Skip to content
Draft
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
29 commits
Select commit Hold shift + click to select a range
c8e0591
Migration: Upgrade Keycloak from Bitnami to Official Operator v26.5.0
sandeepbh5 Jan 13, 2026
c6f3f09
fix: update login client ID from admin-cli to system-client in deploy…
sandeepbh5 Jan 13, 2026
2a2b9b5
fix: correct platform-keycloak bootstrap admin configuration per CRD …
sandeepbh5 Jan 13, 2026
2e57835
Fix app-orch-tenant-controller M2M authentication and re-enable brute…
sandeepbh5 Jan 14, 2026
4c3f7a4
fix: update Keycloak secret to use username and password fields
sandeepbh5 Jan 14, 2026
85c272d
fix: enable brute-force protection for Keycloak realm configuration
sandeepbh5 Jan 14, 2026
244f5a2
Refactor code structure for improved readability and maintainability
sandeepbh5 Jan 14, 2026
e9ab49e
fix: use single quotes for keycloak password to prevent shell expansi…
sandeepbh5 Jan 14, 2026
9e7d287
fix: update repository URL and path for traefik-extra-objects applica…
sandeepbh5 Jan 14, 2026
920b0e0
fix: prevent shell variable expansion in kubectl secret creation comm…
sandeepbh5 Jan 14, 2026
984dc2a
fix: prevent shell variable expansion in Keycloak bootstrap admin pas…
sandeepbh5 Jan 14, 2026
be7f3f3
fix: streamline Keycloak bootstrap admin credentials injection and cl…
sandeepbh5 Jan 16, 2026
afaf829
Move M2M secrets extractor Job to keycloak-instance chart
sandeepbh5 Jan 16, 2026
be1bef7
Update platform-keycloak ArgoCD Application to use orch-utils keycloa…
sandeepbh5 Jan 16, 2026
e7ead33
Merge branch 'main' into bitnamilegacy-to-official-keycloak-02dec
sandeepbh5 Jan 18, 2026
abf0066
Fix lint configuration and Go version compatibility
sandeepbh5 Jan 18, 2026
d4f46c5
Merge branch 'main' into bitnamilegacy-to-official-keycloak-02dec
sandeepbh5 Jan 19, 2026
9c83af7
Remove keycloakConfigCli override from custom template to fix merging…
sandeepbh5 Jan 19, 2026
e9e72d8
Remove remaining keycloakConfigCli partial overrides causing merging …
sandeepbh5 Jan 19, 2026
7c6058b
Merge branch 'main' into bitnamilegacy-to-official-keycloak-02dec
sandeepbh5 Jan 19, 2026
ed75b80
Fix CI pipeline: downgrade Go 1.24.9 to 1.23.4 for golangci-lint comp…
sandeepbh5 Jan 20, 2026
9737867
Fix CI pipeline: use Go 1.24.4 (from main branch) instead of 1.24.9
sandeepbh5 Jan 20, 2026
3ea5b0f
Fix configuration issues for keycloak migration
sandeepbh5 Jan 20, 2026
4ad87c9
Add admin-password to keycloak secrets in Makefile and functions.sh
sandeepbh5 Jan 20, 2026
db4cd92
Increase Helm timeout for Gitea installation and upgrade to 25 minute…
sandeepbh5 Jan 20, 2026
4425db1
Add Keycloak readiness check before Gitea deployment and reduce Helm …
sandeepbh5 Jan 20, 2026
368db41
Enhance Gitea deployment scripts with prerequisite checks and improve…
sandeepbh5 Jan 20, 2026
21688a8
Update sync-wave value for copy-ca-cert-gitea-to-app application to 2150
sandeepbh5 Jan 20, 2026
93dc52a
Move Gitea deployment to ArgoCD management with sync-wave 2100 for im…
sandeepbh5 Jan 20, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions .github/actions/collect_diagnostics/action.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,7 @@ runs:
run: |
mkdir -p kind-diagnostics
kubectl get pods -o wide -A > kind-diagnostics/pods-list.txt
kubectl get all -A > kind-diagnostics/kubectl-get-all.txt
kubectl describe pods -A > kind-diagnostics/pods-describe.txt
mage logutils:collectArgoDiags > kind-diagnostics/argo-diag.txt
kubectl get applications -o yaml -A > kind-diagnostics/argocd-applications.yaml
Expand All @@ -23,6 +24,7 @@ runs:
name: kind-diagnostics
path: |
kind-diagnostics/pods-list.txt
kind-diagnostics/kubectl-get-all.txt
kind-diagnostics/pods-describe.txt
kind-diagnostics/argo-diag.txt
kind-diagnostics/argocd-applications.yaml
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/virtual-integration.yml
Original file line number Diff line number Diff line change
Expand Up @@ -762,7 +762,7 @@ jobs:
REQUESTS_CA_BUNDLE: /usr/local/share/ca-certificates/orch-ca.crt
LIBVIRT_DEFAULT_URI: 'qemu:///system'
run: |
KC_ADMIN_PWD=$(kubectl -n orch-platform get secrets platform-keycloak -o jsonpath='{.data.admin-password}' | base64 -d)
KC_ADMIN_PWD=$(kubectl -n orch-platform get secrets platform-keycloak -o jsonpath='{.data.password}' | base64 -d)
# Add the password to the orchestrator config
yq eval ".orchestrator.admin_password = \"${KC_ADMIN_PWD}\"" -i orchestrator-configs/on-prem.yaml

Expand Down
1 change: 0 additions & 1 deletion argocd/applications/configs/app-orch-catalog.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -36,5 +36,4 @@ openpolicyagent:
readOnlyRootFilesystem: true
resources: null
vaultServerAddress: http://vault.orch-platform.svc.cluster.local:8200
serviceAccount: orch-svc

Original file line number Diff line number Diff line change
Expand Up @@ -12,5 +12,4 @@ configProvisioner:
releaseServiceBase: "rs-proxy.orch-platform.svc.cluster.local:8081"
releaseServiceProxyRootUrl: "oci://rs-proxy.orch-platform.svc.cluster.local:8443"
manifestPath: "/edge-orch/en/file/cluster-extension-manifest"
serviceAccount: "orch-svc"
resources: null
1 change: 1 addition & 0 deletions argocd/applications/configs/cluster-manager.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -16,3 +16,4 @@ curlImage:
name: badouralix/curl-jq@sha256
tag: 8ee002ae4452b23a3c70750c5c081e95334cfe9f7968fb4d67a90d4001c29d0b
pullPolicy: IfNotPresent

Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ refreshInterval: "0m" # no need to refresh, default admin password is created
targetSecretName: platform-keycloak
sourceSecretName: platform-keycloak
keyName:
- source: admin-password
- source: password
target: admin-password

externalSecretsApiGroup: external-secrets.io/v1
Loading
Loading