98 lines
3.5 KiB
YAML
98 lines
3.5 KiB
YAML
---
|
|
- name: Keycloak prepare realm
|
|
block:
|
|
- name: Configure realm "{{ iam_realm }}" cowork
|
|
community.general.keycloak_realm:
|
|
auth_client_id: admin-cli
|
|
auth_keycloak_url: "https://{{ iam_fqdn }}"
|
|
auth_realm: master
|
|
auth_username: "{{ iam_admin_username }}"
|
|
auth_password: "{{ iam_admin_pass }}"
|
|
realm: "{{ iam_realm }}"
|
|
id: "{{ iam_realm }}"
|
|
enabled: true
|
|
state: present
|
|
sso_session_idle_timeout: 1209600
|
|
sso_session_idle_timeout_remember_me: 15552000
|
|
sso_session_max_lifespan: 2592000
|
|
sso_session_max_lifespan_remember_me: 31622400
|
|
remember_me: true
|
|
reset_password_allowed: true
|
|
password_policy: "length(12) and digits(1) and upperCase(1) and lowerCase(1) and specialChars(1) and notUsername(true) and notEmail(true)"
|
|
admin_events_enabled: true
|
|
admin_events_details_enabled: true
|
|
attributes:
|
|
adminEventsExpiration: 1209600
|
|
events_expiration: 1209600
|
|
events_enabled: true
|
|
events_listeners:
|
|
- jboss-logging
|
|
- email
|
|
- "{{ 'user-events-publisher' if user_event_publisher.enable == 'yes' else 'email' }}"
|
|
internationalization_enabled: true
|
|
supported_locales: # ru, en
|
|
- ru
|
|
- en
|
|
default_locale: "ru" # ru, en
|
|
login_theme: product-login-theme # product-login-theme / base
|
|
validate_certs: false
|
|
retries: 7
|
|
delay: 10
|
|
register: realm_out
|
|
when: instance_app == "cowork"
|
|
|
|
- name: Configure realm "{{ iam_realm }}" gemteam
|
|
community.general.keycloak_realm:
|
|
auth_client_id: admin-cli
|
|
auth_keycloak_url: "https://{{ iam_fqdn }}"
|
|
auth_realm: master
|
|
auth_username: "{{ iam_admin_username }}"
|
|
auth_password: "{{ iam_admin_pass }}"
|
|
realm: "{{ iam_realm }}"
|
|
id: "{{ iam_realm }}"
|
|
enabled: true
|
|
state: present
|
|
sso_session_idle_timeout: 1209600
|
|
sso_session_idle_timeout_remember_me: 15552000
|
|
sso_session_max_lifespan: 2592000
|
|
sso_session_max_lifespan_remember_me: 31622400
|
|
remember_me: true
|
|
reset_password_allowed: true
|
|
password_policy: "length(12) and digits(1) and upperCase(1) and lowerCase(1) and specialChars(1) and notUsername(true) and notEmail(true)"
|
|
admin_events_enabled: true
|
|
admin_events_details_enabled: true
|
|
attributes:
|
|
adminEventsExpiration: 1209600
|
|
events_expiration: 1209600
|
|
events_enabled: true
|
|
events_listeners:
|
|
- jboss-logging
|
|
- email
|
|
- "{{ 'user-events-publisher' if user_event_publisher.enable == 'yes' else 'email' }}"
|
|
internationalization_enabled: true
|
|
supported_locales: # ru, en
|
|
- en
|
|
default_locale: "en" # ru, en
|
|
login_theme: product-login-theme # product-login-theme / base
|
|
validate_certs: false
|
|
retries: 7
|
|
delay: 10
|
|
register: realm_out
|
|
when: instance_app == "gemteam"
|
|
|
|
# - name: Debug realm
|
|
# debug:
|
|
# msg: "{{ realm_out }}"
|
|
|
|
# - name: Get a Keycloak public key
|
|
# community.general.keycloak_realm_info:
|
|
# realm: "{{ iam_realm }}"
|
|
# auth_keycloak_url: "{{ iam_fqdn }}"
|
|
# validate_certs: false
|
|
# delegate_to: localhost
|
|
# register: keycloak_realm
|
|
|
|
# - name: Debug curl out
|
|
# debug:
|
|
# msg:
|
|
# - "{{ keycloak_realm }}" |