Update remote cache default

This commit is contained in:
Guido Grazioli 2025-05-02 11:26:27 +02:00
commit c45f7c0d60
3 changed files with 17 additions and 23 deletions

View file

@ -7,10 +7,6 @@
tasks: tasks:
- name: "Run preparation common to all scenario" - name: "Run preparation common to all scenario"
ansible.builtin.include_tasks: ../prepare.yml ansible.builtin.include_tasks: ../prepare.yml
vars:
assets:
- "{{ assets_server }}/sso/7.6.0/rh-sso-7.6.0-server-dist.zip"
- "{{ assets_server }}/sso/7.6.1/rh-sso-7.6.1-patch.zip"
- name: Create controller directory for downloads - name: Create controller directory for downloads
ansible.builtin.file: # noqa risky-file-permissions delegated, uses controller host user ansible.builtin.file: # noqa risky-file-permissions delegated, uses controller host user
@ -22,7 +18,7 @@
- name: Download keycloak archive to controller directory - name: Download keycloak archive to controller directory
ansible.builtin.get_url: # noqa risky-file-permissions delegated, uses controller host user ansible.builtin.get_url: # noqa risky-file-permissions delegated, uses controller host user
url: https://github.com/keycloak/keycloak/releases/download/26.0.7/keycloak-26.0.7.zip url: https://github.com/keycloak/keycloak/releases/download/26.0.8/keycloak-26.0.8.zip
dest: /tmp/keycloak dest: /tmp/keycloak
mode: '0640' mode: '0640'
delegate_to: localhost delegate_to: localhost

View file

@ -110,14 +110,12 @@ keycloak_quarkus_metrics_enabled: false
keycloak_quarkus_health_enabled: true keycloak_quarkus_health_enabled: true
### infinispan remote caches access (hotrod) ### infinispan remote caches access (hotrod)
keycloak_quarkus_ispn_user: supervisor keycloak_quarkus_cache_remote_username: supervisor
keycloak_quarkus_ispn_pass: supervisor keycloak_quarkus_cache_remote_password: supervisor
keycloak_quarkus_ispn_hosts: "localhost:11222" keycloak_quarkus_cache_remote_host: "localhost:11222"
keycloak_quarkus_ispn_sasl_mechanism: SCRAM-SHA-512 keycloak_quarkus_cache_remote_tls_enabled: false
keycloak_quarkus_ispn_use_ssl: false keycloak_quarkus_cache_remote_sasl_mechanism: SCRAM-SHA-512
# if ssl is enabled, import ispn server certificate here
keycloak_quarkus_ispn_trust_store_path: /etc/pki/java/cacerts
keycloak_quarkus_ispn_trust_store_password: changeit
### database backend engine: values [ 'postgres', 'mariadb' ] ### database backend engine: values [ 'postgres', 'mariadb' ]
keycloak_quarkus_db_engine: postgres keycloak_quarkus_db_engine: postgres

View file

@ -1,22 +1,22 @@
{{ ansible_managed | comment }} {{ ansible_managed | comment }}
{% if keycloak_quarkus_ha_enabled %} {% if keycloak_quarkus_ha_enabled %}
{% if keycloak_quarkus_version.split('.')[0] | int < 22 %} {% if keycloak_quarkus_version.split('.')[0] | int < 22 %}
quarkus.infinispan-client.server-list={{ keycloak_quarkus_ispn_hosts }} quarkus.infinispan-client.server-list={{ keycloak_quarkus_cache_remote_host }}
quarkus.infinispan-client.auth-username={{ keycloak_quarkus_ispn_user }} quarkus.infinispan-client.auth-username={{ keycloak_quarkus_cache_remote_username }}
quarkus.infinispan-client.auth-password={{ keycloak_quarkus_ispn_pass }} quarkus.infinispan-client.auth-password={{ keycloak_quarkus_cache_remote_password }}
{% else %} {% else %}
quarkus.infinispan-client.hosts={{ keycloak_quarkus_ispn_hosts }} quarkus.infinispan-client.hosts={{ keycloak_quarkus_cache_remote_host }}
quarkus.infinispan-client.username={{ keycloak_quarkus_ispn_user }} quarkus.infinispan-client.username={{ keycloak_quarkus_cache_remote_username }}
quarkus.infinispan-client.password={{ keycloak_quarkus_ispn_pass }} quarkus.infinispan-client.password={{ keycloak_quarkus_cache_remote_password }}
{% endif %} {% endif %}
quarkus.infinispan-client.client-intelligence=HASH_DISTRIBUTION_AWARE quarkus.infinispan-client.client-intelligence=HASH_DISTRIBUTION_AWARE
quarkus.infinispan-client.use-auth=true quarkus.infinispan-client.use-auth=true
quarkus.infinispan-client.auth-realm=default quarkus.infinispan-client.auth-realm=default
quarkus.infinispan-client.auth-server-name=infinispan quarkus.infinispan-client.auth-server-name=infinispan
quarkus.infinispan-client.sasl-mechanism={{ keycloak_quarkus_ispn_sasl_mechanism }} quarkus.infinispan-client.sasl-mechanism={{ keycloak_quarkus_cache_remote_sasl_mechanism }}
{% if keycloak_quarkus_ispn_use_ssl %} {% if keycloak_quarkus_cache_remote_tls_enabled %}
quarkus.infinispan-client.trust-store={{ keycloak_quarkus_ispn_trust_store_path }} quarkus.infinispan-client.trust-store={{ keycloak_quarkus_https_trust_store_file }}
quarkus.infinispan-client.trust-store-password={{ keycloak_quarkus_ispn_trust_store_password }} quarkus.infinispan-client.trust-store-password={{ keycloak_quarkus_https_trust_store_password }}
quarkus.infinispan-client.trust-store-type=jks quarkus.infinispan-client.trust-store-type=jks
{% endif %} {% endif %}
#quarkus.infinispan-client.use-schema-registration=true #quarkus.infinispan-client.use-schema-registration=true