ISTI-ansible-roles
/
ansible-role-keycloak
4
0
Fork 2
Code Issues Pull Requests Releases Wiki Activity

Some more options for the standalone clusered mode

This commit is contained in:
Andrea Dell'Amico 2020-10-19 16:01:19 +02:00
parent b7843a51d4
commit d927c57101
3 changed files with 13 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
defaults/main.yml
View File

@ -7,6 +7,11 @@ keycloak_log_directory: '/var/log/keycloak'
# domain clustered mode is not supported at this time
keycloak_wildfly_mode: 'standalone'
keycloak_wildfly_clustered: False
keycloak_wildfly_cluster_node_name: '{{ ansible_hostname }}'
keycloak_wildfly_cluster_private_bind_address: '{{ ansible_default_ipv4.interface }}'
keycloak_wildfly_mping_multicast_address: '230.0.0.4'
keycloak_wildfly_jgroups_udp_multicast_address: '230.0.0.4'
keycloak_wildfly_modcluster_multicast_address: '224.0.1.105'
keycloak_listen: '127.0.0.1'
keycloak_java_min_heap: '2048m'
keycloak_java_max_heap: '{{ keycloak_java_min_heap }}'

2
templates/keycloak.service.j2
View File

@ -9,7 +9,7 @@ Environment=JBOSS_LOG_DIR={{ keycloak_log_directory }}
Environment="JAVA_OPTS=-Xms{{ keycloak_java_min_heap }} -Xmx{{ keycloak_java_max_heap }}"
User={{ keycloak_user }}
Group={{ keycloak_user }}
ExecStart={{ keycloak_runtime_home }}/bin/standalone.sh -b {{ keycloak_listen }} {% if keycloak_wildfly_clustered %} --server-config=standalone-ha.xml{% endif %}
ExecStart={{ keycloak_runtime_home }}/bin/standalone.sh -b {{ keycloak_listen }} {% if keycloak_wildfly_clustered %} --server-config=standalone-ha.xml -Djboss.node.name={{ keycloak_wildfly_cluster_node_name }}{% endif %}
TimeoutStartSec=600
TimeoutStopSec=600

10
templates/standalone-ha.xml.j2
View File

@ -666,7 +666,11 @@
<inet-address value="${jboss.bind.address.management:127.0.0.1}"/>
</interface>
<interface name="private">
{% if keycloak_wildfly_clustered %}
<inet-address value="{{ keycloak_wildfly_cluster_private_bind_address }}"/>
{% else %}
<inet-address value="${jboss.bind.address.private:127.0.0.1}"/>
{% endif %}
</interface>
<interface name="public">
<inet-address value="${jboss.bind.address:127.0.0.1}"/>
@ -679,14 +683,14 @@
{% if keycloak_behind_reverse_proxy %}
<socket-binding name="proxy-https" port="443"/>
{% endif %}
<socket-binding name="jgroups-mping" interface="private" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45700"/>
<socket-binding name="jgroups-mping" interface="private" multicast-address="{{ keycloak_wildfly_mping_multicast_address }}" multicast-port="45700"/>
<socket-binding name="jgroups-tcp" interface="private" port="7600"/>
<socket-binding name="jgroups-tcp-fd" interface="private" port="57600"/>
<socket-binding name="jgroups-udp" interface="private" port="55200" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45688"/>
<socket-binding name="jgroups-udp" interface="private" port="55200" multicast-address="{{ keycloak_wildfly_jgroups_udp_multicast_address }}" multicast-port="45688"/>
<socket-binding name="jgroups-udp-fd" interface="private" port="54200"/>
<socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/>
<socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/>
<socket-binding name="modcluster" multicast-address="${jboss.modcluster.multicast.address:224.0.1.105}" multicast-port="23364"/>
<socket-binding name="modcluster" multicast-address="{{ keycloak_wildfly_modcluster_multicast_address }}" multicast-port="23364"/>
<socket-binding name="txn-recovery-environment" port="4712"/>
<socket-binding name="txn-status-manager" port="4713"/>
<outbound-socket-binding name="mail-smtp">