updated keycloak and added new more generic realm file

[jasquat]

Summary by CodeRabbit

Release Notes

• New Features

  • Enhanced Keycloak realm export script with more robust configuration options
  • Added health check mechanism for Keycloak startup process
  • Updated Keycloak version to 26.0.7

• Configuration Updates

  • Improved Keycloak realm configuration with detailed authentication and security settings
  • Added new port mapping for Keycloak container
  • Configured multiple authentication clients and roles

• Security Improvements

  • Implemented more comprehensive token and session management
  • Added enhanced authentication flow configurations

[coderabbitai]

Caution

Review failed

The pull request is closed.

📝 Walkthrough

Walkthrough

The pull request introduces modifications to Keycloak-related scripts and configuration in the spiffworkflow-backend repository. The changes focus on improving the realm export and startup processes, with updates to the export script's command structure, the startup script's version and health check mechanisms, and the addition of a comprehensive realm configuration JSON file. These modifications aim to enhance the robustness and flexibility of Keycloak deployment and configuration.

Changes

File	Change Summary
keycloak/bin/export_keycloak_realms	Updated export command with new parameters: - Added --http-management-port 9001 - Added --db dev-file - Added complex database URL configuration - Improved realm export process
keycloak/bin/start_keycloak	- Added keycloak_version variable set to 26.0.7 - Introduced wait_for_keycloak_to_be_up() function - Added new port mapping -p 7009:9000 - Updated realm import logic and health checking
keycloak/realm_exports/spiffworkflow-basic-realm.json	- Added comprehensive Keycloak realm configuration - Defined realm, client, and authentication settings - Included multiple clients and authentication flows

Sequence Diagram

sequenceDiagram
    participant Start as start_keycloak
    participant Keycloak
    participant Health as wait_for_keycloak_to_be_up
    participant Export as export_keycloak_realms

    Start->>Keycloak: Start Keycloak container
    Start->>Health: Check Keycloak health
    Health-->>Keycloak: Ping service
    Keycloak-->>Health: Respond when ready
    Start->>Keycloak: Import realm configuration
    Export->>Keycloak: Export realm data
    Keycloak-->>Export: Return exported realm

Loading

The sequence diagram illustrates the enhanced startup and export process, showing the new health check mechanism and the interaction between the startup script, Keycloak service, and realm export/import functionality.

---

📜 Recent review details

Configuration used: .coderabbit.yaml
Review profile: CHILL
Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 584be1d and a069dae.

📒 Files selected for processing (3)

• spiffworkflow-backend/keycloak/bin/export_keycloak_realms (1 hunks)
• spiffworkflow-backend/keycloak/bin/start_keycloak (3 hunks)
• spiffworkflow-backend/keycloak/realm_exports/spiffworkflow-basic-realm.json (1 hunks)

---

Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

• Review comments: Directly reply to a review comment made by CodeRabbit. Example:
  • I pushed a fix in commit <commit_id>, please review it.
  • Generate unit testing code for this file.
  • Open a follow-up GitHub issue for this discussion.
• Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
  • @coderabbitai generate unit testing code for this file.
  • @coderabbitai modularize this function.
• PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
  • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
  • @coderabbitai read src/utils.ts and generate unit testing code.
  • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
  • @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

• @coderabbitai pause to pause the reviews on a PR.
• @coderabbitai resume to resume the paused reviews.
• @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
• @coderabbitai full review to do a full review from scratch and review all the files again.
• @coderabbitai summary to regenerate the summary of the PR.
• @coderabbitai generate docstrings to generate docstrings for this PR. (Beta)
• @coderabbitai resolve resolve all the CodeRabbit review comments.
• @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
• @coderabbitai help to get help.

Other keywords and placeholders

• Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
• Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
• Add @coderabbitai anywhere in the PR title to generate the title automatically.

Documentation and Community

• Visit our Documentation for detailed information on how to use CodeRabbit.
• Join our Discord Community to get help, request features, and share feedback.
• Follow us on X/Twitter for updates and announcements.