coop-cloud/keycloak
3
0
Fork 3
Code Issues 7 Pull Requests 1 Releases Wiki Activity

Publish 20.x recipe version #12

New Issue
Closed
opened 2022-11-13 01:03:50 +00:00 by javielico · 11 comments
javielico commented 2022-11-13 01:03:50 +00:00
Owner
Copy Link
Copy Source

Hi folks,

I was exploring this recipe a bit more and got me a bit concerned as the image that we're using from Docker Hub jboss/keycloak:16.1.1 has not been updated for 10 months. I can see that the latest stable is 20.0 as per the repo from Redhat, is there anything we can do about this as it doesnt seem to be an image on dockerhub?

CC @3wordchant @decentral1se

🙏 - J

Hi folks, I was exploring this recipe a bit more and got me a bit concerned as the image that we're using from Docker Hub `jboss/keycloak:16.1.1` has not been updated for 10 months. I can see that the latest stable is 20.0 as per the repo from Redhat, is there anything we can do about this as it doesnt seem to be an image on dockerhub? CC @3wordchant @decentral1se 🙏 - J
❤️ 1
javielico commented 2022-11-13 01:04:48 +00:00
Author
Owner
Copy Link
Copy Source

We could perhaps switch it to this image? https://hub.docker.com/r/keycloak/keycloak/tags

We could perhaps switch it to this image? https://hub.docker.com/r/keycloak/keycloak/tags
3wordchant commented 2022-11-13 03:10:26 +00:00
Owner
Copy Link
Copy Source

Good call, thanks @javielico! 🙏 Images switching repo is one area where we really don't have a good solution for automated monitoring. It recently hit our radar at Autonomic that our Keycloak recipe was falling behind (because of a warning from Dashy, of all things), it's on our list to sort out an update, and keycloak/keycloak seems like a great move.

Race you to trying it out and making a PR for the switch! Either way, much appreciate your work investigating ✊

Good call, thanks @javielico! 🙏 Images switching repo is one area where we really don't have a good solution for automated monitoring. It recently hit our radar at Autonomic that our Keycloak recipe was falling behind (because of a warning from Dashy, of all things), it's on our list to sort out an update, and `keycloak/keycloak` seems like a great move. Race you to trying it out and making a PR for the switch! Either way, much appreciate your work investigating ✊
javielico commented 2022-11-13 16:20:39 +00:00
Author
Owner
Copy Link
Copy Source

No worries @3wordchant, I will put it on my list to test out next week; I will have a look through the changelogs first and test it out on a dev enviroment before raising the PR.

No worries @3wordchant, I will put it on my list to test out next week; I will have a look through the changelogs first and test it out on a dev enviroment before raising the PR.
javielico commented 2022-11-13 16:41:31 +00:00
Author
Owner
Copy Link
Copy Source

Just to add for reference, here's a list of CVE's fixed since the version we've on the docker image (16.1.1)

I will treat these tests as priority for now just to avoid having a security hole on our identity services.

Just to add for reference, here's a list of CVE's fixed since the version we've on the docker image (16.1.1) * https://github.com/keycloak/keycloak/issues/11245 * https://github.com/keycloak/keycloak-containers/issues/393 * https://github.com/keycloak/keycloak/issues/11063 * https://github.com/keycloak/keycloak/issues/11071 * https://github.com/keycloak/keycloak/issues/11196 * https://github.com/keycloak/keycloak/issues/11292 * https://github.com/keycloak/keycloak/issues/14786 * https://github.com/keycloak/keycloak/issues/14787 I will treat these tests as priority for now just to avoid having a security hole on our identity services.
3wordchant commented 2022-11-13 17:43:23 +00:00
Owner
Copy Link
Copy Source

Nice, appreciate that research! 💯

Nice, appreciate that research! 💯
decentral1se commented 2022-11-13 21:47:18 +00:00
Owner
Copy Link
Copy Source

Yeh, excellent to raise this. We need to get on it. We've slipped behind on several major version changes as I understand it? I think the upgrade path will be pretty hairy... haven't dug into it but yeh, let's fix this and get our shit upgraded! Thanks!

Yeh, excellent to raise this. We need to get on it. We've slipped behind on several major version changes as I understand it? I think the upgrade path will be pretty hairy... haven't dug into it but yeh, let's fix this and get our shit upgraded! Thanks!
javielico commented 2022-11-14 22:04:04 +00:00
Author
Owner
Copy Link
Copy Source

No problem @decentral1se, happy to help maintain the recipes!

No problem @decentral1se, happy to help maintain the recipes!
❤️ 1
decentral1se commented 2022-11-16 18:38:54 +00:00
Owner
Copy Link
Copy Source

@javielico we just managed to wire up the changes for an upgrade directly to latest in 2ac47abfcd and tested it on two different deployments. It seems to work! It's late now, so not doing more of the release work for the recipe but will follow up.

@javielico we just managed to wire up the changes for an upgrade directly to latest in https://git.coopcloud.tech/coop-cloud/keycloak/commit/2ac47abfcd82b98b2d0861ad8e086b68178b325f and tested it on two different deployments. It seems to work! It's late now, so not doing more of the release work for the recipe but will follow up.
javielico commented 2022-11-19 15:46:26 +00:00
Author
Owner
Copy Link
Copy Source

Thank you for the merge on this topic @decentral1se

Thank you for the merge on this topic @decentral1se
❤️ 1
decentral1se commented 2022-11-21 10:09:30 +00:00
Owner
Copy Link
Copy Source

Nice, so, this upgrade seems legit, have tested it a lot.

Just leaving this open to push the release / tag now.

Nice, so, this upgrade seems legit, have tested it a lot. Just leaving this open to push the release / tag now.
decentral1se changed title from Image has not been updated for 10 months to Publish 20.x recipe version 2022-11-21 10:10:58 +00:00
knoflook commented 2023-03-06 14:38:31 +00:00
Owner
Copy Link
Copy Source

woohoo we're running 20.x!

woohoo we're running 20.x!
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
No items
No labels
Milestone
No items
No Milestone
Assignees
Clear assignees
3wordchant aadil (Aadil Ayub) abra-bot (Abra Bot) ammaratef45 amras (Sarma) Apfelwurm appletalk arjan basebuilder BornDeleuze Brooke carla cas (Cassowary) codegod100 coopcloud cyrnel decentral1se (d1) dede devydave fauno (fauno) flancian Frando iexos jade (Jade Ambrose) javielico (Javielico) jjsfunhouse jmakdah2 (Jackie Makdah) joe-irving (Joe Irving) kawaiipunk (KawaiiPunk) knoflook kolaente lambdabundesverband linnealovespie (April) marlon (marlon) mayel mirsal moosemower moritz nicksellen (Nick Sellen) notplants oxaliq (sorrel) p4u1 pau pharaohgraphy (Andrew 🐦‍🔥❤️‍🔥✴️) PhiNatalie renovate-bot (Comrade Renovate Bot) ripclap rix rscmbbng sef (sef) simon sixsmith (Sixsmith) stevensting tobias trav (Trav Fryer) val (val (he/him)) vaznasty virtualboys wolcen (Chris Thompson) wykwit xynosis yksflip
No Assignees
4 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: coop-cloud/keycloak#12