keycloak tests

Author: pdabelf5

.gitignore

@@ -177,6 +177,16 @@ examples/custom-resources/egress-mtls/egress-trusted-ca-secret.yaml
 examples/custom-resources/egress-mtls/egress-trusted-ca-secret-crl.yaml
 examples/custom-resources/egress-mtls/egress-mtls-secret.yaml
 examples/custom-resources/egress-mtls/secure-app-tls-secret.yaml
+common-secrets/keycloak-ca-secret.yaml
+common-secrets
+common-secrets/keycloak-tls-secret.yaml
+common-secrets/keycloak-ca-secret-crl.yaml
+examples/custom-resources/oidc/keycloak-ca-secret.yaml
+examples/custom-resources/oidc/keycloak-ca-secret-crl.yaml
+tests/data/oidc/keycloak-ca-secret.yaml
+tests/data/oidc/keycloak-ca-secret-crl.yaml
+examples/custom-resources/oidc/keycloak-tls-secret.yaml
+tests/data/oidc/keycloak-tls-secret.yaml
 
 #TLS Certificate secrets
 common-secrets/cafe-passwd-basic-auth-secret.yaml

Makefile

@@ -274,7 +274,7 @@ certs: ## Create just in time TLS certificates needed for tests and examples
 ifeq (, $(shell command -v go))
 	docker run --rm -v .:/workspace/kubernetes-ingress -w /workspace/kubernetes-ingress golang:1.25.4-trixie make certs
 else
-	make -C hack/tls-cert-gen run
+	make -C hack/tls-cert-gen ignore
 endif
 
 .PHONY: certs-clean

examples/custom-resources/oidc/keycloak.yaml

@@ -67,4 +67,4 @@ spec:
       volumes:
         - name: tls-secret
           secret:
-            secretName: keycloak-tls
+            secretName: keycloak-tls-secret

examples/custom-resources/oidc/oidc-pkce.yaml

@@ -13,4 +13,4 @@ spec:
     scope: openid+profile+email
     accessTokenEnable: true
     sslVerify: true
-    trustedCertSecret: keycloak-ca
+    trustedCertSecret: keycloak-ca-secret

examples/custom-resources/oidc/oidc.yaml

@@ -13,4 +13,4 @@ spec:
     scope: openid+profile+email
     accessTokenEnable: true
     sslVerify: true
-    trustedCertSecret: keycloak-ca
+    trustedCertSecret: keycloak-ca-secret

hack/secrets.json

@@ -813,8 +813,8 @@
     },
     {
       "ca": {
-        "secretName": "keycloak-ca",
-        "fileName": "example-keycloak-ca-secret.yaml",
+        "secretName": "keycloak-ca-secret",
+        "fileName": "keycloak-ca-secret.yaml",
         "templateData": {
           "commonName": "KeycloakCA",
           "country": [
@@ -836,15 +836,17 @@
         "valid": true,
         "secretType": "nginx.org/ca",
         "symlinks": [
-          "/examples/custom-resources/oidc/keycloak-ca-secret.yaml"
+          "/examples/custom-resources/oidc/keycloak-ca-secret.yaml",
+          "tests/data/oidc/keycloak-ca-secret.yaml"
         ],
         "usedIn": [
-          "examples/custom-resources/oidc"
+          "examples/custom-resources/oidc",
+          "tests/suite/test_oidc.py - needed for oidc tests"
         ]
       },
       "server": {
-        "secretName": "keycloak-tls",
-        "fileName": "example-keycloak-tls-secret.yaml",
+        "secretName": "keycloak-tls-secret",
+        "fileName": "keycloak-tls-secret.yaml",
         "templateData": {
           "commonName": "keycloak.default.svc.cluster.local",
           "country": [
@@ -866,10 +868,12 @@
         },
         "valid": true,
         "symlinks": [
-          "/examples/custom-resources/oidc/keycloak-tls-secret.yaml"
+          "/examples/custom-resources/oidc/keycloak-tls-secret.yaml",
+          "tests/data/oidc/keycloak-tls-secret.yaml"
         ],
         "usedIn": [
-          "examples/custom-resources/oidc"
+          "examples/custom-resources/oidc",
+          "tests/suite/test_oidc.py - needed for oidc tests"
         ]
       }
     }