Skip to content

Keycloak 26, OAS Validation#252

Merged
Elson9 merged 7 commits intomasterfrom
dev
Mar 13, 2026
Merged

Keycloak 26, OAS Validation#252
Elson9 merged 7 commits intomasterfrom
dev

Conversation

@Elson9
Copy link
Contributor

@Elson9 Elson9 commented Mar 12, 2026

Description

Changes for Keycloak 26
OAS Validation enpoints and Production Readiness
fix CI workflows

Types of changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Documentation (non-breaking change with enhancements to documentation)
  • Breaking change (fix or feature that would cause existing functionality to change)

Checklist

  • I have checked that unit tests pass locally with my changes
  • I have added tests that prove my fix is effective or that my feature works
  • I have added necessary documentation (if appropriate)

Further comments

Paul Howells and others added 7 commits January 15, 2026 13:12
- See microservices/csitOasValidationApi/openapi.json
- Includes endpoint implementations
- Unit tests
- Instructions for manual integration tests in local environment
Fixes for Problem Detail Response and OpenAPI json generation
Updated to include install instructions in the readme
Adding health endpoints
Update to use python 3.14
Updates from code review to correct spelling and formatting
Fix for generated results class
Updated list rulesets endpoint and tests for sorting by directory
Completed TODOs in unit tests - Add body to requests
Update Readme to fix the 'run test's command
Updated API to use a preexisting local cache of the API Governance repository tags
APS-4031 Add OAS Validation endpoints
* Create working dockerfile for validation api

* add CI for validation API

* use FastAPIOffline to serve docs files locally instead of from CDN

* Refactor spectral validation process to handle large outputs and improve error handling
* upgrade docker/build-push-action to v5

* fix tag (slashes)

* add set up buildx

* update registry to ghcr.io

* update master build action
* upg keycloak python library

* fix tests

* fix namespace use

* update poetry.lock for gatewayApi

* fix test config

* f-string fix for logs

* Enhace logging for token.py

* constructs the JWK URL directly from the same internal KC_SERVER_URL

* Update gatewayJobScheduler for Keycloak 26

* fix version mismatch for proxies arg for python-keycloak and httpx

* temp set keycloak ssl verify to false for scheduler

* Fix 404 when namespace has no Keycloak group

* Set verify back to True

* Prevent accidental route deletions on Keycloak errors. abort sync and add logging in NamespaceService

* Refactor Keycloak integration in gatewayJobScheduler

- don't silence errors in namespace.py
- raise error if transform_data_by_ns hits an exception
- Use a single Keycloak admin instance.
- Added Keycloak connection validation in sync_routes function.
- add sanity check before syncing
- Updated tests to ensure proper mocking of Keycloak interactions.

* Revert changes

* Use OIDCDiscovery for jwk again

* Fix Keycloak realm base URL by adding slash before /realms

* Test for Keycloak realm base URL with or without trailing slash

* remove deprecated search_in_subgroups

* stop using deprecated dev-dependencies

---------

Co-authored-by: ikethecoder <ikethecoder@copeconsulting.ca>
Co-authored-by: Russell Vinegar <russell.vinegar@gov.bc.ca>
@Elson9 Elson9 marked this pull request as ready for review March 13, 2026 17:29
@Elson9 Elson9 merged commit 28c6a58 into master Mar 13, 2026
16 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants