Infinispan config

[rausub]

Do i need to Build the containers and caches manually in Infinispan first ??

I have keycloak_quarkus_ha_enabled: true

and specified the ispn hosts and pass however when i go to

http://localhost:11222/

I do not see any caches.

is the ispn-cache.xml enough to build these caches ?

`<!--

• Ansible managed

-->

<jgroups>
    <stack name="tcpping" extends="tcp">
        <!-- <TCP external_addr="${env.KC_EXTERNAL_ADDR}" bind_addr="0.0.0.0" bind_port="7800" /> -->
        <TCPPING
            initial_hosts="10.20.20.21[7800],10.20.20.22[7800]"
            port_range="0"
            stack.combine="REPLACE"
            stack.position="MPING"
        />
    </stack>
</jgroups>

<cache-container name="keycloak">
    <transport lock-timeout="60000" stack="tcpping"/>
    <local-cache name="realms" simple-cache="true">
        <encoding>
            <key media-type="application/x-java-object"/>
            <value media-type="application/x-java-object"/>
        </encoding>
        <memory max-count="10000"/>
    </local-cache>
    <local-cache name="users" simple-cache="true">
        <encoding>
            <key media-type="application/x-java-object"/>
            <value media-type="application/x-java-object"/>
        </encoding>
        <memory max-count="10000"/>
    </local-cache>
    <distributed-cache name="sessions" owners="2">
        <expiration lifespan="-1"/>
    </distributed-cache>
    <distributed-cache name="authenticationSessions" owners="2">
        <expiration lifespan="-1"/>
    </distributed-cache>
    <distributed-cache name="offlineSessions" owners="2">
        <expiration lifespan="-1"/>
    </distributed-cache>
    <distributed-cache name="clientSessions" owners="2">
        <expiration lifespan="-1"/>
    </distributed-cache>
    <distributed-cache name="offlineClientSessions" owners="2">
        <expiration lifespan="-1"/>
    </distributed-cache>
    <distributed-cache name="loginFailures" owners="2">
        <expiration lifespan="-1"/>
    </distributed-cache>
    <local-cache name="authorization" simple-cache="true">
        <encoding>
            <key media-type="application/x-java-object"/>
            <value media-type="application/x-java-object"/>
        </encoding>
        <memory max-count="10000"/>
    </local-cache>
    <replicated-cache name="work">
        <expiration lifespan="-1"/>
    </replicated-cache>
    <local-cache name="keys" simple-cache="true">
        <encoding>
            <key media-type="application/x-java-object"/>
            <value media-type="application/x-java-object"/>
        </encoding>
        <expiration max-idle="3600000"/>
        <memory max-count="1000"/>
    </local-cache>
    <distributed-cache name="actionTokens" owners="2">
        <encoding>
            <key media-type="application/x-java-object"/>
            <value media-type="application/x-java-object"/>
        </encoding>
        <expiration max-idle="-1" lifespan="-1" interval="300000"/>
        <memory max-count="-1"/>
    </distributed-cache>
</cache-container>

`

[guidograzioli]

Hello; you need to create the caches in infinispan, how did you deploy it? with the infinispan collection?

[rausub]

Hello; you need to create the caches in infinispan, how did you deploy it? with the infinispan collection?

Hi thanks for your reply, yes i deployed with the collection

the keycloak and infinispan is on the same machine ( 2 node setup, for testing )

10.20.20.21
10.20.20.22

- name: Playbook for Infinispan for Keycloak Cache        
  hosts: keycloak
  collections:
    - middleware_automation.infinispan
  tasks:
    - name: Include Infinispan role
      include_role:
        name: infinispan
      vars:
        infinispan_supervisor_password: "test"
        #infinispan_keycloak_caches : True  THIS CREATED REPLICATED CACHES NOT DISTRIBUTED 
        infinispan_configure_firewalld: True



- name: Playbook for Keycloak Hosts
  hosts: keycloak
  vars:
    # keycloak_quarkus_version: '24.0.5'
    keycloak_quarkus_admin_pass: "test"
    keycloak_quarkus_ha_enabled: true
    keycloak_quarkus_jdbc_url: jdbc:postgresql://test:5432/keycloak
    keycloak_quarkus_db_user: db-user
    keycloak_quarkus_db_pass: test
    # keycloak_archive: 'keycloak-{{ keycloak_version }}.zip'
    keycloak_quarkus_version: '24.0.5'
    keycloak_quarkus_configure_firewalld: true
    keycloak_quarkus_proxy_mode: edge
    keycloak_quarkus_db_enabled: true
    keycloak_quarkus_ispn_hosts: 10.20.20.21:11222;10.20.20.22:11222
    keycloak_quarkus_ispn_pass: test
    keycloak_quarkus_systemd_wait_for_port_number: 8080
    keycloak_quarkus_admin_url: https://test/auth/
    keycloak_quarkus_frontend_url: https://test/auth/
    keycloak_quarkus_path: /auth/
    keycloak_force_install: true    


  roles:
    - middleware_automation.keycloak.keycloak_quarkus
  tags: ['keycloak']
  

Infinispan config on node 1 :

<!-- Ansible managed -->
<infinispan
      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
      xsi:schemaLocation="urn:infinispan:config:14.0 https://infinispan.org/schemas/infinispan-config-14.0.xsd
                          urn:infinispan:server:14.0 https://infinispan.org/schemas/infinispan-server-14.0.xsd"
      xmlns="urn:infinispan:config:14.0"
      xmlns:server="urn:infinispan:server:14.0">

  <jgroups>
      <stack name="datagrid" extends="tcp">
          <!-- TCP local cluster with TCPPING discovery -->
          <TCPPING  stack.combine="REPLACE" stack.position="MPING"
                initial_hosts="10.20.20.21[7800],10.20.20.22[7800]"
                port_range="0" />
          <pbcast.GMS join_timeout="3000" />
      </stack>
  </jgroups>

  <cache-container name="default" statistics="true">
    <transport cluster="datagrid" stack="datagrid" node-name="10.161.16.21" machine="10.161.16.21"/>
    <security>
      <authorization>
        <role name="supervisor" permissions="READ WRITE EXEC CREATE"/>
      </authorization>
    </security>
  </cache-container>

  
  <cache-container name="keycloak" statistics="true">
    <transport cluster="datagrid" stack="datagrid" node-name="10.20.20.21" machine="10.20.20.21"/>
      <local-cache name="realms" simple-cache="true">
          <encoding>
              <key media-type="application/x-java-object"/>
              <value media-type="application/x-java-object"/>
          </encoding>
          <memory max-count="10000"/>
      </local-cache>
      <local-cache name="users" simple-cache="true">
          <encoding>
              <key media-type="application/x-java-object"/>
              <value media-type="application/x-java-object"/>
          </encoding>
          <memory max-count="10000"/>
      </local-cache>
      <distributed-cache name="sessions" owners="2">
          <expiration lifespan="-1"/>
      </distributed-cache>
      <distributed-cache name="authenticationSessions" owners="2">
          <expiration lifespan="-1"/>
      </distributed-cache>
      <distributed-cache name="offlineSessions" owners="2">
          <expiration lifespan="-1"/>
      </distributed-cache>
      <distributed-cache name="clientSessions" owners="2">
          <expiration lifespan="-1"/>
      </distributed-cache>
      <distributed-cache name="offlineClientSessions" owners="2">
          <expiration lifespan="-1"/>
      </distributed-cache>
      <distributed-cache name="loginFailures" owners="2">
          <expiration lifespan="-1"/>
      </distributed-cache>
      <local-cache name="authorization" simple-cache="true">
          <encoding>
              <key media-type="application/x-java-object"/>
              <value media-type="application/x-java-object"/>
          </encoding>
          <memory max-count="10000"/>
      </local-cache>
      <replicated-cache name="work">
          <expiration lifespan="-1"/>
      </replicated-cache>
      <local-cache name="keys" simple-cache="true">
          <encoding>
              <key media-type="application/x-java-object"/>
              <value media-type="application/x-java-object"/>
          </encoding>
          <expiration max-idle="3600000"/>
          <memory max-count="1000"/>
      </local-cache>
      <distributed-cache name="actionTokens" owners="2">
          <encoding>
              <key media-type="application/x-java-object"/>
              <value media-type="application/x-java-object"/>
          </encoding>
          <expiration max-idle="-1" lifespan="-1" interval="300000"/>
          <memory max-count="-1"/>
      </distributed-cache>
    <security>
      <authorization>
        <role name="supervisor" permissions="READ WRITE EXEC CREATE"/>
      </authorization>
    </security>
  </cache-container>

 <server xmlns="urn:infinispan:server:14.0">
    <interfaces>
       <interface name="public">
           <any-address/>
       </interface>
    </interfaces>

    <socket-bindings default-interface="public" port-offset="${infinispan.socket.binding.port-offset:0}">
       <socket-binding name="default" port="11222"/>
       <socket-binding name="memcached" port="11221"/>
    </socket-bindings>

    <security>
       <credential-stores>
          <credential-store name="credentials" path="credentials.pfx">
             <clear-text-credential clear-text="secret"/>
          </credential-store>
       </credential-stores>
       <security-realms>
          <security-realm name="default">
             <properties-realm groups-attribute="Roles">
                <user-properties path="users.properties"/>
                <group-properties path="groups.properties"/>
             </properties-realm>
          </security-realm>
       </security-realms>
    </security>

    <endpoints>
      <endpoint socket-binding="default" security-realm="default">
      <hotrod-connector name="hotrod"/>
      <rest-connector name="rest">
        <authentication mechanisms="DIGEST BASIC"/>
      </rest-connector>
      </endpoint>
    </endpoints>

 </server>
</infinispan>

Infinispan config on node 2 :

<!-- Ansible managed -->
<infinispan
      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
      xsi:schemaLocation="urn:infinispan:config:14.0 https://infinispan.org/schemas/infinispan-config-14.0.xsd
                          urn:infinispan:server:14.0 https://infinispan.org/schemas/infinispan-server-14.0.xsd"
      xmlns="urn:infinispan:config:14.0"
      xmlns:server="urn:infinispan:server:14.0">

  <jgroups>
      <stack name="datagrid" extends="tcp">
          <!-- TCP local cluster with TCPPING discovery -->
          <TCPPING  stack.combine="REPLACE" stack.position="MPING"
                initial_hosts="10.20.20.21[7800],10.20.20.22[7800]"
                port_range="0" />
          <pbcast.GMS join_timeout="3000" />
      </stack>
  </jgroups>

  <cache-container name="default" statistics="true">
    <transport cluster="datagrid" stack="datagrid" node-name="10.161.16.22" machine="10.161.16.22"/>
    <security>
      <authorization>
        <role name="supervisor" permissions="READ WRITE EXEC CREATE"/>
      </authorization>
    </security>
  </cache-container>

  
  <cache-container name="keycloak" statistics="true">
    <transport cluster="datagrid" stack="datagrid" node-name="10.20.20.21" machine="10.20.20.21"/>
      <local-cache name="realms" simple-cache="true">
          <encoding>
              <key media-type="application/x-java-object"/>
              <value media-type="application/x-java-object"/>
          </encoding>
          <memory max-count="10000"/>
      </local-cache>
      <local-cache name="users" simple-cache="true">
          <encoding>
              <key media-type="application/x-java-object"/>
              <value media-type="application/x-java-object"/>
          </encoding>
          <memory max-count="10000"/>
      </local-cache>
      <distributed-cache name="sessions" owners="2">
          <expiration lifespan="-1"/>
      </distributed-cache>
      <distributed-cache name="authenticationSessions" owners="2">
          <expiration lifespan="-1"/>
      </distributed-cache>
      <distributed-cache name="offlineSessions" owners="2">
          <expiration lifespan="-1"/>
      </distributed-cache>
      <distributed-cache name="clientSessions" owners="2">
          <expiration lifespan="-1"/>
      </distributed-cache>
      <distributed-cache name="offlineClientSessions" owners="2">
          <expiration lifespan="-1"/>
      </distributed-cache>
      <distributed-cache name="loginFailures" owners="2">
          <expiration lifespan="-1"/>
      </distributed-cache>
      <local-cache name="authorization" simple-cache="true">
          <encoding>
              <key media-type="application/x-java-object"/>
              <value media-type="application/x-java-object"/>
          </encoding>
          <memory max-count="10000"/>
      </local-cache>
      <replicated-cache name="work">
          <expiration lifespan="-1"/>
      </replicated-cache>
      <local-cache name="keys" simple-cache="true">
          <encoding>
              <key media-type="application/x-java-object"/>
              <value media-type="application/x-java-object"/>
          </encoding>
          <expiration max-idle="3600000"/>
          <memory max-count="1000"/>
      </local-cache>
      <distributed-cache name="actionTokens" owners="2">
          <encoding>
              <key media-type="application/x-java-object"/>
              <value media-type="application/x-java-object"/>
          </encoding>
          <expiration max-idle="-1" lifespan="-1" interval="300000"/>
          <memory max-count="-1"/>
      </distributed-cache>
    <security>
      <authorization>
        <role name="supervisor" permissions="READ WRITE EXEC CREATE"/>
      </authorization>
    </security>
  </cache-container>

 <server xmlns="urn:infinispan:server:14.0">
    <interfaces>
       <interface name="public">
           <any-address/>
       </interface>
    </interfaces>

    <socket-bindings default-interface="public" port-offset="${infinispan.socket.binding.port-offset:0}">
       <socket-binding name="default" port="11222"/>
       <socket-binding name="memcached" port="11221"/>
    </socket-bindings>

    <security>
       <credential-stores>
          <credential-store name="credentials" path="credentials.pfx">
             <clear-text-credential clear-text="secret"/>
          </credential-store>
       </credential-stores>
       <security-realms>
          <security-realm name="default">
             <properties-realm groups-attribute="Roles">
                <user-properties path="users.properties"/>
                <group-properties path="groups.properties"/>
             </properties-realm>
          </security-realm>
       </security-realms>
    </security>

    <endpoints>
      <endpoint socket-binding="default" security-realm="default">
      <hotrod-connector name="hotrod"/>
      <rest-connector name="rest">
        <authentication mechanisms="DIGEST BASIC"/>
      </rest-connector>
      </endpoint>
    </endpoints>

 </server>
</infinispan>