mirror of
https://github.com/ansible-middleware/keycloak.git
synced 2025-04-05 18:30:27 -07:00
320a5f0d9a
This change should avoid storing plain private keys on disk due to security risks. It also makes it easier to encrypt the data with SOPS.
65 lines
2.3 KiB
YAML
65 lines
2.3 KiB
YAML
---
|
|
- name: Converge
|
|
hosts: all
|
|
vars:
|
|
keycloak_quarkus_admin_pass: "remembertochangeme"
|
|
keycloak_admin_password: "remembertochangeme"
|
|
keycloak_realm: TestRealm
|
|
keycloak_quarkus_host: instance
|
|
keycloak_quarkus_log: file
|
|
keycloak_quarkus_log_level: debug
|
|
keycloak_quarkus_https_key_file_enabled: true
|
|
keycloak_quarkus_key_file_copy_enabled: true
|
|
keycloak_quarkus_key_content: "{{ lookup('file', 'key.pem') }}"
|
|
keycloak_quarkus_cert_file_copy_enabled: true
|
|
keycloak_quarkus_cert_file_src: cert.pem
|
|
keycloak_quarkus_log_target: /tmp/keycloak
|
|
keycloak_quarkus_ks_vault_enabled: true
|
|
keycloak_quarkus_ks_vault_file: "/opt/keycloak/vault/keystore.p12"
|
|
keycloak_quarkus_ks_vault_pass: keystorepassword
|
|
keycloak_quarkus_systemd_wait_for_port: true
|
|
keycloak_quarkus_systemd_wait_for_timeout: 20
|
|
keycloak_quarkus_systemd_wait_for_delay: 2
|
|
keycloak_quarkus_systemd_wait_for_log: true
|
|
keycloak_quarkus_providers:
|
|
- id: http-client
|
|
spi: connections
|
|
default: true
|
|
restart: true
|
|
properties:
|
|
- key: default-connection-pool-size
|
|
value: 10
|
|
- id: spid-saml
|
|
url: https://github.com/italia/spid-keycloak-provider/releases/download/24.0.2/spid-provider.jar
|
|
roles:
|
|
- role: keycloak_quarkus
|
|
- role: keycloak_realm
|
|
keycloak_context: ''
|
|
keycloak_client_default_roles:
|
|
- TestRoleAdmin
|
|
- TestRoleUser
|
|
keycloak_client_users:
|
|
- username: TestUser
|
|
password: password
|
|
client_roles:
|
|
- client: TestClient
|
|
role: TestRoleUser
|
|
realm: "{{ keycloak_realm }}"
|
|
- username: TestAdmin
|
|
password: password
|
|
client_roles:
|
|
- client: TestClient
|
|
role: TestRoleUser
|
|
realm: "{{ keycloak_realm }}"
|
|
- client: TestClient
|
|
role: TestRoleAdmin
|
|
realm: "{{ keycloak_realm }}"
|
|
keycloak_realm: TestRealm
|
|
keycloak_clients:
|
|
- name: TestClient
|
|
roles: "{{ keycloak_client_default_roles }}"
|
|
realm: "{{ keycloak_realm }}"
|
|
public_client: "{{ keycloak_client_public }}"
|
|
web_origins: "{{ keycloak_client_web_origins }}"
|
|
users: "{{ keycloak_client_users }}"
|
|
client_id: TestClient
|