Release v4.18.0#646
Merged
Merged
Conversation
- Added basic keycloak infra
- Update docker compose with new vars - Update pipfile with new deps - Update realm to give service account appropriate permissions - Add tasks to sync users/groups to keycloak
- added configure container to get keycloak updated on local startup - updated frontend to be able to switch between keycloak and django auth
- add / prefix to exempt urls - Update client to add email and first/last name to attributes
- update configure script to adhere to that and load config for keycloak - update deploy script to use raft docker container
- Update deploy script - Deconflict host vs db_host name
- Add entry point script to start nginx and keycloak in same container
- integrate grafana with keycloak oidc - remove old prxy paths - Update deploy scripts
- Update grafana config to map groups to orgs and roles in grafana - Update grafana sso to enforce password or ams auth only
- Configured keycloak metrics and alerts based on metrics - Added canary based routing for keycloak vs django auth - Add new routes for auth endpoints
- update so that keycloak doesn't use distributed cache
…keycloak-integration
…keycloak-integration
- update docs
Keycloak Integration
4.17.0 Release Readiness
Update uswds3.css
…-case-validator 5726 - go parser max records per case validator
…w-value" field instead of the subject-type field - Added new tests around this bug
Hotfix: Apt Unknown Package
… into hotfix/security-event-token-email-changed-bug
Hotfix: Remove Binary Buildpack Blocking Deployment
… into hotfix/security-event-token-email-changed-bug
…uce what user profile to update based on the given event data.
…mail-changed-bug Hotfix: SET Handler using `subject_type` instead of `new-value`
ADPennington
approved these changes
May 26, 2026
Collaborator
ADPennington
left a comment
ADPennington
left a comment
There was a problem hiding this comment.
v4.18.0 includes the following:
features
- go parser max records per case validator (not in deployed env)
bug fixes
- Update uswds3.css (for KC content re: emails)
- PLG Deploy.sh Wrong Port for Network Policy
- SET fix re: email changes
dev ops
- Keycloak Integration (not in deployed env)
documentation
- 4.17.0 Release Readiness
| @@ -1,5 +1,5 @@ | |||
| ARG REGISTRY_OWNER=hhs | |||
| ARG BASE_TAG=v1.1.0 | |||
Collaborator
There was a problem hiding this comment.
pushed this update to hhs ghcr.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary of Changes
Release Tracker: raft-tech#5811
Raft Release: https://github.com/raft-tech/TANF-app/releases/tag/v4.18.0