DEV-163: feat: keycloak prometheus integration

roles/keycloak/defaults/main.yml

@@ -3,6 +3,10 @@
 # TODO doesn't bind to local port (currently used by setup keycloak with ansible)
 service_port_keycloak_external: "8110"
 
-keycloak_version: "12.0.4"
+keycloak_version: "12.0.4.2"
+keycloak_image: "{{ shared_service_docker_registry_hostname }}/smardigo/keycloak"
+
 keycloak_admin_username: "keycloak-admin"
 keycloak_admin_password: "keycloak-admin"
+
+

roles/keycloak/tasks/main.yml

@@ -120,3 +120,12 @@
   tags:
     - create_groups
     - update_realms
+
+- name: "Activate event listeners"
+  shell: |
+    docker exec "{{ keycloak_id }} /bin/sh -c '/opt/jboss/keycloak/bin/kcadm.sh config credentials --server http://localhost:8080/auth --realm master --user $KEYCLOAK_USER --password $KEYCLOAK_PASSWORD'"
+    docker exec "{{ keycloak_id }} /bin/sh -c '/opt/jboss/keycloak/bin/kcadm.sh update events/config -s "eventsEnabled=true" -s "adminEventsEnabled=true" -s "eventsListeners+=metrics-listener"'"
+    docker exec "{{ keycloak_id }} /bin/sh -c 'usr/bin/rm -f /opt/jboss/.keycloak/kcadm.config'"
+  tags:
+    - update_deployment
+

roles/keycloak/vars/main.yml

@@ -23,7 +23,7 @@ keycloak_docker: {
   services: [
     {
       name: "{{ keycloak_id }}",
-      image_name: "jboss/keycloak",
+      image_name: "{{ keycloak_image }}",
       image_version: "{{ keycloak_version }}",
       labels: "{{ keycloak_labels + ( keycloak_labels_additional | default([])) }}",
       environment: [

templates/prometheus/config/prometheus/prometheus.yml.j2

@@ -218,6 +218,28 @@ scrape_configs:
         target_label:  instance
         replacement:   $1
 
+##############################################
+
+  - job_name: 'keycloak'
+    scheme: {{ http_s }}
+    metrics_path: '/auth/realms/master/metrics'
+    static_configs:
+      - targets: [
+{% for host in server_group_names_keycloak| default([]) %}
+          '{{ host }}.{{ domain }}',
+{% endfor %}
+        ]
+        labels:
+          env: {{ stage }}
+          project: smardigo
+          application: keycloak
+    relabel_configs:
+      - source_labels: [__address__]
+        regex:         (.*)
+        target_label:  instance
+        replacement:   $1
+
+
 ##############################################
 ###                Servers                ####
 ##############################################