Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

dev standalone-keycloak: use keycloak/keycloak:legacy, not latest #1323

Merged
merged 1 commit into from
Jun 22, 2022

Conversation

himdel
Copy link
Collaborator

@himdel himdel commented Jun 20, 2022

when #889 was merged, the current keycloak version was 15.0.2,
since 17.0.0, docker run keycloak/keycloak just shows help instead of running the server
and there's a new *-legacy version which still runs the server

Updating to latest legacy, tested with 18.0.1-legacy

(this seems related to keycloak/keycloak@30d2dcb and making https://github.com/keycloak/keycloak-containers legacy)


Somebody should test this actually works, I've seen it work and I've seen it fail login, either could have been caused by some extra data from running keycloak 15.0.2 which definitely works.

when #889 was merged, the current keycloak version was 15.0.2,
since 17.0.0, docker run keycloak/keycloak just shows help instead of running the server
and there's a *-legacy version which still runs the server

Updating to latest legacy, tested with 18.0.1-legacy

(this seems related to keycloak/keycloak@30d2dcb and making https://github.com/keycloak/keycloak-containers legacy)

No-Issue
@himdel
Copy link
Collaborator Author

himdel commented Jun 20, 2022

Testing...

.compose.env:

COMPOSE_PROFILE=standalone-keycloak
DEV_SOURCE_PATH='galaxy_ng'
LOCK_REQUIREMENTS=1
ANSIBLE_HUB_UI_PATH='/home/himdel/ansible-hub-ui'
DEV_IMAGE_SUFFIX='standalone-keycloak'
WAIT_FOR_MIGRATIONS=1
ENABLE_SIGNING=1
PULP_GALAXY_REQUIRE_CONTENT_APPROVAL=false
PULP_GALAXY_REQUIRE_SIGNATURE_FOR_APPROVAL=false
PULP_GALAXY_AUTO_SIGN_COLLECTIONS=true
#PULP_SOCIAL_AUTH_KEYCLOAK_PUBLIC_KEY="..."
./compose build
./compose up -d postgres redis
./compose up -d keycloak kc-postgres ldap

ansible-galaxy collection install community.general --upgrade
ansible-playbook ./dev/standalone-keycloak/keycloak-playbook.yaml

keep retrying the last one if it fails, until it outputs a long token.

Before:

TASK [Create or update AAP Keycloak realm] *********************************************************************************************
fatal: [localhost]: FAILED! => {"changed": false, "msg": "Could not obtain access token from http://localhost:8080/auth/realms/master/protocol/openid-connect/token: timed out"}

and ./compose ps indicated state Exit 0 for the keycloak container.

After: the script should pass (eventually), the container should not die, and there should be a token on stdout.

... then update .compose.env with PULP_SOCIAL_AUTH_KEYCLOAK_PUBLIC_KEY="that long token"

./compose run --rm api manage migrate
./compose run --rm -e PULP_FIXTURE_DIRS='["/src/galaxy_ng/dev/automation-hub"]' api manage loaddata initial_data.json
./compose down

# actually run
./compose up

(Keycloak login screen should load when accessing localhost:8002)

@netlify
Copy link

netlify bot commented Jun 20, 2022

Deploy Preview for galaxyng ready!

Name Link
🔨 Latest commit 194887a
🔍 Latest deploy log https://app.netlify.com/sites/galaxyng/deploys/62b0d796a850a200099a1d65
😎 Deploy Preview https://deploy-preview-1323--galaxyng.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site settings.

@jctanner
Copy link
Collaborator

/retest

@himdel himdel merged commit 92e0167 into ansible:master Jun 22, 2022
@himdel himdel deleted the keycloak-legacy branch June 22, 2022 18:20
adityamulik pushed a commit to adityamulik/galaxy_ng that referenced this pull request Jul 7, 2022
…sible#1323)

when ansible#889 was merged, the current keycloak version was 15.0.2,
since 17.0.0, docker run keycloak/keycloak just shows help instead of running the server
and there's a *-legacy version which still runs the server

Updating to latest legacy, tested with 18.0.1-legacy

(this seems related to keycloak/keycloak@30d2dcb and making https://github.com/keycloak/keycloak-containers legacy)

No-Issue
adityamulik added a commit to adityamulik/galaxy_ng that referenced this pull request Jul 7, 2022
- pre_translation.sh
- post_translation.sh

Ref: https://galaxy.ansible.com/ansible/memsource

Turn off collection signing in pr_check.sh (ansible#1324)

No-Issue

Update CRC signature defaults to become python boolean (ansible#1321)

No-Issue

Poll the move task(s) during integration (ansible#1325)

* Poll the move task(s) during integration
* Poll tasks in explicit order.

No-Issue

Signed-off-by: James Tanner <[email protected]>

Improve waits in integration tests (ansible#1322)

* Use wait_for_task util where possible
* Add a wait_for_url util to better poll 404s

No-Issue

set signing keyring for staging and published repos (ansible#1319)

Issue: AAH-1712

Proposal: provide the pulp apis as part of galaxy's supported API surface (ansible#1288)

* Provide the pulp apis as part of galaxy's supported API surface

Issue: AAH-1681

[bugfix] Fix signing feature flags for UI (ansible#1318)

Issue: AAH-1690

Add script for updating packages across branches. (ansible#1296)

No-Issue

Signed-off-by: James Tanner <[email protected]>

dev standalone-keycloak: use keycloak/keycloak:legacy, not latest (ansible#1323)

when ansible#889 was merged, the current keycloak version was 15.0.2,
since 17.0.0, docker run keycloak/keycloak just shows help instead of running the server
and there's a *-legacy version which still runs the server

Updating to latest legacy, tested with 18.0.1-legacy

(this seems related to keycloak/keycloak@30d2dcb and making https://github.com/keycloak/keycloak-containers legacy)

No-Issue

[feature] Add LDAP integration (ansible#1327)

Issue: AAH-1593

Co-authored-by: Chris Hambridge <[email protected]>

Add user profiles to integration tests (ansible#1333)

* Define allowed user profiles for ansible config fixture
* Update the setup for test users
* Use new org_admin user instead of context manager workaround
* Ensure user is added to RH identity group even if user already created
* Skip token auth for ephemeral

Issue: AAH-1449

Edit integration test users to specify non-admins (ansible#1334)

* Remove unused user profiles
* Use the basic_user profile where possible
* Explicitly use admin user where needed
* Define test data in one place for all methods of calling tests
* Remove an xfail to confirm test fails as expected

No-Issue

Update filter for indexing EEs from catalog.redhat.com (ansible#1346)

Issue: AAH-1737

Add diagnose messages to the feature-flags endpoint (ansible#1332)

Issue: AAH-1738

Improve integration tests and test data (ansible#1342)

* Replace data fixture call with setup_test_data.py
* Remove unused data setup scripts
* Match python conditional to how bash checks for HUB_LOCAL
* Stop skipping test for use_distribution, remove unneeded profiles
* Unskip test_auth tests for standalone mode
* Add integration test README

No-Issue
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants