mirror of
https://github.com/ansible-middleware/keycloak.git
synced 2026-07-25 00:44:48 +00:00
780 lines
30 KiB
ReStructuredText
780 lines
30 KiB
ReStructuredText
.. Document meta
|
|
|
|
:orphan:
|
|
|
|
.. |antsibull-internal-nbsp| unicode:: 0xA0
|
|
:trim:
|
|
|
|
.. meta::
|
|
:antsibull-docs: 2.24.0
|
|
|
|
.. Anchors
|
|
|
|
.. _ansible_collections.middleware_automation.keycloak.keycloak_authentication_module:
|
|
|
|
.. Anchors: short name for ansible.builtin
|
|
|
|
.. Title
|
|
|
|
keycloak_authentication -- Configure authentication in Keycloak
|
|
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
|
|
|
|
.. Collection note
|
|
|
|
.. note::
|
|
This module is part of the `middleware_automation.keycloak collection <https://galaxy.ansible.com/ui/repo/published/middleware_automation/keycloak/>`_.
|
|
|
|
It is not included in ``ansible-core``.
|
|
To check whether it is installed, run :code:`ansible-galaxy collection list`.
|
|
|
|
To install it, use: :code:`ansible\-galaxy collection install middleware\_automation.keycloak`.
|
|
|
|
To use it in a playbook, specify: :code:`middleware_automation.keycloak.keycloak_authentication`.
|
|
|
|
.. version_added
|
|
|
|
.. rst-class:: ansible-version-added
|
|
|
|
New in middleware\_automation.keycloak 3.0.0
|
|
|
|
.. contents::
|
|
:local:
|
|
:depth: 1
|
|
|
|
.. Deprecated
|
|
|
|
|
|
Synopsis
|
|
--------
|
|
|
|
.. Description
|
|
|
|
- This module actually can only make a copy of an existing authentication flow, add an execution to it and configure it.
|
|
- It can also delete the flow.
|
|
|
|
|
|
.. Aliases
|
|
|
|
|
|
.. Requirements
|
|
|
|
|
|
|
|
|
|
|
|
|
|
.. Options
|
|
|
|
Parameters
|
|
----------
|
|
|
|
.. raw:: html
|
|
|
|
<table class="colwidths-auto ansible-option-table docutils align-default" style="width: 100%">
|
|
<thead>
|
|
<tr class="row-odd">
|
|
<th class="head"><p>Parameter</p></th>
|
|
<th class="head"><p>Comments</p></th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
<tr class="row-even">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-alias"></div>
|
|
<p class="ansible-option-title"><strong>alias</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-alias" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
/ <span class="ansible-option-required">required</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>Alias for the authentication flow.</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-odd">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-auth_client_id"></div>
|
|
<p class="ansible-option-title"><strong>auth_client_id</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-auth_client_id" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>OpenID Connect <em>client_id</em> to authenticate to the API with.</p>
|
|
<p class="ansible-option-line"><strong class="ansible-option-default-bold">Default:</strong> <code class="ansible-value literal notranslate ansible-option-default">"admin-cli"</code></p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-even">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-auth_client_secret"></div>
|
|
<p class="ansible-option-title"><strong>auth_client_secret</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-auth_client_secret" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>Client Secret to use in conjunction with <em>auth_client_id</em> (if required).</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-odd">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-auth_keycloak_url"></div>
|
|
<div class="ansibleOptionAnchor" id="parameter-url"></div>
|
|
<p class="ansible-option-title"><strong>auth_keycloak_url</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-auth_keycloak_url" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: url</span></p>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
/ <span class="ansible-option-required">required</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>URL to the Keycloak instance.</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-even">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-auth_password"></div>
|
|
<div class="ansibleOptionAnchor" id="parameter-password"></div>
|
|
<p class="ansible-option-title"><strong>auth_password</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-auth_password" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: password</span></p>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>Password to authenticate for API access with.</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-odd">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-auth_realm"></div>
|
|
<p class="ansible-option-title"><strong>auth_realm</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-auth_realm" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>Keycloak realm name to authenticate to for API access.</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-even">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-auth_username"></div>
|
|
<div class="ansibleOptionAnchor" id="parameter-username"></div>
|
|
<p class="ansible-option-title"><strong>auth_username</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-auth_username" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line"><span class="ansible-option-aliases">aliases: username</span></p>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>Username to authenticate for API access with.</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-odd">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-authenticationExecutions"></div>
|
|
<p class="ansible-option-title"><strong>authenticationExecutions</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-authenticationExecutions" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">list</span>
|
|
/ <span class="ansible-option-elements">elements=dictionary</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>Configuration structure for the executions.</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-even">
|
|
<td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-authenticationExecutions/authenticationConfig"></div>
|
|
<p class="ansible-option-title"><strong>authenticationConfig</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-authenticationExecutions/authenticationConfig" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">dictionary</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
|
|
<p>Describe the config of the authentication.</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-odd">
|
|
<td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-authenticationExecutions/displayName"></div>
|
|
<p class="ansible-option-title"><strong>displayName</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-authenticationExecutions/displayName" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
|
|
<p>Name of the execution or subflow to create or update.</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-even">
|
|
<td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-authenticationExecutions/flowAlias"></div>
|
|
<p class="ansible-option-title"><strong>flowAlias</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-authenticationExecutions/flowAlias" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
|
|
<p>Alias of parent flow.</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-odd">
|
|
<td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-authenticationExecutions/index"></div>
|
|
<p class="ansible-option-title"><strong>index</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-authenticationExecutions/index" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">integer</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
|
|
<p>Priority order of the execution.</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-even">
|
|
<td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-authenticationExecutions/providerId"></div>
|
|
<p class="ansible-option-title"><strong>providerId</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-authenticationExecutions/providerId" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
|
|
<p><code class='docutils literal notranslate'>providerID</code> for the new flow when not copied from an existing flow.</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-odd">
|
|
<td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-authenticationExecutions/requirement"></div>
|
|
<p class="ansible-option-title"><strong>requirement</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-authenticationExecutions/requirement" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
|
|
<p>Control status of the subflow or execution.</p>
|
|
<p class="ansible-option-line"><strong class="ansible-option-choices">Choices:</strong></p>
|
|
<ul class="simple">
|
|
<li><p><code class="ansible-value literal notranslate ansible-option-choices-entry">"REQUIRED"</code></p></li>
|
|
<li><p><code class="ansible-value literal notranslate ansible-option-choices-entry">"ALTERNATIVE"</code></p></li>
|
|
<li><p><code class="ansible-value literal notranslate ansible-option-choices-entry">"DISABLED"</code></p></li>
|
|
<li><p><code class="ansible-value literal notranslate ansible-option-choices-entry">"CONDITIONAL"</code></p></li>
|
|
</ul>
|
|
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-even">
|
|
<td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-authenticationExecutions/subFlowType"></div>
|
|
<p class="ansible-option-title"><strong>subFlowType</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-authenticationExecutions/subFlowType" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell">
|
|
<p>For new subflows, optionally specify the type.</p>
|
|
<p>Is only used at creation.</p>
|
|
<p class="ansible-option-line"><strong class="ansible-option-choices">Choices:</strong></p>
|
|
<ul class="simple">
|
|
<li><p><code class="ansible-value literal notranslate ansible-option-default-bold"><strong>"basic-flow"</strong></code> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
|
|
<li><p><code class="ansible-value literal notranslate ansible-option-choices-entry">"form-flow"</code></p></li>
|
|
</ul>
|
|
|
|
</div></td>
|
|
</tr>
|
|
|
|
<tr class="row-odd">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-connection_timeout"></div>
|
|
<p class="ansible-option-title"><strong>connection_timeout</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-connection_timeout" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">integer</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>Controls the HTTP connections timeout period (in seconds) to Keycloak API.</p>
|
|
<p class="ansible-option-line"><strong class="ansible-option-default-bold">Default:</strong> <code class="ansible-value literal notranslate ansible-option-default">10</code></p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-even">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-copyFrom"></div>
|
|
<p class="ansible-option-title"><strong>copyFrom</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-copyFrom" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p><code class='docutils literal notranslate'>flowAlias</code> of the authentication flow to use for the copy.</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-odd">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-description"></div>
|
|
<p class="ansible-option-title"><strong>description</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-description" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>Description of the flow.</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-even">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-force"></div>
|
|
<p class="ansible-option-title"><strong>force</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-force" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">boolean</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>If <code class="ansible-value literal notranslate">true</code>, allows to remove the authentication flow and recreate it.</p>
|
|
<p class="ansible-option-line"><strong class="ansible-option-choices">Choices:</strong></p>
|
|
<ul class="simple">
|
|
<li><p><code class="ansible-value literal notranslate ansible-option-default-bold"><strong>false</strong></code> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
|
|
<li><p><code class="ansible-value literal notranslate ansible-option-choices-entry">true</code></p></li>
|
|
</ul>
|
|
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-odd">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-http_agent"></div>
|
|
<p class="ansible-option-title"><strong>http_agent</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-http_agent" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>Configures the HTTP User-Agent header.</p>
|
|
<p class="ansible-option-line"><strong class="ansible-option-default-bold">Default:</strong> <code class="ansible-value literal notranslate ansible-option-default">"Ansible"</code></p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-even">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-providerId"></div>
|
|
<p class="ansible-option-title"><strong>providerId</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-providerId" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p><code class='docutils literal notranslate'>providerId</code> for the new flow when not copied from an existing flow.</p>
|
|
<p class="ansible-option-line"><strong class="ansible-option-choices">Choices:</strong></p>
|
|
<ul class="simple">
|
|
<li><p><code class="ansible-value literal notranslate ansible-option-choices-entry">"basic-flow"</code></p></li>
|
|
<li><p><code class="ansible-value literal notranslate ansible-option-choices-entry">"client-flow"</code></p></li>
|
|
</ul>
|
|
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-odd">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-realm"></div>
|
|
<p class="ansible-option-title"><strong>realm</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-realm" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
/ <span class="ansible-option-required">required</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>The name of the realm in which is the authentication.</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-even">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-refresh_token"></div>
|
|
<p class="ansible-option-title"><strong>refresh_token</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-refresh_token" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>Authentication refresh token for Keycloak API.</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-odd">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-state"></div>
|
|
<p class="ansible-option-title"><strong>state</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-state" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>Control if the authentication flow must exists or not.</p>
|
|
<p class="ansible-option-line"><strong class="ansible-option-choices">Choices:</strong></p>
|
|
<ul class="simple">
|
|
<li><p><code class="ansible-value literal notranslate ansible-option-default-bold"><strong>"present"</strong></code> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
|
|
<li><p><code class="ansible-value literal notranslate ansible-option-choices-entry">"absent"</code></p></li>
|
|
</ul>
|
|
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-even">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-token"></div>
|
|
<p class="ansible-option-title"><strong>token</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-token" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>Authentication token for Keycloak API.</p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-odd">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="parameter-validate_certs"></div>
|
|
<p class="ansible-option-title"><strong>validate_certs</strong></p>
|
|
<a class="ansibleOptionLink" href="#parameter-validate_certs" title="Permalink to this option"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">boolean</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>Verify TLS certificates (do not disable this in production).</p>
|
|
<p class="ansible-option-line"><strong class="ansible-option-choices">Choices:</strong></p>
|
|
<ul class="simple">
|
|
<li><p><code class="ansible-value literal notranslate ansible-option-choices-entry">false</code></p></li>
|
|
<li><p><code class="ansible-value literal notranslate ansible-option-default-bold"><strong>true</strong></code> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
|
|
</ul>
|
|
|
|
</div></td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
|
|
|
|
|
|
.. Attributes
|
|
|
|
|
|
Attributes
|
|
----------
|
|
|
|
.. tabularcolumns:: \X{2}{10}\X{3}{10}\X{5}{10}
|
|
|
|
.. list-table::
|
|
:width: 100%
|
|
:widths: auto
|
|
:header-rows: 1
|
|
:class: longtable ansible-option-table
|
|
|
|
* - Attribute
|
|
- Support
|
|
- Description
|
|
|
|
* - .. raw:: html
|
|
|
|
<div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="attribute-action_group"></div>
|
|
|
|
.. _ansible_collections.middleware_automation.keycloak.keycloak_authentication_module__attribute-action_group:
|
|
|
|
.. rst-class:: ansible-option-title
|
|
|
|
**action_group**
|
|
|
|
.. raw:: html
|
|
|
|
<a class="ansibleOptionLink" href="#attribute-action_group" title="Permalink to this attribute"></a>
|
|
|
|
.. raw:: html
|
|
|
|
</div>
|
|
|
|
- .. raw:: html
|
|
|
|
<div class="ansible-option-cell">
|
|
|
|
:ansible-attribute-support-property:`Action group:` |antsibull-internal-nbsp|:ansible-attribute-support-full:`middleware\_automation.keycloak.keycloak`
|
|
|
|
:ansible-option-versionadded:`added in middleware\_automation.keycloak 3.0.0`
|
|
|
|
|
|
.. raw:: html
|
|
|
|
</div>
|
|
|
|
- .. raw:: html
|
|
|
|
<div class="ansible-option-cell">
|
|
|
|
Use :literal:`group/middleware\_automation.keycloak.keycloak` in :literal:`module\_defaults` to set defaults for this module.
|
|
|
|
|
|
.. raw:: html
|
|
|
|
</div>
|
|
|
|
|
|
* - .. raw:: html
|
|
|
|
<div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="attribute-check_mode"></div>
|
|
|
|
.. _ansible_collections.middleware_automation.keycloak.keycloak_authentication_module__attribute-check_mode:
|
|
|
|
.. rst-class:: ansible-option-title
|
|
|
|
**check_mode**
|
|
|
|
.. raw:: html
|
|
|
|
<a class="ansibleOptionLink" href="#attribute-check_mode" title="Permalink to this attribute"></a>
|
|
|
|
.. raw:: html
|
|
|
|
</div>
|
|
|
|
- .. raw:: html
|
|
|
|
<div class="ansible-option-cell">
|
|
|
|
:ansible-attribute-support-label:`Support: \ `\ :ansible-attribute-support-full:`full`
|
|
|
|
|
|
.. raw:: html
|
|
|
|
</div>
|
|
|
|
- .. raw:: html
|
|
|
|
<div class="ansible-option-cell">
|
|
|
|
Can run in :literal:`check\_mode` and return changed status prediction without modifying target.
|
|
|
|
|
|
.. raw:: html
|
|
|
|
</div>
|
|
|
|
|
|
* - .. raw:: html
|
|
|
|
<div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="attribute-diff_mode"></div>
|
|
|
|
.. _ansible_collections.middleware_automation.keycloak.keycloak_authentication_module__attribute-diff_mode:
|
|
|
|
.. rst-class:: ansible-option-title
|
|
|
|
**diff_mode**
|
|
|
|
.. raw:: html
|
|
|
|
<a class="ansibleOptionLink" href="#attribute-diff_mode" title="Permalink to this attribute"></a>
|
|
|
|
.. raw:: html
|
|
|
|
</div>
|
|
|
|
- .. raw:: html
|
|
|
|
<div class="ansible-option-cell">
|
|
|
|
:ansible-attribute-support-label:`Support: \ `\ :ansible-attribute-support-full:`full`
|
|
|
|
|
|
.. raw:: html
|
|
|
|
</div>
|
|
|
|
- .. raw:: html
|
|
|
|
<div class="ansible-option-cell">
|
|
|
|
Will return details on what has changed (or possibly needs changing in :literal:`check\_mode`\ ), when in diff mode.
|
|
|
|
|
|
.. raw:: html
|
|
|
|
</div>
|
|
|
|
|
|
|
|
.. Notes
|
|
|
|
|
|
.. Seealso
|
|
|
|
|
|
.. Examples
|
|
|
|
Examples
|
|
--------
|
|
|
|
.. code-block:: yaml+jinja
|
|
|
|
- name: Create an authentication flow from first broker login and add an execution to it.
|
|
middleware_automation.keycloak.keycloak_authentication:
|
|
auth_keycloak_url: http://localhost:8080
|
|
auth_realm: master
|
|
auth_username: admin
|
|
auth_password: password
|
|
realm: master
|
|
alias: "Copy of first broker login"
|
|
copyFrom: "first broker login"
|
|
authenticationExecutions:
|
|
- providerId: "test-execution1"
|
|
requirement: "REQUIRED"
|
|
authenticationConfig:
|
|
alias: "test.execution1.property"
|
|
config:
|
|
test1.property: "value"
|
|
- providerId: "test-execution2"
|
|
requirement: "REQUIRED"
|
|
authenticationConfig:
|
|
alias: "test.execution2.property"
|
|
config:
|
|
test2.property: "value"
|
|
state: present
|
|
|
|
- name: Re-create the authentication flow
|
|
middleware_automation.keycloak.keycloak_authentication:
|
|
auth_keycloak_url: http://localhost:8080
|
|
auth_realm: master
|
|
auth_username: admin
|
|
auth_password: password
|
|
realm: master
|
|
alias: "Copy of first broker login"
|
|
copyFrom: "first broker login"
|
|
authenticationExecutions:
|
|
- providerId: "test-provisioning"
|
|
requirement: "REQUIRED"
|
|
authenticationConfig:
|
|
alias: "test.provisioning.property"
|
|
config:
|
|
test.provisioning.property: "value"
|
|
state: present
|
|
force: true
|
|
|
|
- name: Create an authentication flow with subflow containing an execution.
|
|
middleware_automation.keycloak.keycloak_authentication:
|
|
auth_keycloak_url: http://localhost:8080
|
|
auth_realm: master
|
|
auth_username: admin
|
|
auth_password: password
|
|
realm: master
|
|
alias: "Copy of first broker login"
|
|
copyFrom: "first broker login"
|
|
authenticationExecutions:
|
|
- providerId: "test-execution1"
|
|
requirement: "REQUIRED"
|
|
- displayName: "New Subflow"
|
|
requirement: "REQUIRED"
|
|
- providerId: "auth-cookie"
|
|
requirement: "REQUIRED"
|
|
flowAlias: "New Sublow"
|
|
state: present
|
|
|
|
- name: Remove authentication.
|
|
middleware_automation.keycloak.keycloak_authentication:
|
|
auth_keycloak_url: http://localhost:8080
|
|
auth_realm: master
|
|
auth_username: admin
|
|
auth_password: password
|
|
realm: master
|
|
alias: "Copy of first broker login"
|
|
state: absent
|
|
|
|
|
|
|
|
.. Facts
|
|
|
|
|
|
.. Return values
|
|
|
|
Return Values
|
|
-------------
|
|
Common return values are documented :ref:`here <common_return_values>`, the following are the fields unique to this module:
|
|
|
|
.. raw:: html
|
|
|
|
<table class="colwidths-auto ansible-option-table docutils align-default" style="width: 100%">
|
|
<thead>
|
|
<tr class="row-odd">
|
|
<th class="head"><p>Key</p></th>
|
|
<th class="head"><p>Description</p></th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
<tr class="row-even">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="return-end_state"></div>
|
|
<p class="ansible-option-title"><strong>end_state</strong></p>
|
|
<a class="ansibleOptionLink" href="#return-end_state" title="Permalink to this return value"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">dictionary</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>Representation of the authentication after module execution.</p>
|
|
<p class="ansible-option-line"><strong class="ansible-option-returned-bold">Returned:</strong> on success</p>
|
|
<p class="ansible-option-line ansible-option-sample"><strong class="ansible-option-sample-bold">Sample:</strong> <code class="ansible-value literal notranslate ansible-option-sample">{"alias": "Copy of first broker login", "authenticationExecutions": [{"alias": "review profile config", "authenticationConfig": {"alias": "review profile config", "config": {"update.profile.on.first.login": "missing"}, "id": "6f09e4fb-aad4-496a-b873-7fa9779df6d7"}, "configurable": true, "displayName": "Review Profile", "id": "8f77dab8-2008-416f-989e-88b09ccf0b4c", "index": 0, "level": 0, "providerId": "idp-review-profile", "requirement": "REQUIRED", "requirementChoices": ["REQUIRED", "ALTERNATIVE", "DISABLED"]}], "builtIn": false, "description": "Actions taken after first broker login with identity provider account, which is not yet linked to any Keycloak account", "id": "bc228863-5887-4297-b898-4d988f8eaa5c", "providerId": "basic-flow", "topLevel": true}</code></p>
|
|
</div></td>
|
|
</tr>
|
|
<tr class="row-odd">
|
|
<td><div class="ansible-option-cell">
|
|
<div class="ansibleOptionAnchor" id="return-msg"></div>
|
|
<p class="ansible-option-title"><strong>msg</strong></p>
|
|
<a class="ansibleOptionLink" href="#return-msg" title="Permalink to this return value"></a>
|
|
<p class="ansible-option-type-line">
|
|
<span class="ansible-option-type">string</span>
|
|
</p>
|
|
</div></td>
|
|
<td><div class="ansible-option-cell">
|
|
<p>Message as to what action was taken.</p>
|
|
<p class="ansible-option-line"><strong class="ansible-option-returned-bold">Returned:</strong> always</p>
|
|
</div></td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
|
|
|
|
|
|
.. Status (Presently only deprecated)
|
|
|
|
|
|
.. Authors
|
|
|
|
Authors
|
|
~~~~~~~
|
|
|
|
- Philippe Gauthier (@elfelip)
|
|
- Gaëtan Daubresse (@Gaetan2907)
|
|
|
|
|
|
.. Extra links
|
|
|
|
|
|
.. Parsing errors
|