feat: upgrade Camunda Run sample to Keycloak 21.1.1

(cherry picked from commit 9e4c4d4)

examples/run/README.md

@@ -59,9 +59,9 @@ Within the subdirectory `docker` you'll find a basic sample consisting of:
 
 Usage:
 
-1. ``docker-compose build``
-2. ``docker-compose up -d``
+1. ``docker compose build``
+2. ``docker compose up -d``
 3. Login at ``http://localhost:8080`` using ``camunda`` / ``camunda1!`` and use Cockpit / Tasklist / Admin.
-4. Keycloak is available under ``https://localhost:9001``. Login with ``keycloak`` / ``keycloak1!``.
+4. Keycloak is available under ``https://localhost:9001/auth``. Login with ``keycloak`` / ``keycloak1!``.
 
 **Beware**: This is not production ready, still using a H2 database for each of the instances, but might help you to understand the configuration basics.

examples/run/docker/Dockerfile

@@ -1,8 +1,8 @@
 # Get Camunda-run as base image
-FROM camunda/camunda-bpm-platform:run-7.18.0
+FROM camunda/camunda-bpm-platform:run-7.19.0
 
 # The Version of the Keycloak Identity Provider to use
-ENV IDENTITY_PROVIDER_VERSION=7.18.0
+ENV IDENTITY_PROVIDER_VERSION=7.19.0
 
 # Add Keycloak Identity Provider
 USER camunda

examples/run/docker/docker-compose.yml

@@ -3,13 +3,21 @@ version: '3.9'
 services:
 
   keycloak:
-    image: gunnaraccso/keycloak.server:14.0.0
+    image: gunnaraccso/keycloak.server:21.1.1
     restart: always
     env_file:
       - ./env/keycloak.env
     ports:
       - "9001:8443"
       - "9000:8080"
+    command:
+      - start-dev
+      - --features admin-fine-grained-authz
+      - --https-certificate-file=/keycloak/config/ssl/cert.pem
+      - --https-certificate-key-file=/keycloak/config/ssl/key.pem
+    volumes:
+      - ./ssl/cert.pem:/keycloak/config/ssl/cert.pem
+      - ./ssl/key.pem:/keycloak/config/ssl/key.pem
 
   camunda:
     build: .

examples/run/docker/env/camunda.env

@@ -1,6 +1,6 @@
 KEYCLOAK_HOST=https://keycloak:8443
 KEYCLOAK_REALM=camunda
 KEYCLOAK_CLIENT_ID=camunda-identity-service
-KEYCLOAK_CLIENT_SECRET=cbee1434-7e4d-4d85-bab6-5944b427a3c0
+KEYCLOAK_CLIENT_SECRET=GBLb9KSRxmmo81SIGH2BWu3GEtrofvWo
 WAIT_FOR=keycloak:8080
 WAIT_FOR_TIMEOUT=60

examples/run/docker/env/keycloak.env

@@ -1,3 +1,5 @@
 TZ=Europe/Berlin
-KEYCLOAK_USER=keycloak
-KEYCLOAK_PASSWORD=keycloak1!
+DB_VENDOR=h2
+KEYCLOAK_ADMIN=keycloak
+KEYCLOAK_ADMIN_PASSWORD=keycloak1!
+KC_HTTP_RELATIVE_PATH=/auth

examples/run/docker/ssl/cert.pem

@@ -0,0 +1,22 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

examples/run/docker/ssl/key.pem

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----