mirror of
https://github.com/ansible-collections/community.general.git
synced 2025-08-06 06:04:24 -07:00
[PR #7126/721108d9 backport][stable-7] Add keycloak_authz_custom_policy module (#7290)
Add keycloak_authz_custom_policy module (#7126)
* Add keycloak_authz_custom_policy module
* keycloak.py: add linefeed to keep linter happy
* keycloak_authz_custom_policy: add basic integration tests
* keycloak_authz_custom_policy: add support for check_mode
* keycloak_authz_custom_policy: add check_mode-specific integration tests
Signed-off-by: Samuli Seppänen <samuli.seppanen@puppeteers.net>
* keycloak_authz_custom_policy: improve logging
Signed-off-by: Samuli Seppänen <samuli.seppanen@puppeteers.net>
* keycloak_authz_custom_policy: fix typo
* keycloak_authz_custom_policy: add licensing information
This should make this module REUSE compliant
* keycloak_authz_custom_policy: remove comment markers from license files
* keycloak_authz_custom_policy: fix typo in the example
* keycloak_authz_custom_policy: fix typos in metadata
* keycloak_authz_custom_policy: change version_added to 7.5.0
* Update plugins/modules/keycloak_authz_custom_policy.py
Co-authored-by: Felix Fontein <felix@fontein.de>
---------
Signed-off-by: Samuli Seppänen <samuli.seppanen@puppeteers.net>
Co-authored-by: Felix Fontein <felix@fontein.de>
(cherry picked from commit 721108d92e)
Co-authored-by: Samuli Seppänen <samuli.seppanen@gmail.com>
This commit is contained in:
patchback[bot]
GitHub
parent
e83bb285b2
commit
4381ac1bf3
17 changed files with 485 additions and 0 deletions
|
|
@ -0,0 +1,168 @@
|
|||
---
|
||||
# Copyright (c) Ansible Project
|
||||
# GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
|
||||
# SPDX-License-Identifier: GPL-3.0-or-later
|
||||
- name: Remove keycloak client to avoid failures from previous failed runs
|
||||
community.general.keycloak_client:
|
||||
auth_keycloak_url: "{{ url }}"
|
||||
auth_realm: "{{ admin_realm }}"
|
||||
auth_username: "{{ admin_user }}"
|
||||
auth_password: "{{ admin_password }}"
|
||||
realm: "{{ realm }}"
|
||||
client_id: "{{ client_id }}"
|
||||
state: absent
|
||||
|
||||
- name: Create keycloak client with authorization services enabled
|
||||
community.general.keycloak_client:
|
||||
auth_keycloak_url: "{{ url }}"
|
||||
auth_realm: "{{ admin_realm }}"
|
||||
auth_username: "{{ admin_user }}"
|
||||
auth_password: "{{ admin_password }}"
|
||||
realm: "{{ realm }}"
|
||||
client_id: "{{ client_id }}"
|
||||
state: present
|
||||
enabled: true
|
||||
public_client: false
|
||||
service_accounts_enabled: true
|
||||
authorization_services_enabled: true
|
||||
|
||||
- name: Create first custom policy (check_mode)
|
||||
community.general.keycloak_authz_custom_policy:
|
||||
auth_keycloak_url: "{{ url }}"
|
||||
auth_realm: "{{ admin_realm }}"
|
||||
auth_username: "{{ admin_user }}"
|
||||
auth_password: "{{ admin_password }}"
|
||||
name: FirstCustomPolicy
|
||||
state: present
|
||||
policy_type: script-policy-1.js
|
||||
realm: "{{ realm }}"
|
||||
client_id: "{{ client_id }}"
|
||||
check_mode: true
|
||||
register: result
|
||||
|
||||
- name: Assert that first custom policy was not created
|
||||
assert:
|
||||
that:
|
||||
- result is changed
|
||||
- result.end_state != {}
|
||||
- result.end_state.name == "FirstCustomPolicy"
|
||||
- result.end_state.type == "script-policy-1.js"
|
||||
- result.msg == 'Would create custom policy FirstCustomPolicy'
|
||||
|
||||
- name: Create first custom policy
|
||||
community.general.keycloak_authz_custom_policy:
|
||||
auth_keycloak_url: "{{ url }}"
|
||||
auth_realm: "{{ admin_realm }}"
|
||||
auth_username: "{{ admin_user }}"
|
||||
auth_password: "{{ admin_password }}"
|
||||
name: FirstCustomPolicy
|
||||
state: present
|
||||
policy_type: script-policy-1.js
|
||||
realm: "{{ realm }}"
|
||||
client_id: "{{ client_id }}"
|
||||
register: result
|
||||
|
||||
- name: Assert that first custom policy was created
|
||||
assert:
|
||||
that:
|
||||
- result is changed
|
||||
- result.end_state != {}
|
||||
- result.end_state.name == "FirstCustomPolicy"
|
||||
- result.end_state.type == "script-policy-1.js"
|
||||
- result.msg == 'Custom policy FirstCustomPolicy created'
|
||||
|
||||
- name: Attempt to update first custom policy (not possible)
|
||||
community.general.keycloak_authz_custom_policy:
|
||||
auth_keycloak_url: "{{ url }}"
|
||||
auth_realm: "{{ admin_realm }}"
|
||||
auth_username: "{{ admin_user }}"
|
||||
auth_password: "{{ admin_password }}"
|
||||
name: FirstCustomPolicy
|
||||
state: present
|
||||
policy_type: script-policy-2.js
|
||||
realm: "{{ realm }}"
|
||||
client_id: "{{ client_id }}"
|
||||
register: result
|
||||
|
||||
- name: Assert that first custom policy was not modified
|
||||
assert:
|
||||
that:
|
||||
- result is not changed
|
||||
- result.end_state != {}
|
||||
- result.end_state.name == "FirstCustomPolicy"
|
||||
- result.end_state.type == "script-policy-2.js"
|
||||
- result.msg == 'Custom policy FirstCustomPolicy already exists'
|
||||
|
||||
# Ensure that we can create multiple instances of the custom policy
|
||||
- name: Create second instance of the custom policy
|
||||
community.general.keycloak_authz_custom_policy:
|
||||
auth_keycloak_url: "{{ url }}"
|
||||
auth_realm: "{{ admin_realm }}"
|
||||
auth_username: "{{ admin_user }}"
|
||||
auth_password: "{{ admin_password }}"
|
||||
name: SecondCustomPolicy
|
||||
state: present
|
||||
policy_type: script-policy-1.js
|
||||
realm: "{{ realm }}"
|
||||
client_id: "{{ client_id }}"
|
||||
register: result
|
||||
|
||||
- name: Assert that second instance of the custom policy was created
|
||||
assert:
|
||||
that:
|
||||
- result is changed
|
||||
- result.end_state != {}
|
||||
- result.end_state.name == "SecondCustomPolicy"
|
||||
- result.end_state.type == "script-policy-1.js"
|
||||
- result.msg == 'Custom policy SecondCustomPolicy created'
|
||||
|
||||
- name: Remove second instance of the custom policy (check_mode)
|
||||
community.general.keycloak_authz_custom_policy:
|
||||
auth_keycloak_url: "{{ url }}"
|
||||
auth_realm: "{{ admin_realm }}"
|
||||
auth_username: "{{ admin_user }}"
|
||||
auth_password: "{{ admin_password }}"
|
||||
name: SecondCustomPolicy
|
||||
state: absent
|
||||
policy_type: script-policy-1.js
|
||||
realm: "{{ realm }}"
|
||||
client_id: "{{ client_id }}"
|
||||
check_mode: true
|
||||
register: result
|
||||
|
||||
- name: Assert that second custom policy was not removed
|
||||
assert:
|
||||
that:
|
||||
- result is changed
|
||||
- result.end_state == {}
|
||||
- result.msg == 'Would remove custom policy SecondCustomPolicy'
|
||||
|
||||
- name: Remove second instance of the custom policy
|
||||
community.general.keycloak_authz_custom_policy:
|
||||
auth_keycloak_url: "{{ url }}"
|
||||
auth_realm: "{{ admin_realm }}"
|
||||
auth_username: "{{ admin_user }}"
|
||||
auth_password: "{{ admin_password }}"
|
||||
name: SecondCustomPolicy
|
||||
state: absent
|
||||
policy_type: script-policy-1.js
|
||||
realm: "{{ realm }}"
|
||||
client_id: "{{ client_id }}"
|
||||
register: result
|
||||
|
||||
- name: Assert that second custom policy was removed
|
||||
assert:
|
||||
that:
|
||||
- result is changed
|
||||
- result.end_state == {}
|
||||
- result.msg == 'Custom policy SecondCustomPolicy removed'
|
||||
|
||||
- name: Remove keycloak client
|
||||
community.general.keycloak_client:
|
||||
auth_keycloak_url: "{{ url }}"
|
||||
auth_realm: "{{ admin_realm }}"
|
||||
auth_username: "{{ admin_user }}"
|
||||
auth_password: "{{ admin_password }}"
|
||||
realm: "{{ realm }}"
|
||||
client_id: "{{ client_id }}"
|
||||
state: absent
|
||||
Loading…
Add table
Add a link
Reference in a new issue