Open
Description
Description
We should add tests that replicate the state-transfer which will occur when a Keycloak cluster is upgraded via a rolling update from one version to another. The workflow of the test should be as follows:
- Create a Keycloak cluster of 2 nodes
[a,b]usingv1image - Create realms, users etc
- Shutdown
band replace withv2image resulting in mixed version cluster[a,b'] - Shutdown
aand replace withv2image resulting in v2 cluster[a',b']
At stages 3 & 4, we should ensure that the OIDC flow works as expected when interactions are initiated at each of the cluster nodes.
Discussion
No response
Motivation
The existing clustered OIDC test, ClusteredOAuthClientTest, ensures that OIDC flows work as expected once a cluster has already been formed. However, this does not take into account that state-transfer compatibility may break between two Keycloak nodes if the Infinispan patch version changes, which could result in data-loss.
Details
No response