Vendor middleware_automation.keycloak collection

Needed for keycloak_authentication_v2, to manage Keycloak
authentication flows (e.g. the CCCHH browser flow) as YAML.
Chosen over community.general's own copy of the module (deprecated in
favor of this collection, and limited to 4 sub-flow levels there vs.
10 here).

ansible_collections/middleware_automation/keycloak/roles/keycloak_realm/defaults/main.yml

@@ -0,0 +1,61 @@
+---
+### Keycloak configuration settings
+keycloak_realm_host: localhost
+keycloak_realm_http_port: 8080
+keycloak_realm_https_port: 8443
+keycloak_realm_management_http_port: 9990
+
+### Keycloak administration console user
+keycloak_realm_admin_user: admin
+keycloak_realm_auth_realm: master
+keycloak_realm_auth_client: admin-cli
+keycloak_realm_context: ''
+
+# administrator console password, this is a required variable
+keycloak_realm_admin_password: ''
+
+### Keycloak realms, clients, roles, federation
+# list of clients to create in the realm
+#
+# Refer to the playbook for a comprehensive example.
+# Also refer to meta/argument_specs.yml for specifications.
+#
+# Each client has the form:
+#    { name: '', roles: [], realm: '', public_client: bool, web_origins: '', users: [] }
+# where roles is a list of default role names for the client
+# and users is a list of account, see below for the format definition
+# an empty name will skip the creation of the client
+#
+# keycloak_realm_clients:
+#   - name: ''
+#     roles: "{{ keycloak_realm_client_default_roles }}"
+#     realm: "{{ keycloak_realm_realm }}"
+#     public_client: "{{ keycloak_realm_client_public }}"
+#     web_origins: "{{ keycloak_realm_client_web_origins }}"
+#     redirect_uris: "{{ keycloak_realm_client_redirect_uris }}"
+#     users: "{{ keycloak_realm_client_users }}"
+keycloak_realm_clients: []
+
+# list of roles to create in the client
+keycloak_realm_client_default_roles: []
+
+# if True, create a public client; otherwise, a confidetial client
+keycloak_realm_client_public: true
+
+# allowed web origins for the client
+keycloak_realm_client_web_origins: '/*'
+
+# list of user and role mappings to create in the client
+# Each user has the form:
+#    { username: '', password: '', email: '', firstName: '', lastName: '', client_roles: [] }
+# where each client_role has the form:
+#    { client: '', role: '', realm: '' }
+keycloak_realm_client_users: []
+
+### List of Keycloak User Federation
+keycloak_realm_user_federation: []
+
+# other settings
+keycloak_realm_url: "http://{{ keycloak_realm_host }}:{{ keycloak_realm_http_port + (keycloak_realm_jboss_port_offset | default(0)) }}"
+keycloak_realm_management_url: "http://{{ keycloak_realm_host }}:{{ keycloak_realm_management_http_port + (keycloak_realm_jboss_port_offset | default(0)) }}"
+keycloak_realm_no_log: true