mirror of
https://github.com/ansible-middleware/keycloak.git
synced 2025-04-06 10:50:31 -07:00
696 lines
28 KiB
ReStructuredText
696 lines
28 KiB
ReStructuredText
.. Document meta
|
|
|
|
:orphan:
|
|
|
|
.. |antsibull-internal-nbsp| unicode:: 0xA0
|
|
:trim:
|
|
|
|
.. meta::
|
|
:antsibull-docs: 2.16.3
|
|
|
|
.. Anchors
|
|
|
|
.. _ansible_collections.middleware_automation.keycloak.keycloak_role_module:
|
|
|
|
.. Anchors: short name for ansible.builtin
|
|
|
|
.. Title
|
|
|
|
keycloak_role -- Allows administration of Keycloak roles via Keycloak API
|
|
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
|
|
|
|
.. Collection note
|
|
|
|
.. note::
|
|
This module is part of the `middleware_automation.keycloak collection <https://galaxy.ansible.com/ui/repo/published/middleware_automation/keycloak/>`_.
|
|
|
|
It is not included in ``ansible-core``.
|
|
To check whether it is installed, run :code:`ansible-galaxy collection list`.
|
|
|
|
To install it, use: :code:`ansible-galaxy collection install middleware\_automation.keycloak`.
|
|
|
|
To use it in a playbook, specify: :code:`middleware_automation.keycloak.keycloak_role`.
|
|
|
|
.. version_added
|
|
|
|
.. rst-class:: ansible-version-added
|
|
|
|
New in middleware\_automation.keycloak 3.4.0
|
|
|
|
.. contents::
|
|
:local:
|
|
:depth: 1
|
|
|
|
.. Deprecated
|
|
|
|
|
|
Synopsis
|
|
--------
|
|
|
|
.. Description
|
|
|
|
- This module allows you to add, remove or modify Keycloak roles via the Keycloak REST API. It requires access to the REST API via OpenID Connect; the user connecting and the client being used must have the requisite access rights. In a default Keycloak installation, admin-cli and an admin user would work, as would a separate client definition with the scope tailored to your needs and a user having the expected roles.
|
|
- The names of module options are snake\_cased versions of the camelCase ones found in the Keycloak API and its documentation at \ `https://www.keycloak.org/docs-api/8.0/rest-api/index.html <https://www.keycloak.org/docs-api/8.0/rest-api/index.html>`__.
|
|
- Attributes are multi-valued in the Keycloak API. All attributes are lists of individual values and will be returned that way by this module. You may pass single values for attributes when calling the module, and this will be translated into a list suitable for the API.
|
|
|
|
|
|
.. Aliases
|
|
|
|
|
|
.. Requirements
|
|
|
|
|
|
|
|
|
|
|
|
|
|
.. Options
|
|
|
|
Parameters
|
|
----------
|
|
|
|
.. raw:: html
|
|
|
|
<table class="colwidths-auto ansible-option-table docutils align-default" style="width: 100%">
|
|
<thead>
|
|
<tr class="row-odd">
|
|
<th class="head"><p>Parameter</p></th>
|
|
<th class="head"><p>Comments</p></th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
<tr class="row-even">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-attributes"></div>
|
|
<p class="ansible-option-title"><strong>attributes</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-attributes" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">dictionary</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>A dict of key/value pairs to set as custom attributes for the role.</p>
|
|
<p>Values may be single values (e.g. a string) or a list of strings.</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-odd">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-auth_client_id"></div>
|
|
<p class="ansible-option-title"><strong>auth_client_id</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-auth_client_id" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>OpenID Connect <em>client_id</em> to authenticate to the API with.</p>
|
|
<p class="ansible-option-line"><strong class="ansible-option-default-bold">Default:</strong> <code class="ansible-value literal notranslate ansible-option-default">"admin-cli"</code></p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-even">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-auth_client_secret"></div>
|
|
<p class="ansible-option-title"><strong>auth_client_secret</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-auth_client_secret" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>Client Secret to use in conjunction with <em>auth_client_id</em> (if required).</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-odd">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-auth_keycloak_url"></div>
|
|
<div class="ansibleOptionAnchor" id="parameter-url"></div>
|
|
<p class="ansible-option-title"><strong>auth_keycloak_url</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-auth_keycloak_url" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: url</span></p>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
/ <span class="ansible-option-required">required</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>URL to the Keycloak instance.</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-even">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-auth_password"></div>
|
|
<div class="ansibleOptionAnchor" id="parameter-password"></div>
|
|
<p class="ansible-option-title"><strong>auth_password</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-auth_password" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: password</span></p>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>Password to authenticate for API access with.</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-odd">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-auth_realm"></div>
|
|
<p class="ansible-option-title"><strong>auth_realm</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-auth_realm" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>Keycloak realm name to authenticate to for API access.</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-even">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-auth_username"></div>
|
|
<div class="ansibleOptionAnchor" id="parameter-username"></div>
|
|
<p class="ansible-option-title"><strong>auth_username</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-auth_username" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: username</span></p>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>Username to authenticate for API access with.</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-odd">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-client_id"></div>
|
|
<p class="ansible-option-title"><strong>client_id</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-client_id" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>If the role is a client role, the client id under which it resides.</p>
|
|
<p>If this parameter is absent, the role is considered a realm role.</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-even">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-composite"></div>
|
|
<p class="ansible-option-title"><strong>composite</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-composite" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">boolean</span>
|
|
</p>
|
|
<p><em class="ansible-option-versionadded">added in middleware_automation.keycloak 7.1.0</em></p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>If <code class="ansible-value literal notranslate">true</code>, the role is a composition of other realm and/or client role.</p>
|
|
<p class="ansible-option-line"><strong class="ansible-option-choices">Choices:</strong></p>
|
|
<ul class="simple">
|
|
<li><p><code class="ansible-value literal notranslate ansible-option-default-bold"><strong>false</strong></code> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
|
|
<li><p><code class="ansible-value literal notranslate ansible-option-choices-entry">true</code></p></li>
|
|
</ul>
|
|
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-odd">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-composites"></div>
|
|
<p class="ansible-option-title"><strong>composites</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-composites" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">list</span>
|
|
/ <span class="ansible-option-elements">elements=dictionary</span>
|
|
</p>
|
|
<p><em class="ansible-option-versionadded">added in middleware_automation.keycloak 7.1.0</em></p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>List of roles to include to the composite realm role.</p>
|
|
<p>If the composite role is a client role, the <code class='docutils literal notranslate'>clientId</code> (not ID of the client) must be specified.</p>
|
|
<p class="ansible-option-line"><strong class="ansible-option-default-bold">Default:</strong> <code class="ansible-value literal notranslate ansible-option-default">[]</code></p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-even">
|
|
<td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-composites/client_id"></div>
|
|
<div class="ansibleOptionAnchor" id="parameter-composites/clientId"></div>
|
|
<p class="ansible-option-title"><strong>client_id</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-composites/client_id" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: clientId</span></p>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
|
|
<p>Client ID if the role is a client role. Do not include this option for a REALM role.</p>
|
|
<p>Use the client ID you can see in the Keycloak console, not the technical ID of the client.</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-odd">
|
|
<td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-composites/name"></div>
|
|
<p class="ansible-option-title"><strong>name</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-composites/name" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
/ <span class="ansible-option-required">required</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
|
|
<p>Name of the role. This can be the name of a REALM role or a client role.</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-even">
|
|
<td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-composites/state"></div>
|
|
<p class="ansible-option-title"><strong>state</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-composites/state" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
|
|
<p>Create the composite if present, remove it if absent.</p>
|
|
<p class="ansible-option-line"><strong class="ansible-option-choices">Choices:</strong></p>
|
|
<ul class="simple">
|
|
<li><p><code class="ansible-value literal notranslate ansible-option-default-bold"><strong>"present"</strong></code> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
|
|
<li><p><code class="ansible-value literal notranslate ansible-option-choices-entry">"absent"</code></p></li>
|
|
</ul>
|
|
|
|
</div></td>
|
|
</tr>
|
|
|
|
<tr class="row-odd">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-connection_timeout"></div>
|
|
<p class="ansible-option-title"><strong>connection_timeout</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-connection_timeout" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">integer</span>
|
|
</p>
|
|
<p><em class="ansible-option-versionadded">added in middleware_automation.keycloak 4.5.0</em></p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>Controls the HTTP connections timeout period (in seconds) to Keycloak API.</p>
|
|
<p class="ansible-option-line"><strong class="ansible-option-default-bold">Default:</strong> <code class="ansible-value literal notranslate ansible-option-default">10</code></p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-even">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-description"></div>
|
|
<p class="ansible-option-title"><strong>description</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-description" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>The role description.</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-odd">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-http_agent"></div>
|
|
<p class="ansible-option-title"><strong>http_agent</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-http_agent" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
<p><em class="ansible-option-versionadded">added in middleware_automation.keycloak 5.4.0</em></p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>Configures the HTTP User-Agent header.</p>
|
|
<p class="ansible-option-line"><strong class="ansible-option-default-bold">Default:</strong> <code class="ansible-value literal notranslate ansible-option-default">"Ansible"</code></p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-even">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-name"></div>
|
|
<p class="ansible-option-title"><strong>name</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-name" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
/ <span class="ansible-option-required">required</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>Name of the role.</p>
|
|
<p>This parameter is required.</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-odd">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-realm"></div>
|
|
<p class="ansible-option-title"><strong>realm</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-realm" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>The Keycloak realm under which this role resides.</p>
|
|
<p class="ansible-option-line"><strong class="ansible-option-default-bold">Default:</strong> <code class="ansible-value literal notranslate ansible-option-default">"master"</code></p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-even">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-state"></div>
|
|
<p class="ansible-option-title"><strong>state</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-state" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>State of the role.</p>
|
|
<p>On <code class="ansible-value literal notranslate">present</code>, the role will be created if it does not yet exist, or updated with the parameters you provide.</p>
|
|
<p>On <code class="ansible-value literal notranslate">absent</code>, the role will be removed if it exists.</p>
|
|
<p class="ansible-option-line"><strong class="ansible-option-choices">Choices:</strong></p>
|
|
<ul class="simple">
|
|
<li><p><code class="ansible-value literal notranslate ansible-option-default-bold"><strong>"present"</strong></code> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
|
|
<li><p><code class="ansible-value literal notranslate ansible-option-choices-entry">"absent"</code></p></li>
|
|
</ul>
|
|
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-odd">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-token"></div>
|
|
<p class="ansible-option-title"><strong>token</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-token" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
<p><em class="ansible-option-versionadded">added in middleware_automation.keycloak 3.0.0</em></p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>Authentication token for Keycloak API.</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-even">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-validate_certs"></div>
|
|
<p class="ansible-option-title"><strong>validate_certs</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-validate_certs" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">boolean</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>Verify TLS certificates (do not disable this in production).</p>
|
|
<p class="ansible-option-line"><strong class="ansible-option-choices">Choices:</strong></p>
|
|
<ul class="simple">
|
|
<li><p><code class="ansible-value literal notranslate ansible-option-choices-entry">false</code></p></li>
|
|
<li><p><code class="ansible-value literal notranslate ansible-option-default-bold"><strong>true</strong></code> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
|
|
</ul>
|
|
|
|
</div></td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
|
|
|
|
|
|
.. Attributes
|
|
|
|
|
|
Attributes
|
|
----------
|
|
|
|
.. tabularcolumns:: \X{2}{10}\X{3}{10}\X{5}{10}
|
|
|
|
.. list-table::
|
|
:width: 100%
|
|
:widths: auto
|
|
:header-rows: 1
|
|
:class: longtable ansible-option-table
|
|
|
|
* - Attribute
|
|
- Support
|
|
- Description
|
|
|
|
* - .. raw:: html
|
|
|
|
<div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="attribute-check_mode"></div>
|
|
|
|
.. _ansible_collections.middleware_automation.keycloak.keycloak_role_module__attribute-check_mode:
|
|
|
|
.. rst-class:: ansible-option-title
|
|
|
|
**check_mode**
|
|
|
|
.. raw:: html
|
|
|
|
<a class="ansibleOptionLink" href="#attribute-check_mode" title="Permalink to this attribute"></a>
|
|
|
|
.. raw:: html
|
|
|
|
</div>
|
|
|
|
- .. raw:: html
|
|
|
|
<div class="ansible-option-cell">
|
|
|
|
:ansible-attribute-support-label:`Support: \ `\ :ansible-attribute-support-full:`full`
|
|
|
|
|
|
.. raw:: html
|
|
|
|
</div>
|
|
|
|
- .. raw:: html
|
|
|
|
<div class="ansible-option-cell">
|
|
|
|
Can run in :literal:`check\_mode` and return changed status prediction without modifying target.
|
|
|
|
|
|
.. raw:: html
|
|
|
|
</div>
|
|
|
|
|
|
* - .. raw:: html
|
|
|
|
<div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="attribute-diff_mode"></div>
|
|
|
|
.. _ansible_collections.middleware_automation.keycloak.keycloak_role_module__attribute-diff_mode:
|
|
|
|
.. rst-class:: ansible-option-title
|
|
|
|
**diff_mode**
|
|
|
|
.. raw:: html
|
|
|
|
<a class="ansibleOptionLink" href="#attribute-diff_mode" title="Permalink to this attribute"></a>
|
|
|
|
.. raw:: html
|
|
|
|
</div>
|
|
|
|
- .. raw:: html
|
|
|
|
<div class="ansible-option-cell">
|
|
|
|
:ansible-attribute-support-label:`Support: \ `\ :ansible-attribute-support-full:`full`
|
|
|
|
|
|
.. raw:: html
|
|
|
|
</div>
|
|
|
|
- .. raw:: html
|
|
|
|
<div class="ansible-option-cell">
|
|
|
|
Will return details on what has changed (or possibly needs changing in :literal:`check\_mode`\ ), when in diff mode.
|
|
|
|
|
|
.. raw:: html
|
|
|
|
</div>
|
|
|
|
|
|
|
|
.. Notes
|
|
|
|
|
|
.. Seealso
|
|
|
|
|
|
.. Examples
|
|
|
|
Examples
|
|
--------
|
|
|
|
.. code-block:: yaml+jinja
|
|
|
|
- name: Create a Keycloak realm role, authentication with credentials
|
|
middleware_automation.keycloak.keycloak_role:
|
|
name: my-new-kc-role
|
|
realm: MyCustomRealm
|
|
state: present
|
|
auth_client_id: admin-cli
|
|
auth_keycloak_url: https://auth.example.com/auth
|
|
auth_realm: master
|
|
auth_username: USERNAME
|
|
auth_password: PASSWORD
|
|
delegate_to: localhost
|
|
|
|
- name: Create a Keycloak realm role, authentication with token
|
|
middleware_automation.keycloak.keycloak_role:
|
|
name: my-new-kc-role
|
|
realm: MyCustomRealm
|
|
state: present
|
|
auth_client_id: admin-cli
|
|
auth_keycloak_url: https://auth.example.com/auth
|
|
token: TOKEN
|
|
delegate_to: localhost
|
|
|
|
- name: Create a Keycloak client role
|
|
middleware_automation.keycloak.keycloak_role:
|
|
name: my-new-kc-role
|
|
realm: MyCustomRealm
|
|
client_id: MyClient
|
|
state: present
|
|
auth_client_id: admin-cli
|
|
auth_keycloak_url: https://auth.example.com/auth
|
|
auth_realm: master
|
|
auth_username: USERNAME
|
|
auth_password: PASSWORD
|
|
delegate_to: localhost
|
|
|
|
- name: Delete a Keycloak role
|
|
middleware_automation.keycloak.keycloak_role:
|
|
name: my-role-for-deletion
|
|
state: absent
|
|
auth_client_id: admin-cli
|
|
auth_keycloak_url: https://auth.example.com/auth
|
|
auth_realm: master
|
|
auth_username: USERNAME
|
|
auth_password: PASSWORD
|
|
delegate_to: localhost
|
|
|
|
- name: Create a keycloak role with some custom attributes
|
|
middleware_automation.keycloak.keycloak_role:
|
|
auth_client_id: admin-cli
|
|
auth_keycloak_url: https://auth.example.com/auth
|
|
auth_realm: master
|
|
auth_username: USERNAME
|
|
auth_password: PASSWORD
|
|
name: my-new-role
|
|
attributes:
|
|
attrib1: value1
|
|
attrib2: value2
|
|
attrib3:
|
|
- with
|
|
- numerous
|
|
- individual
|
|
- list
|
|
- items
|
|
delegate_to: localhost
|
|
|
|
|
|
|
|
.. Facts
|
|
|
|
|
|
.. Return values
|
|
|
|
Return Values
|
|
-------------
|
|
Common return values are documented :ref:`here <common_return_values>`, the following are the fields unique to this module:
|
|
|
|
.. raw:: html
|
|
|
|
<table class="colwidths-auto ansible-option-table docutils align-default" style="width: 100%">
|
|
<thead>
|
|
<tr class="row-odd">
|
|
<th class="head"><p>Key</p></th>
|
|
<th class="head"><p>Description</p></th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
<tr class="row-even">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="return-end_state"></div>
|
|
<p class="ansible-option-title"><strong>end_state</strong></p>
|
|
<a class="ansibleOptionLink" href="#return-end_state" title="Permalink to this return value"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">dictionary</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>Representation of role after module execution (sample is truncated).</p>
|
|
<p class="ansible-option-line"><strong class="ansible-option-returned-bold">Returned:</strong> on success</p>
|
|
<p class="ansible-option-line ansible-option-sample"><strong class="ansible-option-sample-bold">Sample:</strong> <code class="ansible-value literal notranslate ansible-option-sample">{"attributes": {}, "clientRole": true, "composite": false, "containerId": "9f03eb61-a826-4771-a9fd-930e06d2d36a", "description": "My updated client test role", "id": "561703dd-0f38-45ff-9a5a-0c978f794547", "name": "myrole"}</code></p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-odd">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="return-existing"></div>
|
|
<p class="ansible-option-title"><strong>existing</strong></p>
|
|
<a class="ansibleOptionLink" href="#return-existing" title="Permalink to this return value"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">dictionary</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>Representation of existing role.</p>
|
|
<p class="ansible-option-line"><strong class="ansible-option-returned-bold">Returned:</strong> always</p>
|
|
<p class="ansible-option-line ansible-option-sample"><strong class="ansible-option-sample-bold">Sample:</strong> <code class="ansible-value literal notranslate ansible-option-sample">{"attributes": {}, "clientRole": true, "composite": false, "containerId": "9f03eb61-a826-4771-a9fd-930e06d2d36a", "description": "My client test role", "id": "561703dd-0f38-45ff-9a5a-0c978f794547", "name": "myrole"}</code></p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-even">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="return-msg"></div>
|
|
<p class="ansible-option-title"><strong>msg</strong></p>
|
|
<a class="ansibleOptionLink" href="#return-msg" title="Permalink to this return value"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>Message as to what action was taken.</p>
|
|
<p class="ansible-option-line"><strong class="ansible-option-returned-bold">Returned:</strong> always</p>
|
|
<p class="ansible-option-line ansible-option-sample"><strong class="ansible-option-sample-bold">Sample:</strong> <code class="ansible-value literal notranslate ansible-option-sample">"Role myrole has been updated"</code></p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-odd">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="return-proposed"></div>
|
|
<p class="ansible-option-title"><strong>proposed</strong></p>
|
|
<a class="ansibleOptionLink" href="#return-proposed" title="Permalink to this return value"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">dictionary</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>Representation of proposed role.</p>
|
|
<p class="ansible-option-line"><strong class="ansible-option-returned-bold">Returned:</strong> always</p>
|
|
<p class="ansible-option-line ansible-option-sample"><strong class="ansible-option-sample-bold">Sample:</strong> <code class="ansible-value literal notranslate ansible-option-sample">{"description": "My updated test description"}</code></p>
|
|
</div></td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
|
|
|
|
|
|
.. Status (Presently only deprecated)
|
|
|
|
|
|
.. Authors
|
|
|
|
Authors
|
|
~~~~~~~
|
|
|
|
- Laurent Paumier (@laurpaum)
|
|
|
|
|
|
|
|
.. Extra links
|
|
|
|
|
|
.. Parsing errors
|