ISTI-ansible-roles
/
ansible-role-keycloak
4
0
Fork 2
Code Issues Pull Requests Releases Wiki Activity

Fixes #19563. Add a validation check to the Keycloak DS.

This commit is contained in:
Andrea Dell'Amico 2020-07-01 12:56:13 +02:00
parent 9bd5a14648
commit b029045dda
3 changed files with 24 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
defaults/main.yml
View File

@ -12,6 +12,7 @@ keycloak_java_min_heap: '2048m'
keycloak_java_max_heap: '{{ keycloak_java_min_heap }}'
keycloak_use_external_db: True
# postgresql is the only supported choice for the time being
keycloak_db: 'postgresql'
keycloak_db_module_name: 'org.{{ keycloak_db }}'
keycloak_db_module_path: 'org/{{ keycloak_db }}'
@ -24,6 +25,7 @@ keycloak_database_user: keycloak_u
#keycloak_database_password: 'define it into a vault file'
keycloak_database_host: 'localhost'
keycloak_database_max_pool_size: '50'
keycloak_database_jboss_connection_checker: True
keycloak_admin_user: kadmin
#keycloak_admin_password: 'define it into a vault file'

12
templates/standalone-ha.xml.j2
View File

@ -139,7 +139,17 @@
<pool>
<max-pool-size>{{ keycloak_database_max_pool_size }}</max-pool-size>
</pool>
<validation>
{% if keycloak_database_jboss_connection_checker %}
<valid-connection-checker class-name="org.jboss.jca.adapters.jdbc.extensions.postgres.PostgreSQLValidConnectionChecker"></valid-connection-checker>
<exception-sorter class-name="org.jboss.jca.adapters.jdbc.extensions.postgres.PostgreSQLExceptionSorter"></exception-sorter>
{% else %}
<check-valid-connection-sql>select 1</check-valid-connection-sql>
<validate-on-match>false</validate-on-match>
<background-validation>true</background-validation>
<background-validation-millis>10000</background-validation-millis>
{% endif %}
</validation>
<security>
<user-name>{{ keycloak_database_user }}</user-name>
<password>{{ keycloak_database_password }}</password>

12
templates/standalone.xml.j2
View File

@ -137,7 +137,17 @@
<pool>
<max-pool-size>{{ keycloak_database_max_pool_size }}</max-pool-size>
</pool>
<validation>
{% if keycloak_database_jboss_connection_checker %}
<valid-connection-checker class-name="org.jboss.jca.adapters.jdbc.extensions.postgres.PostgreSQLValidConnectionChecker"></valid-connection-checker>
<exception-sorter class-name="org.jboss.jca.adapters.jdbc.extensions.postgres.PostgreSQLExceptionSorter"></exception-sorter>
{% else %}
<check-valid-connection-sql>select 1</check-valid-connection-sql>
<validate-on-match>false</validate-on-match>
<background-validation>true</background-validation>
<background-validation-millis>10000</background-validation-millis>
{% endif %}
</validation>
<security>
<user-name>{{ keycloak_database_user }}</user-name>
<password>{{ keycloak_database_password }}</password>