Fix keycloak_context default from /auth to empty string

The /auth context path was used by legacy WildFly-based Keycloak but
is no longer needed for Quarkus-based Keycloak (17+) or RHBK. The
current default of /auth forces users to explicitly pass an empty
keycloak_context to avoid broken API URLs.

This changes the default to an empty string, updates argument_specs
and README documentation, and removes the now-unnecessary
keycloak_context: '' overrides from all molecule converge files.

Users on legacy WildFly-based Keycloak can still set
keycloak_context: /auth explicitly.

Made-with: Cursor
This commit is contained in:
pamenon
2026-04-23 12:25:03 +01:00
parent 28168a9a4f
commit 03fffaaf5f
7 changed files with 4 additions and 8 deletions

View File

@@ -8,8 +8,8 @@ argument_specs:
type: "str"
keycloak_context:
# line 5 of keycloak_realm/defaults/main.yml
default: "/auth"
description: "Context path for rest calls"
default: ""
description: "Context path for rest calls (was /auth for legacy WildFly-based Keycloak, empty for Quarkus-based Keycloak/RHBK)"
type: "str"
keycloak_http_port:
# line 4 of keycloak_realm/defaults/main.yml