From d72f58a97d2ca6a199378e6b8fe85869a32f24c7 Mon Sep 17 00:00:00 2001 From: Jim Martens Date: Tue, 28 Jan 2025 08:37:00 +0100 Subject: [PATCH] change: Remove admin group --- terraform/keycloak.tf | 83 ------------------------------------------- 1 file changed, 83 deletions(-) diff --git a/terraform/keycloak.tf b/terraform/keycloak.tf index bfaf6c0..a9700b3 100644 --- a/terraform/keycloak.tf +++ b/terraform/keycloak.tf @@ -7,89 +7,6 @@ data "keycloak_openid_client" "master_realm_client" { client_id = "master-realm" } -data "keycloak_role" "query_clients" { - realm_id = data.keycloak_realm.master.id - client_id = data.keycloak_openid_client.master_realm_client.id - name = "query-clients" -} - -data "keycloak_role" "query_groups" { - realm_id = data.keycloak_realm.master.id - client_id = data.keycloak_openid_client.master_realm_client.id - name = "query-groups" -} - -data "keycloak_role" "query_realms" { - realm_id = data.keycloak_realm.master.id - client_id = data.keycloak_openid_client.master_realm_client.id - name = "query-realms" -} - -data "keycloak_role" "query_users" { - realm_id = data.keycloak_realm.master.id - client_id = data.keycloak_openid_client.master_realm_client.id - name = "query-users" -} - -data "keycloak_role" "view_authorization" { - realm_id = data.keycloak_realm.master.id - client_id = data.keycloak_openid_client.master_realm_client.id - name = "view-authorization" -} - -data "keycloak_role" "view_clients" { - realm_id = data.keycloak_realm.master.id - client_id = data.keycloak_openid_client.master_realm_client.id - name = "view-clients" -} - -data "keycloak_role" "view_events" { - realm_id = data.keycloak_realm.master.id - client_id = data.keycloak_openid_client.master_realm_client.id - name = "view-events" -} - -data "keycloak_role" "view_identity_providers" { - realm_id = data.keycloak_realm.master.id - client_id = data.keycloak_openid_client.master_realm_client.id - name = "view-identity-providers" -} - -data "keycloak_role" "view_realm" { - realm_id = data.keycloak_realm.master.id - client_id = data.keycloak_openid_client.master_realm_client.id - name = "view-realm" -} - -data "keycloak_role" "view_users" { - realm_id = data.keycloak_realm.master.id - client_id = data.keycloak_openid_client.master_realm_client.id - name = "view-users" -} - -resource "keycloak_group" "admin_group" { - realm_id = data.keycloak_realm.master.id - name = "admin" -} - -resource "keycloak_group_roles" "group_roles" { - realm_id = data.keycloak_realm.master.id - group_id = keycloak_group.admin_group.id - - role_ids = [ - data.keycloak_role.query_clients.id, - data.keycloak_role.query_groups.id, - data.keycloak_role.query_realms.id, - data.keycloak_role.query_users.id, - data.keycloak_role.view_authorization.id, - data.keycloak_role.view_clients.id, - data.keycloak_role.view_events.id, - data.keycloak_role.view_identity_providers.id, - data.keycloak_role.view_realm.id, - data.keycloak_role.view_users.id, - ] -} - resource "keycloak_realm" "twomartens_realm" { realm = "twomartens" enabled = true