From d047b7add945ba571180d33ace95e2f417f8bd6a Mon Sep 17 00:00:00 2001 From: Jim Martens Date: Sat, 26 Jul 2025 11:44:57 +0200 Subject: [PATCH] feat: Add client for ArgoCD in monitoring cluster --- terraform/keycloak.tf | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) diff --git a/terraform/keycloak.tf b/terraform/keycloak.tf index 0a23bc6..349153c 100644 --- a/terraform/keycloak.tf +++ b/terraform/keycloak.tf @@ -199,3 +199,29 @@ resource "keycloak_openid_client_optional_scopes" "argocd_optional_scopes" { keycloak_openid_client_scope.groups_scope.name ] } + +resource "keycloak_openid_client" "twomartens_argocd_monitoring" { + realm_id = keycloak_realm.twomartens_realm.id + name = "ArgoCD Monitoring Cluster" + enabled = true + access_type = "CONFIDENTIAL" + client_id = "argocd-monitoring-oauth" + standard_flow_enabled = true + use_refresh_tokens = false + + valid_redirect_uris = [ + "https://argocd.k8s.monitoring.2martens.de/auth/callback" + ] + web_origins = [ + "+" + ] +} + +resource "keycloak_openid_client_optional_scopes" "argocd_optional_scopes" { + realm_id = keycloak_realm.twomartens_realm.id + client_id = keycloak_openid_client.twomartens_argocd_monitoring.id + + optional_scopes = [ + keycloak_openid_client_scope.groups_scope.name + ] +} \ No newline at end of file