ansible-collections/middleware_automation.keycloak
1
0
Fork 0
mirror of https://github.com/ansible-middleware/keycloak.git synced 2025-07-25 14:20:32 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Test: Installation of key material via Ansible role

Browse source
This commit is contained in:
Footur 2024-05-05 12:08:14 +02:00
commit 7141e1c9b2
2 changed files with 9 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

8
molecule/quarkus/converge.yml
View file

@ -9,11 +9,13 @@
keycloak_quarkus_log: file keycloak_quarkus_log: file
keycloak_quarkus_log_level: debug keycloak_quarkus_log_level: debug
keycloak_quarkus_https_key_file_enabled: true keycloak_quarkus_https_key_file_enabled: true
keycloak_quarkus_key_file: "/opt/keycloak/certs/key.pem" keycloak_quarkus_key_file_copy_enabled: true
keycloak_quarkus_cert_file: "/opt/keycloak/certs/cert.pem" keycloak_quarkus_key_file_src: key.pem
keycloak_quarkus_cert_file_copy_enabled: true
keycloak_quarkus_cert_file_src: cert.pem
keycloak_quarkus_log_target: /tmp/keycloak keycloak_quarkus_log_target: /tmp/keycloak
keycloak_quarkus_ks_vault_enabled: true keycloak_quarkus_ks_vault_enabled: true
keycloak_quarkus_ks_vault_file: "/opt/keycloak/certs/keystore.p12" keycloak_quarkus_ks_vault_file: "/opt/keycloak/vault/keystore.p12"
keycloak_quarkus_ks_vault_pass: keystorepassword keycloak_quarkus_ks_vault_pass: keystorepassword
keycloak_quarkus_systemd_wait_for_port: true keycloak_quarkus_systemd_wait_for_port: true
keycloak_quarkus_systemd_wait_for_timeout: 20 keycloak_quarkus_systemd_wait_for_timeout: 20

12
molecule/quarkus/prepare.yml
View file

@ -14,11 +14,11 @@
delegate_to: localhost delegate_to: localhost
changed_when: False changed_when: False
- name: Create conf directory # risky-file-permissions in test user account does not exist yet - name: Create vault directory
become: true become: true
ansible.builtin.file: ansible.builtin.file:
state: directory state: directory
path: "/opt/keycloak/certs/" path: "/opt/keycloak/vault"
mode: 0755 mode: 0755
- name: Make sure a jre is available (for keytool to prepare keystore) - name: Make sure a jre is available (for keytool to prepare keystore)
@ -39,10 +39,6 @@
- name: Copy certificates and vault - name: Copy certificates and vault
become: true become: true
ansible.builtin.copy: ansible.builtin.copy:
src: "{{ item }}" src: keystore.p12
dest: "/opt/keycloak/certs/{{ item }}" dest: /opt/keycloak/vault/keystore.p12
mode: 0444 mode: 0444
loop:
- cert.pem
- key.pem
- keystore.p12