ansible-infra/roles/keycloak_auth_flow/defaults/main.yaml at 32b5f147bcd128f85f2697d7b0b1af1276daecba - CCCHH/ansible-infra - CCCHH Git

CCCHH/ansible-infra

Watch

Stefan Bethke 32b5f147bc

/ build (pull_request) Successful in 47s

Details

/ Ansible Lint (push) Successful in 5m31s

Details

/ Ansible Lint (pull_request) Successful in 4m35s

Details

Manage the CCCHH browser authentication flow as YAML

Adds a keycloak_auth_flow role that locally validates flow
definitions (structure, nesting depth, known provider IDs, and a set
of Keycloak authentication-flow gotchas: conditions silently ignored
outside a Conditional subflow, keycloak/keycloak#29515's OTP+WebAuthn
sibling bug, conditional-credential config shape/semantics, and more)
before deploying them idempotently via
middleware_automation.keycloak.keycloak_authentication_v2.

Includes the CCCHH realm's actual "browser passkey and token" flow
(the realm's real browserFlow binding, not the untouched built-in
"browser" flow), exported from the live server so it's now reviewable
and redeployable from this repo instead of only editable in the
Keycloak admin console.

2026-09-02 11:07:45 +02:00

3 lines

128 B

YAML

Raw Blame History

	`keycloak_auth_flow__flows: [ ]`
	`keycloak_auth_flow__admin_url: "http://127.0.0.1:8080"`
	`keycloak_auth_flow__admin_username: admin`