ansible-collections/middleware_automation.keycloak
1
0
Fork 0
mirror of https://github.com/ansible-middleware/keycloak.git synced 2025-04-06 19:00:28 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Allow to override jgroups subnet

Browse source
This commit is contained in:
Guido Grazioli 2023-06-10 16:31:19 +02:00
parent e99a0db174
commit 1dd579a6d1
5 changed files with 12 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
roles/keycloak/README.md
View file

@ -165,7 +165,7 @@ The following variables are _optional_:
|:---------|:------------| |:---------|:------------|
|`keycloak_db_valid_conn_sql` | Override the default database connection validation query sql | |`keycloak_db_valid_conn_sql` | Override the default database connection validation query sql |
|`keycloak_admin_url` | Override the default administration endpoint URL | |`keycloak_admin_url` | Override the default administration endpoint URL |
|`keycloak_jgroups_subnet`| Override the subnet match for jgroups cluster formation; if not defined, it will be inferred from local machine route configuration |
Example Playbook Example Playbook
----------------- -----------------

1
roles/keycloak/defaults/main.yml
View file

@ -42,6 +42,7 @@ keycloak_http_port: 8080
keycloak_https_port: 8443 keycloak_https_port: 8443
keycloak_ajp_port: 8009 keycloak_ajp_port: 8009
keycloak_jgroups_port: 7600 keycloak_jgroups_port: 7600
keycloak_jgroups_subnet:
keycloak_management_port_bind_address: 127.0.0.1 keycloak_management_port_bind_address: 127.0.0.1
keycloak_management_http_port: 9990 keycloak_management_http_port: 9990
keycloak_management_https_port: 9993 keycloak_management_https_port: 9993

4
roles/keycloak/meta/argument_specs.yml
View file

@ -347,6 +347,10 @@ argument_specs:
required: False required: False
description: "Override the default administration endpoint URL" description: "Override the default administration endpoint URL"
type: "str" type: "str"
keycloak_jgroups_subnet:
required: False
description: "Override the subnet match for jgroups cluster formation; if not defined, it will be inferred from local machine route configuration"
type: "str"
downstream: downstream:
options: options:
sso_version: sso_version:

4
roles/keycloak/templates/standalone-ha.xml.j2
View file

@ -662,7 +662,9 @@
<inet-address value="{{ keycloak_management_port_bind_address }}"/> <inet-address value="{{ keycloak_management_port_bind_address }}"/>
</interface> </interface>
<interface name="jgroups"> <interface name="jgroups">
{% if ansible_default_ipv4 is defined %} {% keycloak_jgroups_subnet is defined and keycloak_jgroups_subnet | length > 0 %}
<subnet-match value="{{ keycloak_jgroups_subnet }}"/>
{% elif ansible_default_ipv4 is defined and (ansible_default_ipv4.network + '/' + ansible_default_ipv4.netmask) | ansible.utils.ipaddr('net') | length > 0 %}
<subnet-match value="{{ (ansible_default_ipv4.network + '/' + ansible_default_ipv4.netmask) | ansible.utils.ipaddr('net') }}"/> <subnet-match value="{{ (ansible_default_ipv4.network + '/' + ansible_default_ipv4.netmask) | ansible.utils.ipaddr('net') }}"/>
{% else %} {% else %}
<any-address /> <any-address />

4
roles/keycloak/templates/standalone-infinispan.xml.j2
View file

@ -700,7 +700,9 @@
<inet-address value="{{ keycloak_management_port_bind_address }}"/> <inet-address value="{{ keycloak_management_port_bind_address }}"/>
</interface> </interface>
<interface name="jgroups"> <interface name="jgroups">
{% if ansible_default_ipv4 is defined %} {% keycloak_jgroups_subnet is defined and keycloak_jgroups_subnet | length > 0 %}
<subnet-match value="{{ keycloak_jgroups_subnet }}"/>
{% elif ansible_default_ipv4 is defined and (ansible_default_ipv4.network + '/' + ansible_default_ipv4.netmask) | ansible.utils.ipaddr('net') | length > 0 %}
<subnet-match value="{{ (ansible_default_ipv4.network + '/' + ansible_default_ipv4.netmask) | ansible.utils.ipaddr('net') }}"/> <subnet-match value="{{ (ansible_default_ipv4.network + '/' + ansible_default_ipv4.netmask) | ansible.utils.ipaddr('net') }}"/>
{% else %} {% else %}
<any-address /> <any-address />