test: Use Keycloak version 26.3 for tests (#192)

- Updated Keycloak version to 26.3  for test cases.
- Tests: changed the alias and providerId from "instagram" to "github"
because the "instagram" provider was deprecated and isn't available by default.
- Added a note about the FGAP:V1 for KeycloakClient.Spec.AdminFineGrainedPermissionsEnabled.
More details: https://www.keycloak.org/docs/latest/upgrading/index.html#migrating-to-26-2-0

Author: zmotso

api/v1/keycloakclient_types.go

@@ -132,7 +132,8 @@ type KeycloakClientSpec struct {
 	AuthorizationServicesEnabled bool `json:"authorizationServicesEnabled,omitempty"`
 
 	// AdminFineGrainedPermissionsEnabled enable/disable fine-grained admin permissions for a client.
-	// Feature flag ADMIN_FINE_GRAINED_AUTHZ should be enabled in Keycloak server.
+	// Feature flag admin-fine-grained-authz:v1 should be enabled in Keycloak server.
+	// Important: FGAP:V1 Keycloak feature remains in preview and may be deprecated and removed in a future releases.
 	// +optional
 	AdminFineGrainedPermissionsEnabled bool `json:"adminFineGrainedPermissionsEnabled,omitempty"`
 

bundle/manifests/edp-keycloak-operator.clusterserviceversion.yaml

@@ -454,12 +454,11 @@ metadata:
             "name": "keycloakrealmidentityprovider-sample"
           },
           "spec": {
-            "alias": "instagram",
+            "alias": "github",
             "authenticateByDefault": false,
             "config": {
               "clientId": "foo",
               "clientSecret": "$secretName:secretKey",
-              "hideOnLoginPage": "true",
               "syncMode": "IMPORT",
               "useJwksUrl": "true"
             },
@@ -471,7 +470,7 @@ metadata:
                   "role": "role-tr",
                   "syncMode": "INHERIT"
                 },
-                "identityProviderAlias": "instagram",
+                "identityProviderAlias": "github",
                 "identityProviderMapper": "oidc-hardcoded-role-idp-mapper",
                 "name": "test3212"
               },
@@ -481,12 +480,12 @@ metadata:
                   "attribute.value": "bar",
                   "syncMode": "IMPORT"
                 },
-                "identityProviderAlias": "instagram",
+                "identityProviderAlias": "github",
                 "identityProviderMapper": "hardcoded-attribute-idp-mapper",
                 "name": "test-33221"
               }
             ],
-            "providerId": "instagram",
+            "providerId": "github",
             "realmRef": {
               "kind": "KeycloakRealm",
               "name": "keycloakrealm-sample"

config/crd/bases/v1.edp.epam.com_keycloakclients.yaml

@@ -47,7 +47,8 @@ spec:
               adminFineGrainedPermissionsEnabled:
                 description: |-
                   AdminFineGrainedPermissionsEnabled enable/disable fine-grained admin permissions for a client.
-                  Feature flag ADMIN_FINE_GRAINED_AUTHZ should be enabled in Keycloak server.
+                  Feature flag admin-fine-grained-authz:v1 should be enabled in Keycloak server.
+                  Important: FGAP:V1 Keycloak feature remains in preview and may be deprecated and removed in a future releases.
                 type: boolean
               adminUrl:
                 description: |-

config/samples/v1_v1_keycloakrealmidentityprovider.yaml

@@ -6,27 +6,26 @@ spec:
   realmRef:
     name: keycloakrealm-sample
     kind: KeycloakRealm
-  alias: instagram
+  alias: github
   authenticateByDefault: false
   enabled: true
   firstBrokerLoginFlowAlias: "first broker login"
-  providerId: "instagram"
+  providerId: "github"
   config:
     clientId: "foo"
     clientSecret: "$secretName:secretKey"
-    hideOnLoginPage: "true"
     syncMode: "IMPORT"
     useJwksUrl: "true"
   mappers:
     - name: "test3212"
       identityProviderMapper: "oidc-hardcoded-role-idp-mapper"
-      identityProviderAlias: "instagram"
+      identityProviderAlias: "github"
       config:
         role: "role-tr"
         syncMode: "INHERIT"
     - name: "test-33221"
       identityProviderMapper: "hardcoded-attribute-idp-mapper"
-      identityProviderAlias: "instagram"
+      identityProviderAlias: "github"
       config:
         attribute: "foo"
         "attribute.value": "bar"

deploy-templates/Chart.yaml

@@ -183,30 +183,29 @@ annotations:
     - apiVersion: v1.edp.epam.com/v1
       kind: KeycloakRealmIdentityProvider
       metadata:
-        name: instagram-test
+        name: github-test
       spec:
         realm: d2-id-k8s-realm-name
-        alias: instagram
+        alias: github
         authenticateByDefault: false
         enabled: true
         firstBrokerLoginFlowAlias: "first broker login"
-        providerId: "instagram"
+        providerId: "github"
         config:
           clientId: "foo"
           clientSecret: "bar"
-          hideOnLoginPage: "true"
           syncMode: "IMPORT"
           useJwksUrl: "true"
         mappers:
           - name: "test3212"
             identityProviderMapper: "oidc-hardcoded-role-idp-mapper"
-            identityProviderAlias: "instagram"
+            identityProviderAlias: "github"
             config:
               role: "role-tr"
               syncMode: "INHERIT"
           - name: "test-33221"
             identityProviderMapper: "hardcoded-attribute-idp-mapper"
-            identityProviderAlias: "instagram"
+            identityProviderAlias: "github"
             config:
               attribute: "foo"
               "attribute.value": "bar"

deploy-templates/_crd_examples/keycloakrealmidentityprovider.yaml

@@ -6,21 +6,20 @@ spec:
   realmRef:
     kind: KeycloakRealm
     name: keycloakrealm-sample
-  alias: instagram
+  alias: github
   authenticateByDefault: false
   enabled: true
   firstBrokerLoginFlowAlias: "first broker login"
-  providerId: "instagram"
+  providerId: "github"
   config:
     clientId: "foo"
     clientSecret: "$secretName:secretKey"
-    hideOnLoginPage: "true"
     syncMode: "IMPORT"
     useJwksUrl: "true"
   mappers:
     - name: "test-33221"
       identityProviderMapper: "hardcoded-attribute-idp-mapper"
-      identityProviderAlias: "instagram"
+      identityProviderAlias: "github"
       config:
         attribute: "foo"
         "attribute.value": "bar"

deploy-templates/crds/v1.edp.epam.com_keycloakclients.yaml

@@ -47,7 +47,8 @@ spec:
               adminFineGrainedPermissionsEnabled:
                 description: |-
                   AdminFineGrainedPermissionsEnabled enable/disable fine-grained admin permissions for a client.
-                  Feature flag ADMIN_FINE_GRAINED_AUTHZ should be enabled in Keycloak server.
+                  Feature flag admin-fine-grained-authz:v1 should be enabled in Keycloak server.
+                  Important: FGAP:V1 Keycloak feature remains in preview and may be deprecated and removed in a future releases.
                 type: boolean
               adminUrl:
                 description: |-

docs/api.md

@@ -1967,7 +1967,8 @@ KeycloakClientSpec defines the desired state of KeycloakClient.
         <td>boolean</td>
         <td>
           AdminFineGrainedPermissionsEnabled enable/disable fine-grained admin permissions for a client.
-Feature flag ADMIN_FINE_GRAINED_AUTHZ should be enabled in Keycloak server.<br/>
+Feature flag admin-fine-grained-authz:v1 should be enabled in Keycloak server.
+Important: FGAP:V1 Keycloak feature remains in preview and may be deprecated and removed in a future releases.<br/>
         </td>
         <td>false</td>
       </tr><tr>

internal/controller/keycloakrealmidentityprovider/keycloakrealmidentityprovider_controller_integration_test.go

@@ -45,7 +45,7 @@ var _ = Describe("KeycloakRealmIdentityProvider controller", func() {
 					Name: KeycloakRealmCR,
 					Kind: keycloakApi.KeycloakRealmKind,
 				},
-				ProviderID: "instagram",
+				ProviderID: "github",
 				Alias:      "new-provider",
 				Config: map[string]string{
 					"clientId":     "provider-client",
@@ -95,7 +95,7 @@ var _ = Describe("KeycloakRealmIdentityProvider controller", func() {
 					Name: KeycloakRealmCR,
 					Kind: keycloakApi.KeycloakRealmKind,
 				},
-				ProviderID:                "instagram",
+				ProviderID:                "github",
 				Alias:                     "identity-provider-with-preserve-resources-on-deletion",
 				Enabled:                   true,
 				DisplayName:               "New provider",

tests/e2e/helm-success-path/01-install-keycloak-server.yaml

@@ -62,20 +62,20 @@ spec:
           - name: configs
             mountPath: /etc/nginx/conf.d
         - name: keycloak
-          image: quay.io/keycloak/keycloak:24.0.4
+          image: quay.io/keycloak/keycloak:26.3
           args:
             - "start-dev"
             - "--proxy-headers"
             - "forwarded"
             - "--http-enabled"
             - "true"
           env:
-            - name: KEYCLOAK_ADMIN
+            - name: KC_BOOTSTRAP_ADMIN_USERNAME
               value: "admin"
-            - name: KEYCLOAK_ADMIN_PASSWORD
+            - name: KC_BOOTSTRAP_ADMIN_PASSWORD
               value: "admin"
             - name: KC_FEATURES
-              value: admin-fine-grained-authz
+              value: admin-fine-grained-authz:v1
           ports:
             - name: http
               containerPort: 8080