fix(roles/keycloak): Quarkus timeout property getting overridden by new transaction timeout variable in Keycloak 26.6.0+

Author: bhatti-lf

CHANGELOG.md

@@ -12,6 +12,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Fixed
 
+* **role:keycloak**: Fix transaction timeout silently dropping from 3600s to 300s on Keycloak 26.6.0+ due to new `transaction-default-timeout` CLI option overriding the Quarkus property
 * **role:keycloak**: Fix MariaDB database encoding defaulting to deprecated `utf8` (`utf8mb3`) instead of `utf8mb4`, causing warnings in Keycloak 26.6.0+
 * **ci**: Fix pip installs by replacing `--require-hashes` with pinned versions to allow Dependabot updates
 * **role:mount**: Fix `when` condition for NFS/CIFS client package installation failing with multiple mounts and when `state` key is undefined

roles/keycloak/templates/etc/systemd/system/keycloak.service.j2

@@ -1,5 +1,5 @@
 # {{ ansible_managed }}
-# 2025100101
+# 2026040801
 
 [Unit]
 Description=Keycloak Service
@@ -10,9 +10,17 @@ User=keycloak
 Group=keycloak
 EnvironmentFile=/etc/sysconfig/keycloak
 {% if keycloak__mode == 'production' %}
+{% if keycloak__version is version('26.6.0', '<') %}
 ExecStart=/opt/keycloak/bin/kc.sh start -Dquarkus.transaction-manager.default-transaction-timeout=3600
 {% else %}
+ExecStart=/opt/keycloak/bin/kc.sh start
+{% endif %}
+{% else %}
+{% if keycloak__version is version('26.6.0', '<') %}
 ExecStart=/opt/keycloak/bin/kc.sh start-dev -Dquarkus.transaction-manager.default-transaction-timeout=3600
+{% else %}
+ExecStart=/opt/keycloak/bin/kc.sh start-dev
+{% endif %}
 {% endif %}
 LimitNOFILE=131072
 WorkingDirectory=/opt/keycloak

roles/keycloak/templates/opt/keycloak/conf/keycloak.conf.j2

@@ -1,5 +1,5 @@
 # {{ ansible_managed }}
-# 2026031501
+# 2026040801
 
 # Basic settings for running in production. Change accordingly before deploying the server.
 
@@ -74,3 +74,9 @@ hostname-backchannel-dynamic={{ keycloak__hostname_backchannel_dynamic | string
 # Logs
 log={{ keycloak__log }}
 log-file={{ keycloak__log_file }}
+
+{% if keycloak__version is version('26.6.0', '>=') %}
+# Transaction
+transaction-default-timeout=60m
+transaction-setup-timeout=60m
+{% endif %}