mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-09 14:02:56 +09:00
Andrei Kvapil
bf472fb941
## What this PR does Updates the Keycloak Operator Helm chart to v1.32.0 and builds a custom operator image from upstream master (https://github.com/epam/edp-keycloak-operator/commit/facbc36) with the group rename detection patch from PR https://github.com/epam/edp-keycloak-operator/pull/309 applied on top. Bumps Keycloak server from 26.0.4 to 26.5.2, which is required by the new operator client (sends `description` field rejected by older versions). Adds SSO session settings (idleTimeout: 86400, maxLifespan: 604800) to the ClusterKeycloakRealm to match the dashboard client's session attributes, as Keycloak 26 enforces realm-level session limits strictly. Removes `authorizationServicesEnabled` from the dashboard KeycloakClient, which is incompatible with Keycloak 26's stricter validation. ### Release note ```release-note [keycloak-operator] Update the operator to v1.32.0 with group rename fix (https://github.com/epam/edp-keycloak-operator/pull/309). Bump Keycloak to 26.5.2. ``` <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **New Features** * Optional webhook support with cert-manager integration and webhook service; feature toggles for webhooks and owner refs * New realm login and session settings, organizations resource/CRD, and expanded client/user schemas (including ClientRolesV2) * **Documentation** * Chart bumped to 1.32.0; README documents new values (clusterDomain, podLabels, image.registry, securityContext, containerSecurityContext) * **Security / RBAC** * RBAC updated to cover organization resources and webhook bindings; consolidated operator permissions <!-- end of auto-generated comment: release notes by coderabbit.ai -->