Stefan Bethke
4832e5da5d
Needed for keycloak_authentication_v2, to manage Keycloak authentication flows (e.g. the CCCHH browser flow) as YAML. Chosen over community.general's own copy of the module (deprecated in favor of this collection, and limited to 4 sub-flow levels there vs. 10 here).
39 lines
1.3 KiB
YAML
39 lines
1.3 KiB
YAML
---
|
|
- name: Playbook for Keycloak Realm and Client Configuration
|
|
hosts: all
|
|
tasks:
|
|
- name: Keycloak Realm Role
|
|
ansible.builtin.include_role:
|
|
name: middleware_automation.keycloak.keycloak_realm
|
|
vars:
|
|
keycloak_realm_admin_password: "remembertochangeme"
|
|
keycloak_realm_realm: TestRealm
|
|
keycloak_realm_client_default_roles:
|
|
- TestRoleAdmin
|
|
- TestRoleUser
|
|
keycloak_realm_client_users:
|
|
- username: TestUser
|
|
password: password
|
|
client_roles:
|
|
- client: TestClient1
|
|
role: TestRoleUser
|
|
realm: TestRealm
|
|
- username: TestAdmin
|
|
password: password
|
|
client_roles:
|
|
- client: TestClient1
|
|
role: TestRoleUser
|
|
realm: TestRealm
|
|
- client: TestClient1
|
|
role: TestRoleAdmin
|
|
realm: TestRealm
|
|
keycloak_realm_clients:
|
|
- name: TestClient1
|
|
client_id: TestClient1
|
|
roles: "{{ keycloak_realm_client_default_roles }}"
|
|
realm: TestRealm
|
|
public_client: true
|
|
web_origins:
|
|
- http://testclient1origin/application
|
|
- http://testclient1origin/other
|
|
users: "{{ keycloak_realm_client_users }}"
|