keycloak_quarkus

Install keycloak >= 17.0.0 (quarkus) server configurations.

Role Defaults

• Installation options

Variable	Description	Default
keycloak_quarkus_version	keycloak.org package version	17.0.1

• Service configuration

Variable	Description	Default
keycloak_quarkus_ha_enabled	Enable auto configuration for database backend, clustering and remote caches on infinispan	False
keycloak_quarkus_db_enabled	Enable auto configuration for database backend	True if keycloak_quarkus_ha_enabled is True, else False
keycloak_quarkus_admin_user	Administration console user account	admin
keycloak_quarkus_bind_address	Address for binding service ports	0.0.0.0
keycloak_quarkus_host	hostname	localhost
keycloak_quarkus_http_port	HTTP port	8080
keycloak_quarkus_https_port	TLS HTTP port	8443
keycloak_quarkus_ajp_port	AJP port	8009
keycloak_quarkus_jgroups_port	jgroups cluster tcp port	7600
keycloak_quarkus_service_user	Posix account username	keycloak
keycloak_quarkus_service_group	Posix account group	keycloak
keycloak_quarkus_service_pidfile	Pid file path for service	/run/keycloak.pid
keycloak_quarkus_jvm_package	RHEL java package runtime	java-11-openjdk-headless
keycloak_quarkus_java_home	JAVA_HOME of installed JRE, leave empty for using specified keycloak_quarkus_jvm_package RPM path	None
keycloak_quarkus_java_opts	Additional JVM options	-Xms1024m -Xmx2048m
keycloak_quarkus_frontend_url	Service public URL	http://localhost:8080/auth
keycloak_quarkus_http_relative_path	Service context path	auth
keycloak_quarkus_http_enabled	Enable listener on HTTP port	True
keycloak_quarkus_https_enabled	Enable listener on HTTPS port	False
keycloak_quarkus_key_file	The file path to a private key in PEM format	{{ keycloak.home }}/conf/server.key.pem
keycloak_quarkus_cert_file	The file path to a server certificate or certificate chain in PEM format	{{ keycloak.home }}/conf/server.crt.pem

• Database configuration

Variable	Description	Default
keycloak_quarkus_jdbc_engine	Database engine [mariadb,postres]	postgres
keycloak_quarkus_db_user	User for database connection	keycloak-user
keycloak_quarkus_db_pass	Password for database connection	keycloak-pass
keycloak_quarkus_jdbc_url	JDBC URL for connecting to database	jdbc:postgresql://localhost:5432/keycloak
keycloak_quarkus_jdbc_driver_version	Version for JDBC driver	9.4.1212

• Remote caches configuration

Variable	Description	Default
keycloak_quarkus_ispn_user	Username for connecting to infinispan	supervisor
keycloak_quarkus_ispn_pass	Password for connecting to infinispan	supervisor
keycloak_quarkus_ispn_url	URL for connecting to infinispan	localhost
keycloak_quarkus_ispn_sasl_mechanism	Infinispan auth mechanism	SCRAM-SHA-512
keycloak_quarkus_ispn_use_ssl	Whether infinispan uses TLS connection	false
keycloak_quarkus_ispn_trust_store_path	Path to infinispan server trust certificate	/etc/pki/java/cacerts
keycloak_quarkus_ispn_trust_store_password	Password for infinispan certificate keystore	changeit

• Install options

Variable	Description	Default
keycloak_quarkus_offline_install	Perform an offline install	False
keycloak_quarkus_download_url	Download URL for keycloak	https://github.com/keycloak/keycloak/releases/download/<version>/<archive>
keycloak_quarkus_version	keycloak.org package version	17.0.1
keycloak_quarkus_dest	Installation root path	/opt/keycloak
keycloak_quarkus_download_url	Download URL for keycloak	https://github.com/keycloak/keycloak/releases/download/{{ keycloak_quarkus_version }}/{{ keycloak_quarkus_archive }}
keycloak_quarkus_configure_firewalld	Ensure firewalld is running and configure keycloak ports	False

• Miscellaneous configuration

Variable	Description	Default
keycloak_quarkus_metrics_enabled	Whether to enable metrics	False
keycloak_quarkus_health_enabled	If the server should expose health check endpoints	True
keycloak_quarkus_archive	keycloak install archive filename	keycloak-{{ keycloak_quarkus_version }}.zip
keycloak_quarkus_installdir	Installation path	{{ keycloak_quarkus_dest }}/keycloak-{{ keycloak_quarkus_version }}
keycloak_quarkus_home	Installation work directory	{{ keycloak_quarkus_installdir }}
keycloak_quarkus_config_dir	Path for configuration	{{ keycloak_quarkus_home }}/conf
keycloak_quarkus_master_realm	Name for rest authentication realm	master
keycloak_auth_client	Authentication client for configuration REST calls	admin-cli
keycloak_force_install	Remove pre-existing versions of service	False
keycloak_url	URL for configuration rest calls	http://{{ keycloak_quarkus_host }}:{{ keycloak_http_port }}
keycloak_management_url	URL for management console rest calls	http://{{ keycloak_quarkus_host }}:{{ keycloak_management_http_port }}
keycloak_quarkus_log	Enable one or more log handlers in a comma-separated list	file
keycloak_quarkus_log_level	The log level of the root category or a comma-separated list of individual categories and their levels	info
keycloak_quarkus_log_file	Set the log file path and filename relative to keycloak home	data/log/keycloak.log
keycloak_quarkus_log_format	Set a format specific to file log entries	%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n
keycloak_quarkus_proxy_mode	The proxy address forwarding mode if the server is behind a reverse proxy	edge
keycloak_quarkus_start_dev	Whether to start the service in development mode (start-dev)	False
keycloak_quarkus_transaction_xa_enabled	Whether to use XA transactions	True

Role Variables

Variable	Description	Required
keycloak_quarkus_admin_pass	Password of console admin account	yes

License

Apache License 2.0

Author Information

• Guido Grazioli