diff --git a/molecule/debian/molecule.yml b/molecule/debian/molecule.yml index 8cccc25..0bd0a62 100644 --- a/molecule/debian/molecule.yml +++ b/molecule/debian/molecule.yml @@ -6,7 +6,7 @@ platforms: image: ghcr.io/hspaans/molecule-containers:debian-13 pre_build_image: true privileged: true - port_bindings: + exposed_ports: - "8080/tcp" - "8443/tcp" - "8009/tcp" diff --git a/molecule/default/molecule.yml b/molecule/default/molecule.yml index 220bce7..a6d099d 100644 --- a/molecule/default/molecule.yml +++ b/molecule/default/molecule.yml @@ -7,7 +7,7 @@ platforms: pre_build_image: true privileged: true command: "/usr/sbin/init" - port_bindings: + exposed_ports: - "8080/tcp" - "8443/tcp" - "8009/tcp" diff --git a/molecule/group_vars/all/vars.yml b/molecule/group_vars/all/vars.yml index 3e54a86..a5834db 100644 --- a/molecule/group_vars/all/vars.yml +++ b/molecule/group_vars/all/vars.yml @@ -1,4 +1,9 @@ --- +keycloak_download_validate_certs: false +keycloak_validate_certs: false +keycloak_quarkus_download_validate_certs: false +keycloak_quarkus_validate_certs: false +keycloak_realm_validate_certs: false keycloak_quarkus_require_privilege_escalation: "{{ keycloak_install_requires_become | default(true) }}" keycloak_quarkus_systemd_require_privilege_escalation: "{{ keycloak_install_requires_become | default(true) }}" keycloak_quarkus_install_require_privilege_escalation: "{{ keycloak_install_requires_become | default(true) }}" diff --git a/molecule/https_revproxy/molecule.yml b/molecule/https_revproxy/molecule.yml index 7ad8db8..74a758b 100644 --- a/molecule/https_revproxy/molecule.yml +++ b/molecule/https_revproxy/molecule.yml @@ -9,7 +9,7 @@ platforms: command: "/usr/sbin/init" networks: - name: keycloak - port_bindings: + exposed_ports: - "8080/tcp" published_ports: - 0.0.0.0:8080:8080/tcp @@ -20,7 +20,7 @@ platforms: command: "/usr/sbin/init" networks: - name: keycloak - port_bindings: + exposed_ports: - "443/tcp" published_ports: - 0.0.0.0:443:443/tcp diff --git a/molecule/keycloak_modules/molecule.yml b/molecule/keycloak_modules/molecule.yml index 3486b82..f59d2e7 100644 --- a/molecule/keycloak_modules/molecule.yml +++ b/molecule/keycloak_modules/molecule.yml @@ -7,7 +7,7 @@ platforms: pre_build_image: true privileged: true command: "/usr/sbin/init" - port_bindings: + exposed_ports: - "8080/tcp" - "8443/tcp" - "8009/tcp" diff --git a/molecule/keycloak_modules/verify.yml b/molecule/keycloak_modules/verify.yml index 4d799de..ca8c7e9 100644 --- a/molecule/keycloak_modules/verify.yml +++ b/molecule/keycloak_modules/verify.yml @@ -90,6 +90,7 @@ auth_realm: "{{ auth_realm }}" auth_username: "{{ auth_username }}" auth_password: "{{ auth_password }}" + validate_certs: false block: - name: Reset fixtures from a previous verify run middleware_automation.keycloak.keycloak_user: @@ -168,6 +169,7 @@ middleware_automation.keycloak.keycloak_realm_info: auth_keycloak_url: "{{ auth_keycloak_url }}" realm: "{{ target_realm }}" + validate_certs: false - name: Exercise migrated modules against running Keycloak module_defaults: @@ -176,6 +178,7 @@ auth_realm: "{{ auth_realm }}" auth_username: "{{ auth_username }}" auth_password: "{{ auth_password }}" + validate_certs: false block: - name: keycloak_realm_keys_metadata_info — query realm keys middleware_automation.keycloak.keycloak_realm_keys_metadata_info: @@ -536,6 +539,7 @@ auth_realm: "{{ auth_realm }}" auth_username: "{{ auth_username }}" auth_password: "{{ auth_password }}" + validate_certs: false block: - name: keycloak_authz_custom_policy — remove custom policy if created middleware_automation.keycloak.keycloak_authz_custom_policy: diff --git a/molecule/overridexml/molecule.yml b/molecule/overridexml/molecule.yml index 011c08e..a421f5f 100644 --- a/molecule/overridexml/molecule.yml +++ b/molecule/overridexml/molecule.yml @@ -7,7 +7,7 @@ platforms: pre_build_image: true privileged: true command: "/usr/sbin/init" - port_bindings: + exposed_ports: - "8080/tcp" - "8443/tcp" - "8009/tcp" diff --git a/molecule/quarkus/molecule.yml b/molecule/quarkus/molecule.yml index 20ca3bc..3b171e4 100644 --- a/molecule/quarkus/molecule.yml +++ b/molecule/quarkus/molecule.yml @@ -7,7 +7,7 @@ platforms: pre_build_image: true privileged: true command: "/usr/sbin/init" - port_bindings: + exposed_ports: - "8080/tcp" - "8443/tcp" - "8009/tcp" diff --git a/molecule/quarkus_devmode/molecule.yml b/molecule/quarkus_devmode/molecule.yml index 1b079bf..f7c2606 100644 --- a/molecule/quarkus_devmode/molecule.yml +++ b/molecule/quarkus_devmode/molecule.yml @@ -7,7 +7,7 @@ platforms: pre_build_image: true privileged: true command: "/usr/sbin/init" - port_bindings: + exposed_ports: - "8080/tcp" - "8009/tcp" - "9000/tcp" diff --git a/molecule/quarkus_ha/molecule.yml b/molecule/quarkus_ha/molecule.yml index 54dd70a..05cd68e 100644 --- a/molecule/quarkus_ha/molecule.yml +++ b/molecule/quarkus_ha/molecule.yml @@ -11,7 +11,7 @@ platforms: - keycloak networks: - name: rhbk - port_bindings: + exposed_ports: - "8080/tcp" - "8443/tcp" - "9000/tcp" @@ -24,7 +24,7 @@ platforms: - keycloak networks: - name: rhbk - port_bindings: + exposed_ports: - "8080/tcp" - "8443/tcp" - "9000/tcp" @@ -37,7 +37,7 @@ platforms: - database networks: - name: rhbk - port_bindings: + exposed_ports: - "5432/tcp" mounts: - type: bind diff --git a/molecule/quarkus_ha_26.4_below/molecule.yml b/molecule/quarkus_ha_26.4_below/molecule.yml index 54dd70a..05cd68e 100644 --- a/molecule/quarkus_ha_26.4_below/molecule.yml +++ b/molecule/quarkus_ha_26.4_below/molecule.yml @@ -11,7 +11,7 @@ platforms: - keycloak networks: - name: rhbk - port_bindings: + exposed_ports: - "8080/tcp" - "8443/tcp" - "9000/tcp" @@ -24,7 +24,7 @@ platforms: - keycloak networks: - name: rhbk - port_bindings: + exposed_ports: - "8080/tcp" - "8443/tcp" - "9000/tcp" @@ -37,7 +37,7 @@ platforms: - database networks: - name: rhbk - port_bindings: + exposed_ports: - "5432/tcp" mounts: - type: bind diff --git a/molecule/quarkus_ha_remote/molecule.yml b/molecule/quarkus_ha_remote/molecule.yml index ba3f6fd..6308bc9 100644 --- a/molecule/quarkus_ha_remote/molecule.yml +++ b/molecule/quarkus_ha_remote/molecule.yml @@ -11,7 +11,7 @@ platforms: - keycloak networks: - name: rhbk - port_bindings: + exposed_ports: - "8080/tcp" - "8443/tcp" - "9000/tcp" @@ -24,7 +24,7 @@ platforms: - infinispan networks: - name: rhbk - port_bindings: + exposed_ports: - "11222/tcp" - name: postgres image: ubuntu/postgres:14-22.04_beta @@ -35,7 +35,7 @@ platforms: - database networks: - name: rhbk - port_bindings: + exposed_ports: - "5432/tcp" mounts: - type: bind diff --git a/molecule/quarkus_upgrade/molecule.yml b/molecule/quarkus_upgrade/molecule.yml index ae1e502..324045e 100644 --- a/molecule/quarkus_upgrade/molecule.yml +++ b/molecule/quarkus_upgrade/molecule.yml @@ -11,8 +11,8 @@ platforms: command: "/usr/sbin/init" pre_build_image: true privileged: true - port_bindings: - - 8080:8080 + exposed_ports: + - "8080/tcp" - "9000/tcp" published_ports: - 0.0.0.0:8080:8080/TCP diff --git a/roles/keycloak/tasks/install.yml b/roles/keycloak/tasks/install.yml index 37ced27..139d001 100644 --- a/roles/keycloak/tasks/install.yml +++ b/roles/keycloak/tasks/install.yml @@ -87,7 +87,7 @@ mode: '0644' url_username: "{{ keycloak_binary_download_user | default(omit) }}" url_password: "{{ keycloak_binary_download_pass | default(omit) }}" - validate_certs: false + validate_certs: "{{ keycloak_download_validate_certs | default(omit) }}" delegate_to: localhost run_once: true when: @@ -114,7 +114,7 @@ product_type: DISTRIBUTION product_version: "{{ sso_version.split('.')[:2] | join('.') }}" product_category: "{{ sso_product_category }}" - validate_certs: false + validate_certs: "{{ keycloak_download_validate_certs | default(omit) }}" register: keycloak_rhn_products no_log: "{{ omit_rhn_output | default(true) }}" delegate_to: localhost @@ -135,7 +135,7 @@ client_secret: "{{ rhn_password }}" product_id: "{{ (keycloak_rhn_filtered_products | first).id }}" dest: "{{ keycloak_local_path.stat.path }}/{{ keycloak_archive }}" - validate_certs: false + validate_certs: "{{ keycloak_download_validate_certs | default(omit) }}" no_log: "{{ omit_rhn_output | default(true) }}" delegate_to: localhost run_once: true @@ -145,7 +145,7 @@ url: "{{ keycloak_rhsso_download_url }}" dest: "{{ keycloak_local_path.stat.path }}/{{ keycloak_archive }}" mode: '0644' - validate_certs: false + validate_certs: "{{ keycloak_download_validate_certs | default(omit) }}" delegate_to: localhost run_once: true when: diff --git a/roles/keycloak/tasks/main.yml b/roles/keycloak/tasks/main.yml index ebd0ac0..c840a1b 100644 --- a/roles/keycloak/tasks/main.yml +++ b/roles/keycloak/tasks/main.yml @@ -60,7 +60,7 @@ url: "{{ keycloak_url }}/auth/realms/master/protocol/openid-connect/token" method: POST body: "client_id={{ keycloak_auth_client }}&username={{ keycloak_admin_user }}&password={{ keycloak_admin_password }}&grant_type=password" - validate_certs: false + validate_certs: "{{ keycloak_validate_certs | default(omit) }}" register: keycloak_auth_response until: keycloak_auth_response.status == 200 retries: 2 @@ -81,6 +81,7 @@ - name: "Wait until service becomes active: {{ keycloak_config.service_name }}" ansible.builtin.uri: url: "{{ keycloak_config.health_url }}" + validate_certs: "{{ keycloak_validate_certs | default(omit) }}" register: keycloak_status until: keycloak_status.status == 200 retries: 25 diff --git a/roles/keycloak/tasks/restart_keycloak.yml b/roles/keycloak/tasks/restart_keycloak.yml index 922b983..335cb92 100644 --- a/roles/keycloak/tasks/restart_keycloak.yml +++ b/roles/keycloak/tasks/restart_keycloak.yml @@ -12,6 +12,7 @@ - name: "Wait until service becomes active: {{ keycloak_config.service_name }}" ansible.builtin.uri: url: "{{ keycloak_config.health_url }}" + validate_certs: "{{ keycloak_validate_certs | default(omit) }}" register: keycloak_status until: keycloak_status.status == 200 delegate_to: "{{ ansible_play_hosts | first }}" diff --git a/roles/keycloak/tasks/rhsso_patch.yml b/roles/keycloak/tasks/rhsso_patch.yml index dcf33a3..32c500d 100644 --- a/roles/keycloak/tasks/rhsso_patch.yml +++ b/roles/keycloak/tasks/rhsso_patch.yml @@ -29,7 +29,7 @@ product_type: BUGFIX product_version: "{{ sso_version.split('.')[:2] | join('.') }}" product_category: "{{ sso_product_category }}" - validate_certs: false + validate_certs: "{{ keycloak_download_validate_certs | default(omit) }}" register: keycloak_rhn_products no_log: "{{ omit_rhn_output | default(true) }}" delegate_to: localhost @@ -75,7 +75,7 @@ client_secret: "{{ rhn_password }}" product_id: "{{ (keycloak_rhn_filtered_products | sort | last).id }}" dest: "{{ keycloak_local_path.stat.path }}/{{ keycloak_patch_bundle }}" - validate_certs: false + validate_certs: "{{ keycloak_download_validate_certs | default(omit) }}" no_log: "{{ omit_rhn_output | default(true) }}" delegate_to: localhost run_once: true @@ -143,6 +143,7 @@ - name: "Wait until service becomes active: {{ keycloak_config.service_name }}" ansible.builtin.uri: url: "{{ keycloak_config.health_url }}" + validate_certs: "{{ keycloak_validate_certs | default(omit) }}" register: keycloak_status until: keycloak_status.status == 200 retries: 25 diff --git a/roles/keycloak/tasks/start_keycloak.yml b/roles/keycloak/tasks/start_keycloak.yml index 9176b40..256bedf 100644 --- a/roles/keycloak/tasks/start_keycloak.yml +++ b/roles/keycloak/tasks/start_keycloak.yml @@ -10,6 +10,7 @@ - name: "Wait until service becomes active: {{ keycloak_config.service_name }}" ansible.builtin.uri: url: "{{ keycloak_config.health_url }}" + validate_certs: "{{ keycloak_validate_certs | default(omit) }}" register: keycloak_status until: keycloak_status.status == 200 retries: "{{ keycloak_service_start_retries }}" diff --git a/roles/keycloak_quarkus/tasks/install.yml b/roles/keycloak_quarkus/tasks/install.yml index f141374..4deb470 100644 --- a/roles/keycloak_quarkus/tasks/install.yml +++ b/roles/keycloak_quarkus/tasks/install.yml @@ -81,7 +81,7 @@ mode: '0640' url_username: "{{ keycloak_quarkus_binary_download_user | default(omit) }}" url_password: "{{ keycloak_quarkus_binary_download_pass | default(omit) }}" - validate_certs: false + validate_certs: "{{ keycloak_quarkus_download_validate_certs | default(omit) }}" delegate_to: localhost become: false run_once: true @@ -110,7 +110,7 @@ product_type: DISTRIBUTION product_version: "{{ rhbk_version }}" product_category: "{{ rhbk_product_category }}" - validate_certs: false + validate_certs: "{{ keycloak_quarkus_download_validate_certs | default(omit) }}" register: keycloak_quarkus_rhn_products no_log: "{{ omit_rhn_output | default(true) }}" delegate_to: localhost @@ -129,7 +129,7 @@ product_id: "{{ (keycloak_quarkus_rhn_filtered_products | first).id }}" dest: "{{ keycloak_quarkus_local_path.stat.path }}/{{ keycloak.bundle }}" mode: '0640' - validate_certs: false + validate_certs: "{{ keycloak_quarkus_download_validate_certs | default(omit) }}" no_log: "{{ omit_rhn_output | default(true) }}" delegate_to: localhost run_once: true @@ -243,6 +243,7 @@ group: "{{ keycloak.service_group }}" mode: '0640' checksum: "{{ item.checksum | default(omit) }}" + validate_certs: "{{ keycloak_quarkus_download_validate_certs | default(omit) }}" become: "{{ keycloak_quarkus_install_require_privilege_escalation | default(true) }}" loop: "{{ keycloak_quarkus_providers }}" when: item.url is defined and item.url | length > 0 @@ -258,6 +259,7 @@ username: "{{ item.maven.username | default(omit) }}" password: "{{ item.maven.password | default(omit) }}" dest: "{{ keycloak_quarkus_local_path.stat.path }}/{{ item.id }}.jar" + validate_certs: "{{ keycloak_quarkus_download_validate_certs | default(omit) }}" delegate_to: "localhost" run_once: true loop: "{{ keycloak_quarkus_providers }}" @@ -308,6 +310,7 @@ owner: "{{ keycloak.service_user }}" group: "{{ keycloak.service_group }}" mode: '0640' + validate_certs: "{{ keycloak_quarkus_download_validate_certs | default(omit) }}" become: "{{ keycloak_quarkus_install_require_privilege_escalation | default(true) }}" loop: "{{ keycloak_quarkus_policies }}" when: item.url is defined and item.url | length > 0 diff --git a/roles/keycloak_quarkus/tasks/restart.yml b/roles/keycloak_quarkus/tasks/restart.yml index cfa2128..a12cc28 100644 --- a/roles/keycloak_quarkus/tasks/restart.yml +++ b/roles/keycloak_quarkus/tasks/restart.yml @@ -10,6 +10,7 @@ - name: "Wait until service becomes active: {{ keycloak.service_name }}" ansible.builtin.uri: url: "{{ keycloak.health_url }}" + validate_certs: "{{ keycloak_quarkus_validate_certs | default(omit) }}" register: keycloak_quarkus_status until: keycloak_quarkus_status.status == 200 retries: "{{ keycloak_quarkus_restart_health_check_retries }}" diff --git a/roles/keycloak_quarkus/tasks/start.yml b/roles/keycloak_quarkus/tasks/start.yml index 2bdf6f2..d3bdc14 100644 --- a/roles/keycloak_quarkus/tasks/start.yml +++ b/roles/keycloak_quarkus/tasks/start.yml @@ -10,6 +10,7 @@ - name: "Wait until service becomes active: {{ keycloak.service_name }}" ansible.builtin.uri: url: "{{ keycloak.health_url }}" + validate_certs: "{{ keycloak_quarkus_validate_certs | default(omit) }}" register: keycloak_quarkus_status until: keycloak_quarkus_status.status == 200 retries: 25 diff --git a/roles/keycloak_realm/tasks/main.yml b/roles/keycloak_realm/tasks/main.yml index 59f9413..ec82dab 100644 --- a/roles/keycloak_realm/tasks/main.yml +++ b/roles/keycloak_realm/tasks/main.yml @@ -4,7 +4,7 @@ url: "{{ keycloak_realm_url }}{{ keycloak_realm_context }}/realms/master/protocol/openid-connect/token" method: POST body: "client_id={{ keycloak_realm_auth_client }}&username={{ keycloak_realm_admin_user }}&password={{ keycloak_realm_admin_password }}&grant_type=password" - validate_certs: false + validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}" no_log: "{{ keycloak_realm_no_log | default('True') }}" register: keycloak_realm_auth_response until: keycloak_realm_auth_response.status == 200 @@ -15,7 +15,7 @@ ansible.builtin.uri: url: "{{ keycloak_realm_url }}{{ keycloak_realm_context }}/admin/realms/{{ keycloak_realm_realm }}" method: GET - validate_certs: false + validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}" status_code: - 200 - 404 @@ -29,7 +29,7 @@ url: "{{ keycloak_realm_url }}{{ keycloak_realm_context }}/admin/realms" method: POST body: "{{ lookup('template', 'realm.json.j2') }}" - validate_certs: false + validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}" body_format: json headers: Authorization: "Bearer {{ keycloak_realm_auth_response.json.access_token }}" @@ -42,6 +42,7 @@ auth_realm: "{{ keycloak_realm_auth_realm }}" auth_username: "{{ keycloak_realm_admin_user }}" auth_password: "{{ keycloak_realm_admin_password }}" + validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}" realm: "{{ item.realm | default(keycloak_realm_realm) }}" name: "{{ item.name }}" state: present @@ -72,6 +73,7 @@ auth_realm: "{{ keycloak_realm_auth_realm }}" auth_username: "{{ keycloak_realm_admin_user }}" auth_password: "{{ keycloak_realm_admin_password }}" + validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}" realm: "{{ item.realm | default(keycloak_realm_realm) }}" default_roles: "{{ item.roles | default(omit) }}" client_id: "{{ item.client_id | default(omit) }}" diff --git a/roles/keycloak_realm/tasks/manage_client_roles.yml b/roles/keycloak_realm/tasks/manage_client_roles.yml index c4719e1..e046aa9 100644 --- a/roles/keycloak_realm/tasks/manage_client_roles.yml +++ b/roles/keycloak_realm/tasks/manage_client_roles.yml @@ -8,6 +8,7 @@ auth_realm: "{{ keycloak_realm_auth_realm }}" auth_username: "{{ keycloak_realm_admin_user }}" auth_password: "{{ keycloak_realm_admin_password }}" + validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}" state: present loop: "{{ client.roles | flatten }}" no_log: "{{ keycloak_realm_no_log | default('True') }}" diff --git a/roles/keycloak_realm/tasks/manage_token_lifespan.yml b/roles/keycloak_realm/tasks/manage_token_lifespan.yml index 6149b45..6133fc3 100644 --- a/roles/keycloak_realm/tasks/manage_token_lifespan.yml +++ b/roles/keycloak_realm/tasks/manage_token_lifespan.yml @@ -5,7 +5,7 @@ method: PUT body: accessTokenLifespan: 300 - validate_certs: false + validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}" body_format: json status_code: - 200 diff --git a/roles/keycloak_realm/tasks/manage_user.yml b/roles/keycloak_realm/tasks/manage_user.yml index 983bb78..1de3505 100644 --- a/roles/keycloak_realm/tasks/manage_user.yml +++ b/roles/keycloak_realm/tasks/manage_user.yml @@ -2,7 +2,7 @@ - name: "Check if User Already Exists" ansible.builtin.uri: url: "{{ keycloak_realm_url }}{{ keycloak_realm_context }}/admin/realms/{{ keycloak_realm_realm }}/users?username={{ user.username }}" - validate_certs: false + validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}" headers: Authorization: "Bearer {{ keycloak_realm_auth_response.json.access_token }}" register: keycloak_realm_user_search_result @@ -18,7 +18,7 @@ email: "{{ user.email | default(omit) }}" firstName: "{{ user.firstName | default(omit) }}" lastName: "{{ user.lastName | default(omit) }}" - validate_certs: false + validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}" body_format: json headers: Authorization: "Bearer {{ keycloak_realm_auth_response.json.access_token }}" @@ -28,7 +28,7 @@ - name: "Get User" ansible.builtin.uri: url: "{{ keycloak_realm_url }}{{ keycloak_realm_context }}/admin/realms/{{ keycloak_realm_realm }}/users?username={{ user.username }}" - validate_certs: false + validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}" headers: Authorization: "Bearer {{ keycloak_realm_auth_response.json.access_token }}" register: keycloak_realm_user @@ -41,7 +41,7 @@ type: password temporary: false value: "{{ user.password }}" - validate_certs: false + validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}" body_format: json status_code: - 200 diff --git a/roles/keycloak_realm/tasks/manage_user_client_roles.yml b/roles/keycloak_realm/tasks/manage_user_client_roles.yml index 3dab651..1a6f250 100644 --- a/roles/keycloak_realm/tasks/manage_user_client_roles.yml +++ b/roles/keycloak_realm/tasks/manage_user_client_roles.yml @@ -3,7 +3,7 @@ ansible.builtin.uri: url: "{{ keycloak_realm_url }}{{ keycloak_realm_context }}/admin/realms/{{ client_role.realm | default(keycloak_realm_realm) }}" method: GET - validate_certs: false + validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}" status_code: - 200 headers: @@ -17,7 +17,7 @@ default(keycloak_realm_realm) }}/users/{{ (keycloak_realm_user.json | first).id }}/role-mappings/clients/{{ (keycloak_realm_create_client_result.results | \ selectattr('end_state.clientId', 'equalto', client_role.client) | list | first).end_state.id }}/available" method: GET - validate_certs: false + validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}" status_code: - 200 headers: @@ -37,7 +37,7 @@ containerId: "{{ item.containerId }}" name: "{{ item.name }}" composite: "{{ item.composite }}" - validate_certs: false + validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}" body_format: json headers: Authorization: "Bearer {{ keycloak_realm_auth_response.json.access_token }}" diff --git a/roles/keycloak_realm/tasks/manage_user_roles.yml b/roles/keycloak_realm/tasks/manage_user_roles.yml index cbb8fc9..48758a3 100644 --- a/roles/keycloak_realm/tasks/manage_user_roles.yml +++ b/roles/keycloak_realm/tasks/manage_user_roles.yml @@ -2,8 +2,8 @@ - name: "Get User {{ user.username }}" ansible.builtin.uri: url: "{{ keycloak_realm_url }}{{ keycloak_realm_context }}/admin/realms/{{ keycloak_realm_realm }}/users?username={{ user.username }}" + validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}" headers: - validate_certs: false Authorization: "Bearer {{ keycloak_realm_auth_response.json.access_token }}" register: keycloak_realm_user @@ -12,7 +12,7 @@ url: "{{ keycloak_realm_url }}{{ keycloak_realm_context }}/realms/master/protocol/openid-connect/token" method: POST body: "client_id={{ keycloak_realm_auth_client }}&username={{ keycloak_realm_admin_user }}&password={{ keycloak_realm_admin_password }}&grant_type=password" - validate_certs: false + validate_certs: "{{ keycloak_realm_validate_certs | default(omit) }}" register: keycloak_realm_auth_response no_log: "{{ keycloak_realm_no_log | default('True') }}" until: keycloak_realm_auth_response.status == 200