rhdh-e2e-test-utils 1.0.1 → 1.1.0

package/dist/deployment/keycloak/config/keycloak-values.yaml

@@ -0,0 +1,94 @@
+global:
+  security:
+    allowInsecureImages: true
+
+replicaCount: 1
+
+# Use Bitnami legacy repository (Bitnami images moved to bitnamilegacy as of Aug 2025)
+# Note: Legacy images are not updated/maintained. Consider migrating to official Keycloak image for long-term.
+image:
+  registry: docker.io
+  repository: bitnamilegacy/keycloak
+  tag: "26.3.3-debian-12-r0"
+  pullPolicy: IfNotPresent
+
+auth:
+  adminUser: admin
+  adminPassword: admin123
+
+service:
+  type: ClusterIP
+  port: 8080
+
+# OpenShift Route configuration
+route:
+  enabled: true
+  host: "" # Will be auto-generated by OpenShift
+  tls:
+    enabled: false
+
+ingress:
+  enabled: false
+
+postgresql:
+  enabled: true
+  image:
+    registry: docker.io
+    repository: bitnamilegacy/postgresql
+    tag: "17.6.0-debian-12-r4"
+    pullPolicy: IfNotPresent
+  auth:
+    postgresPassword: postgres123
+    username: keycloak
+    password: keycloak123
+    database: keycloak
+  primary:
+    resources:
+      limits:
+        cpu: 1000m
+        memory: 1Gi
+      requests:
+        cpu: 100m
+        memory: 256Mi
+    persistence:
+      enabled: true
+      size: 1Gi
+
+resources:
+  limits:
+    cpu: 1000m
+    memory: 1Gi
+  requests:
+    cpu: 100m
+    memory: 256Mi
+
+extraEnvVars:
+  - name: KEYCLOAK_ADMIN
+    value: admin
+  - name: KEYCLOAK_ADMIN_PASSWORD
+    value: admin123
+  - name: KC_HTTP_ENABLED
+    value: "true"
+  - name: KC_PROXY_HEADERS
+    value: "xforwarded"
+  - name: KC_HOSTNAME_STRICT
+    value: "false"
+  - name: JAVA_OPTS_APPEND
+    value: "-Djava.net.preferIPv4Stack=true -Xms256m -Xmx512m"
+
+# Increase probe timeouts for slower startup on resource-constrained clusters
+livenessProbe:
+  enabled: true
+  initialDelaySeconds: 120
+  periodSeconds: 10
+  timeoutSeconds: 5
+  failureThreshold: 6
+  successThreshold: 1
+
+readinessProbe:
+  enabled: true
+  initialDelaySeconds: 60
+  periodSeconds: 10
+  timeoutSeconds: 5
+  failureThreshold: 6
+  successThreshold: 1

package/dist/deployment/keycloak/constants.d.ts

@@ -0,0 +1,29 @@
+import type { KeycloakClientConfig } from "./types.js";
+export declare const DEFAULT_KEYCLOAK_CONFIG: {
+    namespace: string;
+    releaseName: string;
+    adminUser: string;
+    adminPassword: string;
+    realm: string;
+};
+export declare const DEFAULT_CONFIG_PATHS: {
+    valuesFile: string;
+};
+export declare const BITNAMI_CHART_REPO = "https://charts.bitnami.com/bitnami";
+export declare const BITNAMI_CHART_NAME = "bitnami/keycloak";
+export declare const DEFAULT_RHDH_CLIENT: KeycloakClientConfig;
+export declare const DEFAULT_GROUPS: {
+    name: string;
+}[];
+export declare const DEFAULT_USERS: {
+    username: string;
+    email: string;
+    firstName: string;
+    lastName: string;
+    enabled: boolean;
+    emailVerified: boolean;
+    password: string;
+    groups: string[];
+}[];
+export declare const SERVICE_ACCOUNT_ROLES: string[];
+//# sourceMappingURL=constants.d.ts.map

package/dist/deployment/keycloak/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/deployment/keycloak/constants.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAKvD,eAAO,MAAM,uBAAuB;;;;;;CAMnC,CAAC;AAEF,eAAO,MAAM,oBAAoB;;CAKhC,CAAC;AAEF,eAAO,MAAM,kBAAkB,uCAAuC,CAAC;AACvE,eAAO,MAAM,kBAAkB,qBAAqB,CAAC;AAErD,eAAO,MAAM,mBAAmB,EAAE,oBA0BjC,CAAC;AAEF,eAAO,MAAM,cAAc;;GAI1B,CAAC;AAEF,eAAO,MAAM,aAAa;;;;;;;;;GAqBzB,CAAC;AAGF,eAAO,MAAM,qBAAqB,UAIjC,CAAC"}

package/dist/deployment/keycloak/constants.js

@@ -0,0 +1,75 @@
+import path from "path";
+// Navigate from dist/deployment/keycloak/ to package root
+const PACKAGE_ROOT = path.resolve(import.meta.dirname, "../../..");
+export const DEFAULT_KEYCLOAK_CONFIG = {
+    namespace: "rhdh-keycloak",
+    releaseName: "keycloak",
+    adminUser: "admin",
+    adminPassword: "admin123",
+    realm: "rhdh",
+};
+export const DEFAULT_CONFIG_PATHS = {
+    valuesFile: path.join(PACKAGE_ROOT, "dist/deployment/keycloak/config/keycloak-values.yaml"),
+};
+export const BITNAMI_CHART_REPO = "https://charts.bitnami.com/bitnami";
+export const BITNAMI_CHART_NAME = "bitnami/keycloak";
+export const DEFAULT_RHDH_CLIENT = {
+    clientId: "rhdh-client",
+    clientSecret: "rhdh-client-secret",
+    name: "RHDH Client",
+    redirectUris: ["*"],
+    webOrigins: ["*"],
+    standardFlowEnabled: true,
+    implicitFlowEnabled: true,
+    directAccessGrantsEnabled: true,
+    serviceAccountsEnabled: true,
+    authorizationServicesEnabled: true,
+    publicClient: false,
+    defaultClientScopes: [
+        "service_account",
+        "web-origins",
+        "roles",
+        "profile",
+        "basic",
+        "email",
+    ],
+    optionalClientScopes: [
+        "address",
+        "phone",
+        "offline_access",
+        "microprofile-jwt",
+    ],
+};
+export const DEFAULT_GROUPS = [
+    { name: "developers" },
+    { name: "admins" },
+    { name: "viewers" },
+];
+export const DEFAULT_USERS = [
+    {
+        username: "test1",
+        email: "test1@example.com",
+        firstName: "Test",
+        lastName: "User1",
+        enabled: true,
+        emailVerified: true,
+        password: "test1@123",
+        groups: ["developers"],
+    },
+    {
+        username: "test2",
+        email: "test2@example.com",
+        firstName: "Test",
+        lastName: "User2",
+        enabled: true,
+        emailVerified: true,
+        password: "test2@123",
+        groups: ["developers"],
+    },
+];
+// Service account roles required for RHDH integration
+export const SERVICE_ACCOUNT_ROLES = [
+    "view-authorization",
+    "manage-authorization",
+    "view-users",
+];

package/dist/deployment/keycloak/deployment.d.ts

@@ -0,0 +1,89 @@
+import { KubernetesClientHelper } from "../../utils/kubernetes-client.js";
+import type { KeycloakDeploymentOptions, KeycloakDeploymentConfig, KeycloakClientConfig, KeycloakUserConfig, KeycloakGroupConfig, KeycloakRealmConfig, KeycloakConnectionConfig } from "./types.js";
+export declare class KeycloakHelper {
+    k8sClient: KubernetesClientHelper;
+    deploymentConfig: KeycloakDeploymentConfig;
+    keycloakUrl: string;
+    realm: string;
+    clientId: string;
+    clientSecret: string;
+    private _adminClient;
+    constructor(options?: KeycloakDeploymentOptions);
+    /**
+     * Deploy Keycloak using Helm and configure it for RHDH.
+     */
+    deploy(): Promise<void>;
+    /**
+     * Check if Keycloak is already running
+     */
+    isRunning(): Promise<boolean>;
+    /**
+     * Configure Keycloak with realm, client, groups, and users for RHDH
+     */
+    configureForRHDH(options?: {
+        realm?: string;
+        client?: Partial<KeycloakClientConfig>;
+        groups?: KeycloakGroupConfig[];
+        users?: KeycloakUserConfig[];
+    }): Promise<void>;
+    /**
+     * Connect to an existing Keycloak instance
+     */
+    connect(config: KeycloakConnectionConfig): Promise<void>;
+    /**
+     * Create a new realm
+     */
+    createRealm(config: KeycloakRealmConfig): Promise<void>;
+    /**
+     * Create a new client in a realm
+     */
+    createClient(realm: string, config: KeycloakClientConfig): Promise<void>;
+    /**
+     * Create a group in a realm
+     */
+    createGroup(realm: string, config: KeycloakGroupConfig): Promise<void>;
+    /**
+     * Create a user in a realm with optional group membership
+     */
+    createUser(realm: string, config: KeycloakUserConfig): Promise<void>;
+    /**
+     * Get all users in a realm
+     */
+    getUsers(realm: string): Promise<KeycloakUserConfig[]>;
+    /**
+     * Get all groups in a realm
+     */
+    getGroups(realm: string): Promise<KeycloakGroupConfig[]>;
+    /**
+     * Delete a user from a realm
+     */
+    deleteUser(realm: string, username: string): Promise<void>;
+    /**
+     * Delete a group from a realm
+     */
+    deleteGroup(realm: string, groupName: string): Promise<void>;
+    /**
+     * Delete a realm
+     */
+    deleteRealm(realm: string): Promise<void>;
+    /**
+     * Teardown Keycloak deployment
+     */
+    teardown(): Promise<void>;
+    /**
+     * Wait for Keycloak to be ready
+     */
+    waitUntilReady(timeout?: number): Promise<void>;
+    private _buildDeploymentConfig;
+    private _deployWithHelm;
+    private _createRoute;
+    getRouteLocation(): Promise<string>;
+    private _waitForKeycloak;
+    private _initializeAdminClient;
+    private _ensureAdminClient;
+    private _assignServiceAccountRoles;
+    private _addUserToGroup;
+    private _isConflictError;
+    private _log;
+}
+//# sourceMappingURL=deployment.d.ts.map

package/dist/deployment/keycloak/deployment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../../src/deployment/keycloak/deployment.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAY1E,OAAO,KAAK,EACV,yBAAyB,EACzB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,wBAAwB,EACzB,MAAM,YAAY,CAAC;AAEpB,qBAAa,cAAc;IAClB,SAAS,yBAAgC;IACzC,gBAAgB,EAAE,wBAAwB,CAAC;IAC3C,WAAW,EAAE,MAAM,CAAM;IACzB,KAAK,EAAE,MAAM,CAAM;IACnB,QAAQ,EAAE,MAAM,CAAM;IACtB,YAAY,EAAE,MAAM,CAAM;IACjC,OAAO,CAAC,YAAY,CAAoC;gBAE5C,OAAO,GAAE,yBAA8B;IAInD;;OAEG;IACG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAa7B;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;IAUnC;;OAEG;IACG,gBAAgB,CAAC,OAAO,CAAC,EAAE;QAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACvC,MAAM,CAAC,EAAE,mBAAmB,EAAE,CAAC;QAC/B,KAAK,CAAC,EAAE,kBAAkB,EAAE,CAAC;KAC9B,GAAG,OAAO,CAAC,IAAI,CAAC;IAsCjB;;OAEG;IACG,OAAO,CAAC,MAAM,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAuB9D;;OAEG;IACG,WAAW,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAmB7D;;OAEG;IACG,YAAY,CAChB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,oBAAoB,GAC3B,OAAO,CAAC,IAAI,CAAC;IAqChB;;OAEG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB5E;;OAEG;IACG,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IA8C1E;;OAEG;IACG,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAe5D;;OAEG;IACG,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAQ9D;;OAEG;IACG,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWhE;;OAEG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYlE;;OAEG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAW/C;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAK/B;;OAEG;IACG,cAAc,CAAC,OAAO,GAAE,MAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAW1D,OAAO,CAAC,sBAAsB;YAahB,eAAe;YAWf,YAAY;IA2BpB,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC;YAO3B,gBAAgB;YAoBhB,sBAAsB;YActB,kBAAkB;YAQlB,0BAA0B;YAmD1B,eAAe;IAqB7B,OAAO,CAAC,gBAAgB;IAKxB,OAAO,CAAC,IAAI;CAGb"}