Merge pull request quarkusio#55663 from sberyozkin/keycloak-host-port-access

Optional access to application host ports from Keycloak Container

Author: sberyozkin

extensions/devservices/keycloak/src/main/java/io/quarkus/devservices/keycloak/KeycloakDevServicesConfig.java

@@ -229,4 +229,13 @@ public interface KeycloakDevServicesConfig {
     @WithDefault("false")
     boolean disableHttps();
 
+    /**
+     * The host ports to expose to the Keycloak container.
+     *
+     * When this list is non-empty, the host is made accessible from the container
+     * using the {@code host.testcontainers.internal} hostname, and only the listed ports are exposed.
+     * This may be necessary when Keycloak needs to make HTTP callbacks to the application running on the host.
+     */
+    Optional<List<Integer>> hostAccessiblePorts();
+
 }

extensions/devservices/keycloak/src/main/java/io/quarkus/devservices/keycloak/KeycloakDevServicesProcessor.java

@@ -43,6 +43,7 @@
 import org.keycloak.representations.idm.RolesRepresentation;
 import org.keycloak.representations.idm.UserRepresentation;
 import org.keycloak.util.JsonSerialization;
+import org.testcontainers.Testcontainers;
 import org.testcontainers.containers.BindMode;
 import org.testcontainers.containers.GenericContainer;
 import org.testcontainers.containers.wait.strategy.Wait;
@@ -527,6 +528,12 @@ protected void configure() {
                 addExposedPort(KEYCLOAK_PORT);
             }
 
+            if (config.hostAccessiblePorts().isPresent()) {
+                for (int port : config.hostAccessiblePorts().get()) {
+                    Testcontainers.exposeHostPorts(port);
+                }
+            }
+
             if (sharedContainer && LaunchMode.current() == LaunchMode.DEVELOPMENT) {
                 withLabel(DEV_SERVICE_LABEL, containerLabelValue);
                 withLabel(QUARKUS_DEV_SERVICE, containerLabelValue);