Skip to content

feat: Keycloak Version Upgrade to v26.3.3 - #309

Open
arnabcx wants to merge 11 commits into
eclipse-tractusx:mainfrom
Cofinity-X:feat/keycloak-upgrade-v26.3.0
Open

feat: Keycloak Version Upgrade to v26.3.3#309
arnabcx wants to merge 11 commits into
eclipse-tractusx:mainfrom
Cofinity-X:feat/keycloak-upgrade-v26.3.0

Conversation

@arnabcx

@arnabcx arnabcx commented Oct 6, 2025

Copy link
Copy Markdown
Contributor

Description

This PR upgrades both centralidp and sharedidp Helm charts from Keycloak 25.0.6 to 26.3.3, using Bitnami chart version 25.2.0. The upgrade maintains backward compatibility with existing /auth/ paths and preserves the bitnamilegacy image repository requirement.

Key Changes:

  • Updated appVersion from 25.0.6 to 26.3.3 in both Chart.yaml files
  • Updated Bitnami Keycloak chart dependency from 23.0.0 to 25.2.0
  • Updated Keycloak image tags from 25.0.6-debian-12-r0 to 26.3.3-debian-12-r0
  • Maintained httpRelativePath: /auth/ for backward compatibility
  • Updated Chart.lock files with new dependency versions
  • Preserved bitnamilegacy/keycloak image repository

Why

This upgrade is necessary to:

  • Address security vulnerabilities in Keycloak 25.0.6
  • Leverage new features and performance improvements in Keycloak 26.3.3
  • Stay current with supported Keycloak versions
  • Maintain compatibility with existing authentication flows while using modern Keycloak features

The upgrade ensures that existing deployments continue to work seamlessly with the /auth/ path structure that applications depend on.

Issue

Link to Github issue.

Checklist

Please delete options that are not relevant.

  • I have followed the contributing guidelines
  • I have added copyright and license headers, footers (for .md files) or files (for images)
  • I have performed a self-review of my changes
  • I have successfully tested my changes
  • I have added comments in the default values.yaml file with helm-docs syntax ('# -- ') if relevant for installation
  • I have commented my changes, particularly in hard-to-understand areas

@arnabcx

arnabcx commented Oct 13, 2025

Copy link
Copy Markdown
Contributor Author

Hello @Phil91, I have created this PR for the Keycloak upgrade.
NOTE: There are changes in the annotation hence the two workflows failed. Let me know if we still need to pass it.

Also, please review and let me know in case of any changes required.

@arnabcx arnabcx changed the title feat: Keycloak Version Upgrade to v26.3.3 feat: Keycloak Version Upgrade to v26.3.3 Oct 13, 2025
@arnabcx

arnabcx commented Oct 30, 2025

Copy link
Copy Markdown
Contributor Author

@typecastcloud Could you please review this PR and let me know in case of any changes required.

@arnabcx

arnabcx commented Nov 4, 2025

Copy link
Copy Markdown
Contributor Author

@typecastcloud The lint workflow is failing because of the new annotation app.kubernetes.io/part-of: keycloak being added. This is coming from the new chart version of bitnami part of Kubernetes best practices.

@typecastcloud

Copy link
Copy Markdown
Contributor

Hi @arnabcx, updates looks good but the workflow changes are very complex just to enable force upgrade for specific cases. 🤔

@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: No status

Development

Successfully merging this pull request may close these issues.

2 participants