mirror of
https://github.com/ansible-middleware/keycloak.git
synced 2026-05-06 21:33:05 +00:00
03fffaaf5f
The /auth context path was used by legacy WildFly-based Keycloak but is no longer needed for Quarkus-based Keycloak (17+) or RHBK. The current default of /auth forces users to explicitly pass an empty keycloak_context to avoid broken API URLs. This changes the default to an empty string, updates argument_specs and README documentation, and removes the now-unnecessary keycloak_context: '' overrides from all molecule converge files. Users on legacy WildFly-based Keycloak can still set keycloak_context: /auth explicitly. Made-with: Cursor
44 lines
1.5 KiB
YAML
44 lines
1.5 KiB
YAML
---
|
|
- name: Converge
|
|
hosts: all
|
|
vars:
|
|
keycloak_quarkus_show_deprecation_warnings: false
|
|
keycloak_quarkus_bootstrap_admin_password: "remembertochangeme"
|
|
keycloak_quarkus_bootstrap_admin_user: "remembertochangeme"
|
|
keycloak_quarkus_hostname: http://instance:8080
|
|
keycloak_quarkus_log: file
|
|
keycloak_quarkus_start_dev: true
|
|
keycloak_quarkus_proxy_mode: none
|
|
roles:
|
|
- role: keycloak_quarkus
|
|
- role: keycloak_realm
|
|
keycloak_url: "{{ keycloak_quarkus_hostname }}"
|
|
keycloak_admin_user: "{{ keycloak_quarkus_bootstrap_admin_user }}"
|
|
keycloak_admin_password: "{{ keycloak_quarkus_bootstrap_admin_password }}"
|
|
keycloak_client_users:
|
|
- username: TestUser
|
|
password: password
|
|
client_roles:
|
|
- client: TestClient
|
|
role: TestRoleUser
|
|
realm: "{{ keycloak_realm }}"
|
|
- username: TestAdmin
|
|
password: password
|
|
client_roles:
|
|
- client: TestClient
|
|
role: TestRoleUser
|
|
realm: "{{ keycloak_realm }}"
|
|
- client: TestClient
|
|
role: TestRoleAdmin
|
|
realm: "{{ keycloak_realm }}"
|
|
keycloak_realm: TestRealm
|
|
keycloak_clients:
|
|
- name: TestClient
|
|
realm: "{{ keycloak_realm }}"
|
|
public_client: "{{ keycloak_client_public }}"
|
|
web_origins: "{{ keycloak_client_web_origins }}"
|
|
users: "{{ keycloak_client_users }}"
|
|
client_id: TestClient
|
|
attributes:
|
|
post.logout.redirect.uris: '/public/logout'
|