diff --git a/bitnami/keycloak/11/debian-10/Dockerfile b/bitnami/keycloak/11/debian-10/Dockerfile index 8c1f0d4827d6..87bb80dee6c0 100644 --- a/bitnami/keycloak/11/debian-10/Dockerfile +++ b/bitnami/keycloak/11/debian-10/Dockerfile @@ -21,7 +21,7 @@ RUN chmod g+rwX /opt/bitnami COPY rootfs / RUN /opt/bitnami/scripts/keycloak/postunpack.sh ENV BITNAMI_APP_NAME="keycloak" \ - BITNAMI_IMAGE_VERSION="11.0.3-debian-10-r13" \ + BITNAMI_IMAGE_VERSION="11.0.3-debian-10-r14" \ PATH="/opt/bitnami/java/bin:/opt/bitnami/wildfly/bin:/opt/bitnami/common/bin:/opt/bitnami/keycloak/bin:$PATH" \ WILDFLY_JAVA_HOME="" \ WILDFLY_JAVA_OPTS="" \ diff --git a/bitnami/keycloak/11/debian-10/rootfs/opt/bitnami/scripts/keycloak-env.sh b/bitnami/keycloak/11/debian-10/rootfs/opt/bitnami/scripts/keycloak-env.sh index 424fed78ea15..d85691b30a12 100644 --- a/bitnami/keycloak/11/debian-10/rootfs/opt/bitnami/scripts/keycloak-env.sh +++ b/bitnami/keycloak/11/debian-10/rootfs/opt/bitnami/scripts/keycloak-env.sh @@ -101,7 +101,7 @@ KEYCLOAK_ADMIN_PASSWORD="${KEYCLOAK_ADMIN_PASSWORD:-"${KEYCLOAK_PASSWORD:-}"}" export KEYCLOAK_ADMIN_PASSWORD="${KEYCLOAK_ADMIN_PASSWORD:-bitnami}" export KEYCLOAK_HTTP_PORT="${KEYCLOAK_HTTP_PORT:-8080}" export KEYCLOAK_HTTPS_PORT="${KEYCLOAK_HTTPS_PORT:-8443}" -export KEYCLOAK_BIND_ADDRESS="${KEYCLOAK_BIND_ADDRESS:-0.0.0.0}" +export KEYCLOAK_BIND_ADDRESS="${KEYCLOAK_BIND_ADDRESS:-$(hostname --fqdn)}" export KEYCLOAK_INIT_MAX_RETRIES="${KEYCLOAK_INIT_MAX_RETRIES:-10}" KEYCLOAK_CACHE_OWNERS_COUNT="${KEYCLOAK_CACHE_OWNERS_COUNT:-"${CACHE_OWNERS_COUNT:-}"}" export KEYCLOAK_CACHE_OWNERS_COUNT="${KEYCLOAK_CACHE_OWNERS_COUNT:-1}" diff --git a/bitnami/keycloak/11/debian-10/rootfs/opt/bitnami/scripts/keycloak/run.sh b/bitnami/keycloak/11/debian-10/rootfs/opt/bitnami/scripts/keycloak/run.sh index 79eb9d098e18..3a20d1a126c3 100755 --- a/bitnami/keycloak/11/debian-10/rootfs/opt/bitnami/scripts/keycloak/run.sh +++ b/bitnami/keycloak/11/debian-10/rootfs/opt/bitnami/scripts/keycloak/run.sh @@ -18,7 +18,7 @@ set -o pipefail info "** Starting keycloak **" # Use only basename conf_file="$(basename "${KEYCLOAK_CONF_FILE}")" -start_command=("${KEYCLOAK_BIN_DIR}/standalone.sh" "-Djboss.bind.address=${KEYCLOAK_BIND_ADDRESS}" "-Dkeycloak.hostname.fixed.httpPort=${KEYCLOAK_HTTP_PORT}" "-c=${conf_file}") +start_command=("${KEYCLOAK_BIN_DIR}/standalone.sh" "-Djboss.bind.address=${KEYCLOAK_BIND_ADDRESS}" "-Djboss.bind.address.private=${KEYCLOAK_BIND_ADDRESS}" "-Dkeycloak.hostname.fixed.httpPort=${KEYCLOAK_HTTP_PORT}" "-c=${conf_file}" -b "0.0.0.0") is_boolean_yes "$KEYCLOAK_ENABLE_TLS" && start_command=("${start_command[@]}" "-Dkeycloak.hostname.fixed.httpsPort=${KEYCLOAK_HTTPS_PORT}") is_boolean_yes "$KEYCLOAK_ENABLE_STATISTICS" && start_command=("${start_command[@]}" "-Djboss.bind.address.management=0.0.0.0") diff --git a/bitnami/keycloak/11/debian-10/rootfs/opt/bitnami/scripts/libkeycloak.sh b/bitnami/keycloak/11/debian-10/rootfs/opt/bitnami/scripts/libkeycloak.sh index a2974b10405c..e3fd870f1653 100644 --- a/bitnami/keycloak/11/debian-10/rootfs/opt/bitnami/scripts/libkeycloak.sh +++ b/bitnami/keycloak/11/debian-10/rootfs/opt/bitnami/scripts/libkeycloak.sh @@ -7,6 +7,7 @@ # Load Generic Libraries . /opt/bitnami/scripts/libfs.sh . /opt/bitnami/scripts/liblog.sh +. /opt/bitnami/scripts/libnet.sh . /opt/bitnami/scripts/libos.sh . /opt/bitnami/scripts/libvalidations.sh @@ -49,7 +50,9 @@ keycloak_validate() { fi if ! validate_ipv4 "${KEYCLOAK_BIND_ADDRESS}"; then - print_validation_error "The value for KEYCLOAK_BIND_ADDRESS should be an IPv4 address or it must be a resolvable hostname" + if ! is_hostname_resolved "${KEYCLOAK_BIND_ADDRESS}"; then + print_validation_error print_validation_error "The value for KEYCLOAK_BIND_ADDRESS ($KEYCLOAK_BIND_ADDRESS) should be an IPv4 address or it must be a resolvable hostname" + fi fi if ! is_empty_value "$KEYCLOAK_JGROUPS_DISCOVERY_PROTOCOL" && is_empty_value "$KEYCLOAK_JGROUPS_TRANSPORT_STACK"; then @@ -171,8 +174,8 @@ batch /subsystem=infinispan/cache-container=keycloak/distributed-cache=offlineSessions: write-attribute(name=owners, value=${KEYCLOAK_CACHE_OWNERS_COUNT}) /subsystem=infinispan/cache-container=keycloak/distributed-cache=loginFailures: write-attribute(name=owners, value=${KEYCLOAK_CACHE_OWNERS_COUNT}) /subsystem=infinispan/cache-container=keycloak/distributed-cache=clientSessions: write-attribute(name=owners, value=${KEYCLOAK_CACHE_OWNERS_COUNT}) -/subsystem=infinispan/cache-container=keycloak/distributed-cache=offlineClientSessions: write-attribute(name=owners, value=${KEYCLOAK_CACHE_OWNERS_COUNT}) /subsystem=infinispan/cache-container=keycloak/distributed-cache=actionTokens: write-attribute(name=owners, value=${KEYCLOAK_CACHE_OWNERS_COUNT}) +/subsystem=infinispan/cache-container=keycloak/distributed-cache=offlineClientSessions: write-attribute(name=owners, value=${KEYCLOAK_CACHE_OWNERS_COUNT}) run-batch stop-embedded-server EOF diff --git a/bitnami/keycloak/README.md b/bitnami/keycloak/README.md index 30e0c332cbf2..26c41aabc51c 100644 --- a/bitnami/keycloak/README.md +++ b/bitnami/keycloak/README.md @@ -34,7 +34,7 @@ Non-root container images add an extra layer of security and are generally recom Learn more about the Bitnami tagging policy and the difference between rolling tags and immutable tags [in our documentation page](https://docs.bitnami.com/tutorials/understand-rolling-tags-containers/). -* [`11`, `11-debian-10`, `11.0.3`, `11.0.3-debian-10-r13`, `latest` (11/debian-10/Dockerfile)](https://github.com/bitnami/bitnami-docker-keycloak/blob/11.0.3-debian-10-r13/11/debian-10/Dockerfile) +* [`11`, `11-debian-10`, `11.0.3`, `11.0.3-debian-10-r14`, `latest` (11/debian-10/Dockerfile)](https://github.com/bitnami/bitnami-docker-keycloak/blob/11.0.3-debian-10-r14/11/debian-10/Dockerfile) Subscribe to project updates by watching the [bitnami/keycloak GitHub repo](https://github.com/bitnami/bitnami-docker-keycloak).