/{devoxx_2024.jpg => devoxx_france_2024.jpg} (100%) diff --git a/blog/2024/keycloak-at-devoxx-france-2024-recap.adoc b/blog/2024/keycloak-at-devoxx-france-2024-recap.adoc index 9500fc8f..085ab9ac 100644 --- a/blog/2024/keycloak-at-devoxx-france-2024-recap.adoc +++ b/blog/2024/keycloak-at-devoxx-france-2024-recap.adoc @@ -1,37 +1,47 @@ -:title: Recap from Devoxx France 2024 +:title: High availability in Keycloak 24 :date: 2024-05-07 :publish: true :author: Alexander Schwartz, Ryan Emerson -== Devoxx France 2024 - A single sign on solution for your customers and employees shouldn't be a single-point-of-failure in your architecture. -At Devoxx France 2024, Ryan Emerson and Alexander Schwartz presented, from an architects and developer perspective, -how Keycloak approached the problem. They describe which architecture the Keycloak team chose, the challenges they faced -and which tools helped along the way. The slides and the recorded video are linked below. - -[caption="Keycloak",link=${blogImages}/devoxx_2024.jpg] -image:${blogImages}/devoxx_2024.jpg[Keycloak] - -A clustered Keycloak deployment in a single site or datacenter provides sufficient availability for many. However, -an increasing number of organizations need to utilize multiple sites for improved resiliency or to meet legal requirements. -In 2023, Keycloak overhauled its multi-site capabilities for public and private cloud infrastructures, tested them -thoroughly and provided deployment blueprints to the community. As part of the release of Keycloak 24, an active/passive -setup is now fully supported. - -Read more about it in the new https://www.keycloak.org/high-availability/introduction[high availability guide] published -as part of https://www.keycloak.org/documentation[Keycloak’s documentation], and get more tools and background information -in the https://github.com/keycloak/keycloak-benchmark[Keycloak Benchmark Project]. -Since the https://www.keycloak.org/2023/12/recover-site-failures.html[previous blog post] which covered Keycloak 23, we -have made the configuration of such a setup simpler, with fewer options required by Keycloak and the Keycloak Operator. -Thank you to everyone who provided feedback along the way, and those who participated in our survey in early 2023 which -guided us in the implementation of this setup. - -Still, the journey doesn’t stop here: The team is now working on durable sessions across restarts and upgrades, and a -simpler Infinispan architecture which aims to eventually support active/active. Follow these issues and discussions to -stay up-to-date with the latest developments, and provide feedback on Keycloak’s nightly builds. - -== Links - -* https://speakerdeck.com/ahus1/highly-available-identity-and-access-management-with-multi-site-keycloak-deployments-in-the-cloud[Slides] -* https://www.youtube.com/watch?v=y1yE7Rd3lGE&t=8s[Video] +At Devoxx France 2024, Ryan Emerson and Alexander Schwartz presented, from an architects and developer perspective, how Keycloak approached the problem. +They describe which architecture the Keycloak team chose, the challenges they faced and which tools helped along the way. +The slides and the recorded video are linked below. +Scroll down for additional links and the task we work to enhance it even further. + +-- +++++ +
+ +
+++++ +-- + +-- +++++ +
+ +
+++++ +-- + +-- +++++ +
+Two speakers on a stage at Devoxx France with slides from Keycloak +
+++++ +-- + +A clustered Keycloak deployment in a single site or datacenter provides sufficient availability for many. +However, an increasing number of organizations need to utilize multiple sites for improved resiliency or to meet legal requirements. +In 2023, Keycloak overhauled its multi-site capabilities for public and private cloud infrastructures, tested them thoroughly and provided deployment blueprints to the community. +As part of the release of Keycloak 24, an active/passive setup is now fully supported. + +Read more about it in the new https://www.keycloak.org/high-availability/introduction[high availability guide] published as part of https://www.keycloak.org/documentation[Keycloak’s documentation], and get more tools and background information in the https://github.com/keycloak/keycloak-benchmark[Keycloak Benchmark Project]. +Since the https://www.keycloak.org/2023/12/recover-site-failures.html[previous blog post] which covered Keycloak 23, we have made the configuration of such a setup simpler, with fewer options required by Keycloak and the Keycloak Operator. +Thank you to everyone who provided feedback along the way, and those who participated in our survey in early 2023 which guided us in the implementation of this setup. + +Still, the journey doesn't stop here: The team is now working on https://github.com/keycloak/keycloak/discussions/28271[durable sessions across restarts and upgrades], and a +https://github.com/keycloak/keycloak/issues/28745[simpler Infinispan architecture which aims to eventually support active/active]. +Follow these issues and discussions to stay up-to-date with the latest developments, and provide feedback on Keycloak’s nightly builds. diff --git a/blog/2024/keycloak-at-devoxx-france-2024-recap.html b/blog/2024/keycloak-at-devoxx-france-2024-recap.html deleted file mode 100644 index a98ce518..00000000 --- a/blog/2024/keycloak-at-devoxx-france-2024-recap.html +++ /dev/null @@ -1,498 +0,0 @@ - - - - - - - - -Recap from Devoxx France 2024 - - - - - -
-
-

Devoxx France 2024

-
-
-

A single sign on solution for your customers and employees shouldn’t be a single-point-of-failure in your architecture. -At Devoxx France 2024, Ryan Emerson and Alexander Schwartz presented, from an architects and developer perspective, -how Keycloak approached the problem. They describe which architecture the Keycloak team chose, the challenges they faced -and which tools helped along the way. The slides and the recorded video are linked below.

-
-
-

Keycloak

-
-
-

A clustered Keycloak deployment in a single site or datacenter provides sufficient availability for many. However, -an increasing number of organizations need to utilize multiple sites for improved resiliency or to meet legal requirements. -In 2023, Keycloak overhauled its multi-site capabilities for public and private cloud infrastructures, tested them -thoroughly and provided deployment blueprints to the community. As part of the release of Keycloak 24, an active/passive -setup is now fully supported.

-
-
-

Read more about it in the new high availability guide published -as part of Keycloak’s documentation, and get more tools and background information -in the Keycloak Benchmark Project. -Since the previous blog post which covered Keycloak 23, we -have made the configuration of such a setup simpler, with fewer options required by Keycloak and the Keycloak Operator. -Thank you to everyone who provided feedback along the way, and those who participated in our survey in early 2023 which -guided us in the implementation of this setup.

-
-
-

Still, the journey doesn’t stop here: The team is now working on durable sessions across restarts and upgrades, and a -simpler Infinispan architecture which aims to eventually support active/active. Follow these issues and discussions to -stay up-to-date with the latest developments, and provide feedback on Keycloak’s nightly builds.

-
-
-
-
-

Links

-
-
- -
-
-
-
- - - \ No newline at end of file diff --git a/blog/2024/keycloak-at-kubecon-eu-2024-recap.html b/blog/2024/keycloak-at-kubecon-eu-2024-recap.html deleted file mode 100644 index 6c9a8da4..00000000 --- a/blog/2024/keycloak-at-kubecon-eu-2024-recap.html +++ /dev/null @@ -1,504 +0,0 @@ - - - - - - - - -Recap from KubeCon + CloudNativeCon Europe 2024 - - - - - -
-
-

After a packed week of fantastic talks at KubeCon + CloudNativeCon Europe 2024 in Paris, we’re delighted to share our impressions with the rest of the Keycloak community.

-
-
-

Keycloak and OAuth2 Token Exchange for Microservice API Security

-
-
-

The presence of Keycloak in many presentations highlighted its importance in the cloud-native ecosystem. Notably, the talk “OAuth2 Token -Exchange for Microservice API Security” by Ahmet Soormally & Letz Yaara on OAuth2 Token Exchange (RFC 8693) underscored its application in -microservice security and pinpointed areas for Keycloak’s enhancement. Efforts to advance the support for Token Exchange are underway, and community feedback is -invaluable. Please join the discussion on the current usage of Token Exchange to help us out.

-
-
-
-
-

Keycloak and the Secrets of the Universe at CERN

-
-
-

A standout moment was learning about Keycloak’s role at CERN in the talk “The Hard Life of Securing a Particle Accelerator”, as shared by -Antonio Nappi and Sebastian Lopienski, emphasizing its contribution to securing the particle accelerator’s IAM infrastructure. -Keycloak supports research on the nature of the universe. How cool is that :)

-
-
-
-
-

Keycloak, OpenFGA, and Kubernetes Authorizer

-
-
-

Jonathan Whitaker’s talk “Federated IAM for Kubernetes with OpenFGA” on federated IAM with OpenFGA showcased innovative -approaches for managing access to Kubernetes resources through the combination of Keycloak, OpenFGA and a custom Kubernetes Authorizer Web Hook. In particular, the demonstration of temporarily elevated access to Kubernetes resources was very well received.

-
-
-
-
-

Keycloak: The Leading Edge of AuthN and AuthZ

-
-
-

Last but not least, our session, “The Leading Edge of AuthN and AuthZ by Keycloak”, presented by Takashi Norimatsu - and Thomas Darimont, introduced the latest Keycloak advancements, including support for Passkeys, OAuth 2.1, and OpenID for Verifiable Credentials (OpenID4VC). As part of our talk, we showed the current support for Passkeys and some integration options with Open Policy Agent.

-
-
-
-
-

Summary

-
-
-

Keycloak is an essential pillar of many cloud-native systems and significantly impacted the conference, attracting thousands of Kubernetes and cloud-native professionals.

-
-
-

The engagement and collaborative spirit of the cloud-native community were genuinely inspiring, underscoring the collective drive to enhance and innovate within this vibrant ecosystem.

-
-
-

We’re very proud and happy to be part of this fantastic community!

-
-
-
-
- - - \ No newline at end of file diff --git a/blog/images/devoxx_2024.jpg b/blog/images/devoxx_france_2024.jpg similarity index 100% rename from blog/images/devoxx_2024.jpg rename to blog/images/devoxx_france_2024.jpg