03 Jul 20:06

pskopek

398e3a3

Red Hat Single Sign-On 7.6.4 for OpenJDK on OpenShift multiarch container image Latest

Latest

The v7.6.4.GA release of Red Hat Single Sign-On multiarch container image for OpenJDK running on OpenShift.

The container image supports (can be run on top of) the following three architectures: x86_64, s390x, and / or ppc64le.

Full Changelog: v7.6.3.GA...v7.6.4.GA

Assets 2

11 May 16:09

iankko

v7.6.3.GA

a093d5d

Red Hat Single Sign-On 7.6.3 for OpenJDK on OpenShift multiarch container image

The v7.6.3.GA release of Red Hat Single Sign-On multiarch container image for OpenJDK running on OpenShift.

The container image supports (can be run on top of) the following three architectures: x86_64, s390x, and / or ppc64le.

Full Changelog: v7.6.2.GA...v7.6.3.GA

Assets 2

13 Mar 14:44

iankko

v7.6.2.GA

85661d2

Red Hat Single Sign-On 7.6.2 for OpenJDK on OpenShift multiarch container image

The v7.6.2.GA release of Red Hat Single Sign-On multiarch container image for OpenJDK running on OpenShift.

The container image supports (can be run on top of) the following three architectures: x86_64, s390x, and / or ppc64le.

Backward-Incompatible Changes:

The logic of JBoss DMR probe implementation, used by readinessProbe.sh and livenessProbe.sh scripts (readiness / liveness probes) was modified to use so called probe netrc file instead of a plaintext username & password credentials to authenticate the probe user account, when issuing a probe request against the JBoss DMR API.

As a result of this change, when:

The readinessProbe.sh script of the Red Hat Single Sign-On 7.6.2 for OpenJDK on OpenShift container image is called as the readiness probe implementation (the default when a RH-SSO pod is provisioned via some of the available RH-SSO OpenShift templates), or
The livenessProbe.sh script of the Red Hat Single Sign-On 7.6.2 for OpenJDK on OpenShift is called as the liveness probe implementation (the default when a RH-SSO pod is provisioned via some of the available RH-SSO OpenShift templates)

the RH-SSO deploment config now requires an emptyDir, tmpfs based (emptyDir.medium field set to "Memory") persistent volume, mounted under "/mnt/rh-sso" directory to store the netrc file to be used for probes.

The available RH-SSO OpenShift templates were modified:

to automatically add this newly required /mnt/rh-sso volume for new deployments. Therefore, users of RH-SSO OpenShift templates are strongly encouraged to update to the latest v7.6.2.GA version of the templates.

If you need to:

Run the RH-SSO 7.6.2.GA for OpenShift container image with some of previous versions of the RH-SSO templates,
Or run the RH-SSO 7.6.2.GA for OpenShift container image without a template, but calling the readinessProbe.sh script (or livenessProbe.sh script respectively) as part of the container image run,

you need to add this newly required volume manually..

Other Notable Changes Compared To Previous Release:

Default implementation of the readiness probe (readinessProbe.sh script) now also checks if a connection can be established to all of the defined XA and non-XA datasources,
A bug, when using CONFIG_ADJUSTMENT_MODE set to cli was corrected,
A bug, when using JSON log format was corrected

Full Changelog: v7.6.1.GA...v7.6.2.GA

Assets 2

16 Nov 14:54

iankko

v7.6.1.GA

41f22e0

Red Hat Single Sign-On 7.6.1 for OpenJDK on OpenShift multiarch container image

The v7.6.1.GA release of Red Hat Single Sign-On multiarch container image for OpenJDK running on OpenShift.

The container image supports (can be run on top of) the following three architectures: x86_64, s390x, and / or ppc64le.

Backward-Incompatible Changes:

The former single-level "templates" directory in this repository got replaced with a tree-structured "templates" directory, as depicted on the following picture:

$ tree templates/
templates/
├── passthrough
│   ├── sso76-https.json
│   ├── sso76-postgresql.json
│   └── sso76-postgresql-persistent.json
├── reencrypt
│   ├── ocp-3.x
│   │   ├── sso76-ocp3-x509-https.json
│   │   └── sso76-ocp3-x509-postgresql-persistent.json
│   └── ocp-4.x
│       ├── sso76-ocp4-x509-https.json
│       └── sso76-ocp4-x509-postgresql-persistent.json
├── scripts
│   └── gen_template_docs.py
└── sso76-image-stream.json

5 directories, 9 files

As a result of this change (also see [RHSSO-2205] below), the available OpenShift templates are now primarily separated into subdirectories according to the type of the secure TLS termination they use (passthrough vs re-encrypt), then subsequently split into subdirectories based on the version of OpenShift (3.X vs 4.X) they are expected to be used at.

The sso76-image-stream.json image stream is still available under the original path.

In case of using automated scripts to install the "latest" version of the templates, please modify them to reflect the new locations.

Moreover:

The former sso76-x509-https OpenShift 3.X re-encrypt template got renamed to sso76-ocp3-x509-https to better reflect it's intended to be used solely with OpenShift 3.X,
The former sso76-x509-postgresql-persistent OpenShift 3.X re-encrypt template got renamed to sso76-ocp3-x509-postgresql-persistent to better reflect it's intended to be used solely with OpenShift 3.X.

Again, in case of using automated scripts to deploy RH-SSO pods using any of these templates, please adjust the tools to start using their updated names.

What's Changed

[RHSSO-2202] [RH-SSO 7.6.X] Use explicit URLs for txn-recovery-marker-jdbc-{common,hibernate5} artifacts by @iankko in #261
[RHSSO-2203] Ensure expiry works in Infinispan by @iankko in #262
[RHSSO-2204] Escape XML special characters possibly present in values of user defined environment variables by @iankko in #263
[RHSSO-2211] [RHSSO-2191] Fix the failing S2I builds by @iankko in #264
[RHSSO-2113] Update RH-SSO server version to 7.6.1.GA & EAP server version to 7.4.6.GA by @iankko in #265
[RHSSO-2238] Modify the escape_sed_rhs_interpolated_characters() routine to to properly handle partially/fully escaped input string by @iankko in #266
[RHSSO-2239] Install also "procps-ng" RPM within container image build by @iankko in #267
[RHSSO-2205] Organize the existing RH-SSO OpenShift templates more logically by @iankko in #268

Full Changelog: v7.6.0.GA...v7.6.1.GA

Contributors

iankko

Assets 2

07 Oct 12:39

iankko

v7.5.3.GA

bc0f7f0

Red Hat Single Sign-On 7.5.3 for OpenJDK on OpenShift multiarch container image

The v7.5.3.GA release of Red Hat Single Sign-On multiarch container image for OpenJDK running on OpenShift.
The container image supports (can be run on top of) the following three architectures: x86_64, s390x, and / or ppc64le.

Assets 2

20 Jul 16:02

iankko

v7.6.0.GA

24b9383

Red Hat Single Sign-On 7.6.0 for OpenJDK on OpenShift multiarch container image

The v7.6.0.GA release of Red Hat Single Sign-On multiarch container image for OpenJDK running on OpenShift.
The container image supports (can be run on top of) the following three architectures: x86_64, s390x, and / or ppc64le.

Assets 2

21 Apr 12:18

iankko

v7.5.2.GA

f68d939

Red Hat Single Sign-On 7.5.2 for OpenJDK on OpenShift multiarch container image

The v7.5.2.GA release of Red Hat Single Sign-On multiarch container image for OpenJDK running on OpenShift.
The container image supports (can be run on top of) the following three architectures: x86_64, s390x, and / or ppc64le.

Assets 2