2martens/terraform
1
0
Fork 0
mirror of https://github.com/2martens/terraform.git synced 2026-10-17 19:26:51 +02:00
Code Issues Activity

feat: Add admin group

Browse Source
This commit is contained in:
2martens
2025-01-28 10:43:00 +01:00
parent 8a799fe55f
commit dfb22ba7a3
1 changed files with 92 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
terraform/keycloak.tf
+92
View File
@@ -1,3 +1,95 @@
data "keycloak_realm" "master" {
realm = "master"
}
data "keycloak_openid_client" "master_realm_client" {
realm_id = data.keycloak_realm.master.id
client_id = "master-realm"
}
data "keycloak_role" "query_clients" {
realm_id = data.keycloak_realm.master.id
client_id = data.keycloak_openid_client.master_realm_client.id
name = "query-clients"
}
data "keycloak_role" "query_groups" {
realm_id = data.keycloak_realm.master.id
client_id = data.keycloak_openid_client.master_realm_client.id
name = "query-groups"
}
data "keycloak_role" "query_realms" {
realm_id = data.keycloak_realm.master.id
client_id = data.keycloak_openid_client.master_realm_client.id
name = "query-realms"
}
data "keycloak_role" "query_users" {
realm_id = data.keycloak_realm.master.id
client_id = data.keycloak_openid_client.master_realm_client.id
name = "query-users"
}
data "keycloak_role" "view_authorization" {
realm_id = data.keycloak_realm.master.id
client_id = data.keycloak_openid_client.master_realm_client.id
name = "view-authorization"
}
data "keycloak_role" "view_clients" {
realm_id = data.keycloak_realm.master.id
client_id = data.keycloak_openid_client.master_realm_client.id
name = "view-clients"
}
data "keycloak_role" "view_events" {
realm_id = data.keycloak_realm.master.id
client_id = data.keycloak_openid_client.master_realm_client.id
name = "view-events"
}
data "keycloak_role" "view_identity_providers" {
realm_id = data.keycloak_realm.master.id
client_id = data.keycloak_openid_client.master_realm_client.id
name = "view-identity-providers"
}
data "keycloak_role" "view_realm" {
realm_id = data.keycloak_realm.master.id
client_id = data.keycloak_openid_client.master_realm_client.id
name = "view-realm"
}
data "keycloak_role" "view_users" {
realm_id = data.keycloak_realm.master.id
client_id = data.keycloak_openid_client.master_realm_client.id
name = "view-users"
}
resource "keycloak_group" "admin_group" {
realm_id = data.keycloak_realm.master.id
name = "admin"
}
resource "keycloak_group_roles" "group_roles" {
realm_id = data.keycloak_realm.master.id
group_id = keycloak_group.admin_group.id
role_ids = [
data.keycloak_role.query_clients.id,
data.keycloak_role.query_groups.id,
data.keycloak_role.query_realms.id,
data.keycloak_role.query_users.id,
data.keycloak_role.view_authorization.id,
data.keycloak_role.view_clients.id,
data.keycloak_role.view_events.id,
data.keycloak_role.view_identity_providers.id,
data.keycloak_role.view_realm.id,
data.keycloak_role.view_users.id,
]
}
resource "keycloak_realm" "twomartens_realm" { resource "keycloak_realm" "twomartens_realm" {
realm = "twomartens" realm = "twomartens"
enabled = true enabled = true