@pulumi/keycloak 5.3.0 → 5.3.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/attributeImporterIdentityProviderMapper.d.ts +46 -63
- package/attributeImporterIdentityProviderMapper.js +25 -33
- package/attributeImporterIdentityProviderMapper.js.map +1 -1
- package/attributeToRoleIdentityMapper.d.ts +10 -2
- package/attributeToRoleIdentityMapper.js +10 -2
- package/attributeToRoleIdentityMapper.js.map +1 -1
- package/authentication/bindings.d.ts +2 -0
- package/authentication/bindings.js +2 -0
- package/authentication/bindings.js.map +1 -1
- package/authentication/execution.d.ts +8 -2
- package/authentication/execution.js +8 -2
- package/authentication/execution.js.map +1 -1
- package/authentication/executionConfig.d.ts +12 -2
- package/authentication/executionConfig.js +12 -2
- package/authentication/executionConfig.js.map +1 -1
- package/authentication/flow.d.ts +16 -2
- package/authentication/flow.js +16 -2
- package/authentication/flow.js.map +1 -1
- package/authentication/subflow.d.ts +18 -2
- package/authentication/subflow.js +18 -2
- package/authentication/subflow.js.map +1 -1
- package/customIdentityProviderMapping.d.ts +13 -5
- package/customIdentityProviderMapping.js +10 -2
- package/customIdentityProviderMapping.js.map +1 -1
- package/customUserFederation.d.ts +51 -50
- package/customUserFederation.js +27 -14
- package/customUserFederation.js.map +1 -1
- package/defaultGroups.d.ts +19 -27
- package/defaultGroups.js +19 -9
- package/defaultGroups.js.map +1 -1
- package/defaultRoles.d.ts +13 -2
- package/defaultRoles.js +13 -2
- package/defaultRoles.js.map +1 -1
- package/genericClientProtocolMapper.d.ts +40 -37
- package/genericClientProtocolMapper.js +25 -13
- package/genericClientProtocolMapper.js.map +1 -1
- package/genericClientRoleMapper.d.ts +22 -2
- package/genericClientRoleMapper.js +22 -2
- package/genericClientRoleMapper.js.map +1 -1
- package/genericProtocolMapper.d.ts +8 -2
- package/genericProtocolMapper.js +8 -2
- package/genericProtocolMapper.js.map +1 -1
- package/genericRoleMapper.d.ts +22 -2
- package/genericRoleMapper.js +22 -2
- package/genericRoleMapper.js.map +1 -1
- package/getAuthenticationExecution.d.ts +4 -0
- package/getAuthenticationExecution.js +4 -0
- package/getAuthenticationExecution.js.map +1 -1
- package/getAuthenticationFlow.d.ts +4 -0
- package/getAuthenticationFlow.js +4 -0
- package/getAuthenticationFlow.js.map +1 -1
- package/getClientDescriptionConverter.d.ts +4 -0
- package/getClientDescriptionConverter.js +4 -0
- package/getClientDescriptionConverter.js.map +1 -1
- package/getGroup.d.ts +4 -62
- package/getGroup.js +4 -50
- package/getGroup.js.map +1 -1
- package/getRealm.d.ts +32 -10
- package/getRealm.js +32 -4
- package/getRealm.js.map +1 -1
- package/getRealmKeys.d.ts +8 -28
- package/getRealmKeys.js +8 -4
- package/getRealmKeys.js.map +1 -1
- package/getRole.d.ts +4 -65
- package/getRole.js +4 -44
- package/getRole.js.map +1 -1
- package/getUser.d.ts +4 -0
- package/getUser.js +4 -0
- package/getUser.js.map +1 -1
- package/getUserRealmRoles.d.ts +4 -0
- package/getUserRealmRoles.js +4 -0
- package/getUserRealmRoles.js.map +1 -1
- package/group.d.ts +35 -58
- package/group.js +35 -16
- package/group.js.map +1 -1
- package/groupMemberships.d.ts +27 -43
- package/groupMemberships.js +27 -16
- package/groupMemberships.js.map +1 -1
- package/groupPermissions.d.ts +13 -0
- package/groupPermissions.js +13 -0
- package/groupPermissions.js.map +1 -1
- package/groupRoles.d.ts +32 -91
- package/groupRoles.js +32 -55
- package/groupRoles.js.map +1 -1
- package/hardcodedAttributeIdentityProviderMapper.d.ts +2 -0
- package/hardcodedAttributeIdentityProviderMapper.js +2 -0
- package/hardcodedAttributeIdentityProviderMapper.js.map +1 -1
- package/hardcodedRoleIdentityMapper.d.ts +2 -0
- package/hardcodedRoleIdentityMapper.js +2 -0
- package/hardcodedRoleIdentityMapper.js.map +1 -1
- package/identityProviderTokenExchangeScopePermission.d.ts +10 -2
- package/identityProviderTokenExchangeScopePermission.js +10 -2
- package/identityProviderTokenExchangeScopePermission.js.map +1 -1
- package/ldap/customMapper.d.ts +10 -2
- package/ldap/customMapper.js +10 -2
- package/ldap/customMapper.js.map +1 -1
- package/ldap/fullNameMapper.d.ts +41 -54
- package/ldap/fullNameMapper.js +32 -18
- package/ldap/fullNameMapper.js.map +1 -1
- package/ldap/groupMapper.d.ts +55 -164
- package/ldap/groupMapper.js +46 -20
- package/ldap/groupMapper.js.map +1 -1
- package/ldap/hardcodedAttributeMapper.d.ts +10 -2
- package/ldap/hardcodedAttributeMapper.js +10 -2
- package/ldap/hardcodedAttributeMapper.js.map +1 -1
- package/ldap/hardcodedGroupMapper.d.ts +10 -2
- package/ldap/hardcodedGroupMapper.js +10 -2
- package/ldap/hardcodedGroupMapper.js.map +1 -1
- package/ldap/hardcodedRoleMapper.d.ts +29 -64
- package/ldap/hardcodedRoleMapper.js +17 -52
- package/ldap/hardcodedRoleMapper.js.map +1 -1
- package/ldap/msadLdsUserAccountControlMapper.d.ts +10 -2
- package/ldap/msadLdsUserAccountControlMapper.js +10 -2
- package/ldap/msadLdsUserAccountControlMapper.js.map +1 -1
- package/ldap/msadUserAccountControlMapper.d.ts +34 -32
- package/ldap/msadUserAccountControlMapper.js +25 -14
- package/ldap/msadUserAccountControlMapper.js.map +1 -1
- package/ldap/roleMapper.d.ts +10 -2
- package/ldap/roleMapper.js +10 -2
- package/ldap/roleMapper.js.map +1 -1
- package/ldap/userAttributeMapper.d.ts +60 -45
- package/ldap/userAttributeMapper.js +30 -15
- package/ldap/userAttributeMapper.js.map +1 -1
- package/ldap/userFederation.d.ts +125 -95
- package/ldap/userFederation.js +53 -20
- package/ldap/userFederation.js.map +1 -1
- package/oidc/googleIdentityProvider.d.ts +8 -2
- package/oidc/googleIdentityProvider.js +8 -2
- package/oidc/googleIdentityProvider.js.map +1 -1
- package/oidc/identityProvider.d.ts +8 -2
- package/oidc/identityProvider.js +8 -2
- package/oidc/identityProvider.js.map +1 -1
- package/openid/audienceProtocolMapper.d.ts +62 -45
- package/openid/audienceProtocolMapper.js +38 -21
- package/openid/audienceProtocolMapper.js.map +1 -1
- package/openid/audienceResolveProtocolMapper.d.ts +17 -3
- package/openid/audienceResolveProtocolMapper.js +17 -3
- package/openid/audienceResolveProtocolMapper.js.map +1 -1
- package/openid/audienceResolveProtocolMappter.d.ts +17 -3
- package/openid/audienceResolveProtocolMappter.js +17 -3
- package/openid/audienceResolveProtocolMappter.js.map +1 -1
- package/openid/client.d.ts +48 -431
- package/openid/client.js +48 -14
- package/openid/client.js.map +1 -1
- package/openid/clientAuthorizationPermission.d.ts +6 -2
- package/openid/clientAuthorizationPermission.js +6 -2
- package/openid/clientAuthorizationPermission.js.map +1 -1
- package/openid/clientDefaultScopes.d.ts +17 -33
- package/openid/clientDefaultScopes.js +17 -6
- package/openid/clientDefaultScopes.js.map +1 -1
- package/openid/clientOptionalScopes.d.ts +17 -34
- package/openid/clientOptionalScopes.js +17 -7
- package/openid/clientOptionalScopes.js.map +1 -1
- package/openid/clientPolicy.d.ts +2 -0
- package/openid/clientPolicy.js +2 -0
- package/openid/clientPolicy.js.map +1 -1
- package/openid/clientScope.d.ts +27 -67
- package/openid/clientScope.js +27 -13
- package/openid/clientScope.js.map +1 -1
- package/openid/clientServiceAccountRealmRole.d.ts +8 -2
- package/openid/clientServiceAccountRealmRole.js +8 -2
- package/openid/clientServiceAccountRealmRole.js.map +1 -1
- package/openid/clientServiceAccountRole.d.ts +8 -2
- package/openid/clientServiceAccountRole.js +8 -2
- package/openid/clientServiceAccountRole.js.map +1 -1
- package/openid/fullNameProtocolMapper.d.ts +49 -61
- package/openid/fullNameProtocolMapper.js +37 -22
- package/openid/fullNameProtocolMapper.js.map +1 -1
- package/openid/getClient.d.ts +32 -14
- package/openid/getClient.js +32 -2
- package/openid/getClient.js.map +1 -1
- package/openid/getClientAuthorizationPolicy.d.ts +4 -0
- package/openid/getClientAuthorizationPolicy.js +4 -0
- package/openid/getClientAuthorizationPolicy.js.map +1 -1
- package/openid/getClientScope.d.ts +4 -0
- package/openid/getClientScope.js +4 -0
- package/openid/getClientScope.js.map +1 -1
- package/openid/getClientServiceAccountUser.d.ts +4 -0
- package/openid/getClientServiceAccountUser.js +4 -0
- package/openid/getClientServiceAccountUser.js.map +1 -1
- package/openid/groupMembershipProtocolMapper.d.ts +53 -81
- package/openid/groupMembershipProtocolMapper.js +41 -24
- package/openid/groupMembershipProtocolMapper.js.map +1 -1
- package/openid/hardcodedClaimProtocolMapper.d.ts +66 -66
- package/openid/hardcodedClaimProtocolMapper.js +42 -24
- package/openid/hardcodedClaimProtocolMapper.js.map +1 -1
- package/openid/hardcodedRoleProtocolMapper.d.ts +48 -43
- package/openid/hardcodedRoleProtocolMapper.js +36 -22
- package/openid/hardcodedRoleProtocolMapper.js.map +1 -1
- package/openid/scriptProtocolMapper.d.ts +17 -3
- package/openid/scriptProtocolMapper.js +17 -3
- package/openid/scriptProtocolMapper.js.map +1 -1
- package/openid/userAttributeProtocolMapper.d.ts +73 -72
- package/openid/userAttributeProtocolMapper.js +43 -24
- package/openid/userAttributeProtocolMapper.js.map +1 -1
- package/openid/userClientRoleProtocolMapper.d.ts +17 -3
- package/openid/userClientRoleProtocolMapper.js +17 -3
- package/openid/userClientRoleProtocolMapper.js.map +1 -1
- package/openid/userPropertyProtocolMapper.d.ts +66 -67
- package/openid/userPropertyProtocolMapper.js +42 -25
- package/openid/userPropertyProtocolMapper.js.map +1 -1
- package/openid/userRealmRoleProtocolMapper.d.ts +73 -63
- package/openid/userRealmRoleProtocolMapper.js +43 -24
- package/openid/userRealmRoleProtocolMapper.js.map +1 -1
- package/openid/userSessionNoteProtocolMapper.d.ts +17 -3
- package/openid/userSessionNoteProtocolMapper.js +17 -3
- package/openid/userSessionNoteProtocolMapper.js.map +1 -1
- package/package.json +1 -1
- package/realm.d.ts +30 -509
- package/realm.js +0 -83
- package/realm.js.map +1 -1
- package/realmEvents.d.ts +20 -74
- package/realmEvents.js +20 -11
- package/realmEvents.js.map +1 -1
- package/realmKeystoreAesGenerated.d.ts +8 -2
- package/realmKeystoreAesGenerated.js +8 -2
- package/realmKeystoreAesGenerated.js.map +1 -1
- package/realmKeystoreEcdsaGenerated.d.ts +8 -2
- package/realmKeystoreEcdsaGenerated.js +8 -2
- package/realmKeystoreEcdsaGenerated.js.map +1 -1
- package/realmKeystoreHmacGenerated.d.ts +8 -2
- package/realmKeystoreHmacGenerated.js +8 -2
- package/realmKeystoreHmacGenerated.js.map +1 -1
- package/realmKeystoreJavaGenerated.d.ts +8 -2
- package/realmKeystoreJavaGenerated.js +8 -2
- package/realmKeystoreJavaGenerated.js.map +1 -1
- package/realmKeystoreRsa.d.ts +6 -2
- package/realmKeystoreRsa.js +6 -2
- package/realmKeystoreRsa.js.map +1 -1
- package/realmKeystoreRsaGenerated.d.ts +8 -2
- package/realmKeystoreRsaGenerated.js +8 -2
- package/realmKeystoreRsaGenerated.js.map +1 -1
- package/realmUserProfile.d.ts +2 -0
- package/realmUserProfile.js +2 -0
- package/realmUserProfile.js.map +1 -1
- package/requiredAction.d.ts +8 -2
- package/requiredAction.js +8 -2
- package/requiredAction.js.map +1 -1
- package/role.d.ts +58 -125
- package/role.js +58 -71
- package/role.js.map +1 -1
- package/saml/client.d.ts +46 -327
- package/saml/client.js +46 -12
- package/saml/client.js.map +1 -1
- package/saml/clientDefaultScope.d.ts +5 -1
- package/saml/clientDefaultScope.js +5 -1
- package/saml/clientDefaultScope.js.map +1 -1
- package/saml/clientScope.d.ts +10 -2
- package/saml/clientScope.js +10 -2
- package/saml/clientScope.js.map +1 -1
- package/saml/getClient.d.ts +4 -0
- package/saml/getClient.js +4 -0
- package/saml/getClient.js.map +1 -1
- package/saml/getClientInstallationProvider.d.ts +4 -0
- package/saml/getClientInstallationProvider.js +4 -0
- package/saml/getClientInstallationProvider.js.map +1 -1
- package/saml/identityProvider.d.ts +163 -117
- package/saml/identityProvider.js +52 -21
- package/saml/identityProvider.js.map +1 -1
- package/saml/scriptProtocolMapper.d.ts +13 -3
- package/saml/scriptProtocolMapper.js +13 -3
- package/saml/scriptProtocolMapper.js.map +1 -1
- package/saml/userAttributeProtocolMapper.d.ts +32 -91
- package/saml/userAttributeProtocolMapper.js +32 -19
- package/saml/userAttributeProtocolMapper.js.map +1 -1
- package/saml/userPropertyProtocolMapper.d.ts +32 -91
- package/saml/userPropertyProtocolMapper.js +32 -19
- package/saml/userPropertyProtocolMapper.js.map +1 -1
- package/types/input.d.ts +74 -183
- package/types/output.d.ts +44 -207
- package/user.d.ts +36 -112
- package/user.js +36 -22
- package/user.js.map +1 -1
- package/userGroups.d.ts +9 -1
- package/userGroups.js +9 -1
- package/userGroups.js.map +1 -1
- package/userRoles.d.ts +11 -2
- package/userRoles.js +11 -2
- package/userRoles.js.map +1 -1
- package/userTemplateImporterIdentityProviderMapper.d.ts +10 -2
- package/userTemplateImporterIdentityProviderMapper.js +10 -2
- package/userTemplateImporterIdentityProviderMapper.js.map +1 -1
- package/usersPermissions.d.ts +10 -25
- package/usersPermissions.js +10 -25
- package/usersPermissions.js.map +1 -1
package/ldap/groupMapper.js
CHANGED
|
@@ -6,55 +6,81 @@ exports.GroupMapper = void 0;
|
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("../utilities");
|
|
8
8
|
/**
|
|
9
|
-
*
|
|
9
|
+
* ## # keycloak.ldap.GroupMapper
|
|
10
10
|
*
|
|
11
|
-
*
|
|
12
|
-
*
|
|
11
|
+
* Allows for creating and managing group mappers for Keycloak users federated
|
|
12
|
+
* via LDAP.
|
|
13
13
|
*
|
|
14
|
-
*
|
|
14
|
+
* The LDAP group mapper can be used to map an LDAP user's groups from some DN
|
|
15
|
+
* to Keycloak groups. This group mapper will also create the groups within Keycloak
|
|
16
|
+
* if they do not already exist.
|
|
15
17
|
*
|
|
18
|
+
* ### Example Usage
|
|
19
|
+
*
|
|
20
|
+
* <!--Start PulumiCodeChooser -->
|
|
16
21
|
* ```typescript
|
|
17
22
|
* import * as pulumi from "@pulumi/pulumi";
|
|
18
23
|
* import * as keycloak from "@pulumi/keycloak";
|
|
19
24
|
*
|
|
20
25
|
* const realm = new keycloak.Realm("realm", {
|
|
21
|
-
* realm: "my-realm",
|
|
22
26
|
* enabled: true,
|
|
27
|
+
* realm: "test",
|
|
23
28
|
* });
|
|
24
29
|
* const ldapUserFederation = new keycloak.ldap.UserFederation("ldapUserFederation", {
|
|
25
|
-
*
|
|
26
|
-
*
|
|
30
|
+
* bindCredential: "admin",
|
|
31
|
+
* bindDn: "cn=admin,dc=example,dc=org",
|
|
32
|
+
* connectionUrl: "ldap://openldap",
|
|
27
33
|
* rdnLdapAttribute: "cn",
|
|
28
|
-
*
|
|
34
|
+
* realmId: realm.id,
|
|
29
35
|
* userObjectClasses: [
|
|
30
36
|
* "simpleSecurityObject",
|
|
31
37
|
* "organizationalRole",
|
|
32
38
|
* ],
|
|
33
|
-
*
|
|
39
|
+
* usernameLdapAttribute: "cn",
|
|
34
40
|
* usersDn: "dc=example,dc=org",
|
|
35
|
-
*
|
|
36
|
-
* bindCredential: "admin",
|
|
41
|
+
* uuidLdapAttribute: "entryDN",
|
|
37
42
|
* });
|
|
38
43
|
* const ldapGroupMapper = new keycloak.ldap.GroupMapper("ldapGroupMapper", {
|
|
39
|
-
* realmId: realm.id,
|
|
40
|
-
* ldapUserFederationId: ldapUserFederation.id,
|
|
41
|
-
* ldapGroupsDn: "dc=example,dc=org",
|
|
42
44
|
* groupNameLdapAttribute: "cn",
|
|
43
45
|
* groupObjectClasses: ["groupOfNames"],
|
|
46
|
+
* ldapGroupsDn: "dc=example,dc=org",
|
|
47
|
+
* ldapUserFederationId: ldapUserFederation.id,
|
|
48
|
+
* memberofLdapAttribute: "memberOf",
|
|
44
49
|
* membershipAttributeType: "DN",
|
|
45
50
|
* membershipLdapAttribute: "member",
|
|
46
51
|
* membershipUserLdapAttribute: "cn",
|
|
47
|
-
*
|
|
52
|
+
* realmId: realm.id,
|
|
48
53
|
* });
|
|
49
54
|
* ```
|
|
55
|
+
* <!--End PulumiCodeChooser -->
|
|
50
56
|
*
|
|
51
|
-
*
|
|
57
|
+
* ### Argument Reference
|
|
52
58
|
*
|
|
53
|
-
*
|
|
59
|
+
* The following arguments are supported:
|
|
54
60
|
*
|
|
55
|
-
*
|
|
56
|
-
*
|
|
57
|
-
*
|
|
61
|
+
* - `realmId` - (Required) The realm that this LDAP mapper will exist in.
|
|
62
|
+
* - `ldapUserFederationId` - (Required) The ID of the LDAP user federation provider to attach this mapper to.
|
|
63
|
+
* - `name` - (Required) Display name of this mapper when displayed in the console.
|
|
64
|
+
* - `ldapGroupsDn` - (Required) The LDAP DN where groups can be found.
|
|
65
|
+
* - `groupNameLdapAttribute` - (Required) The name of the LDAP attribute that is used in group objects for the name and RDN of the group. Typically `cn`.
|
|
66
|
+
* - `groupObjectClasses` - (Required) Array of strings representing the object classes for the group. Must contain at least one.
|
|
67
|
+
* - `preserveGroupInheritance` - (Optional) When `true`, group inheritance will be propagated from LDAP to Keycloak. When `false`, all LDAP groups will be propagated as top level groups within Keycloak.
|
|
68
|
+
* - `ignoreMissingGroups` - (Optional) When `true`, missing groups in the hierarchy will be ignored.
|
|
69
|
+
* - `membershipLdapAttribute` - (Required) The name of the LDAP attribute that is used for membership mappings.
|
|
70
|
+
* - `membershipAttributeType` - (Optional) Can be one of `DN` or `UID`. Defaults to `DN`.
|
|
71
|
+
* - `membershipUserLdapAttribute` - (Required) The name of the LDAP attribute on a user that is used for membership mappings.
|
|
72
|
+
* - `groupsLdapFilter` - (Optional) When specified, adds an additional custom filter to be used when querying for groups. Must start with `(` and end with `)`.
|
|
73
|
+
* - `mode` - (Optional) Can be one of `READ_ONLY` or `LDAP_ONLY`. Defaults to `READ_ONLY`.
|
|
74
|
+
* - `userRolesRetrieveStrategy` - (Optional) Can be one of `LOAD_GROUPS_BY_MEMBER_ATTRIBUTE`, `GET_GROUPS_FROM_USER_MEMBEROF_ATTRIBUTE`, or `LOAD_GROUPS_BY_MEMBER_ATTRIBUTE_RECURSIVELY`. Defaults to `LOAD_GROUPS_BY_MEMBER_ATTRIBUTE`.
|
|
75
|
+
* - `memberofLdapAttribute` - (Optional) Specifies the name of the LDAP attribute on the LDAP user that contains the groups the user is a member of. Defaults to `memberOf`.
|
|
76
|
+
* - `mappedGroupAttributes` - (Optional) Array of strings representing attributes on the LDAP group which will be mapped to attributes on the Keycloak group.
|
|
77
|
+
* - `dropNonExistingGroupsDuringSync` - (Optional) When `true`, groups that no longer exist within LDAP will be dropped in Keycloak during sync. Defaults to `false`.
|
|
78
|
+
*
|
|
79
|
+
* ### Import
|
|
80
|
+
*
|
|
81
|
+
* LDAP mappers can be imported using the format `{{realm_id}}/{{ldap_user_federation_id}}/{{ldap_mapper_id}}`.
|
|
82
|
+
* The ID of the LDAP user federation provider and the mapper can be found within
|
|
83
|
+
* the Keycloak GUI, and they are typically GUIDs:
|
|
58
84
|
*/
|
|
59
85
|
class GroupMapper extends pulumi.CustomResource {
|
|
60
86
|
/**
|
package/ldap/groupMapper.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"groupMapper.js","sourceRoot":"","sources":["../../ldap/groupMapper.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C
|
|
1
|
+
{"version":3,"file":"groupMapper.js","sourceRoot":"","sources":["../../ldap/groupMapper.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4EG;AACH,MAAa,WAAY,SAAQ,MAAM,CAAC,cAAc;IAClD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwB,EAAE,IAAmC;QACtH,OAAO,IAAI,WAAW,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAClE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,WAAW,CAAC,YAAY,CAAC;IAC5D,CAAC;IAsCD,YAAY,IAAY,EAAE,WAAgD,EAAE,IAAmC;QAC3G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2C,CAAC;YAC1D,cAAc,CAAC,iCAAiC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9G,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,6BAA6B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;SACrG;aAAM;YACH,MAAM,IAAI,GAAG,WAA0C,CAAC;YACxD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,sBAAsB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;aACzE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC/D,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;aACrE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;aAC/D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;aACvE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,uBAAuB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;aAC1E;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,2BAA2B,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;aAC9E;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,cAAc,CAAC,iCAAiC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5G,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,6BAA6B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YACpG,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;SACnG;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;;AAnIL,kCAoIC;AAtHG,gBAAgB;AACO,wBAAY,GAAG,uCAAuC,CAAC"}
|
|
@@ -8,6 +8,7 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
8
8
|
*
|
|
9
9
|
* ## Example Usage
|
|
10
10
|
*
|
|
11
|
+
* <!--Start PulumiCodeChooser -->
|
|
11
12
|
* ```typescript
|
|
12
13
|
* import * as pulumi from "@pulumi/pulumi";
|
|
13
14
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -38,13 +39,20 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
38
39
|
* attributeValue: "bar",
|
|
39
40
|
* });
|
|
40
41
|
* ```
|
|
42
|
+
* <!--End PulumiCodeChooser -->
|
|
41
43
|
*
|
|
42
44
|
* ## Import
|
|
43
45
|
*
|
|
44
|
-
* LDAP mappers can be imported using the format `{{realm_id}}/{{ldap_user_federation_id}}/{{ldap_mapper_id}}`.
|
|
46
|
+
* LDAP mappers can be imported using the format `{{realm_id}}/{{ldap_user_federation_id}}/{{ldap_mapper_id}}`.
|
|
47
|
+
*
|
|
48
|
+
* The ID of the LDAP user federation provider and the mapper can be found within the Keycloak GUI, and they are typically GUIDs.
|
|
49
|
+
*
|
|
50
|
+
* Example:
|
|
51
|
+
*
|
|
52
|
+
* bash
|
|
45
53
|
*
|
|
46
54
|
* ```sh
|
|
47
|
-
*
|
|
55
|
+
* $ pulumi import keycloak:ldap/hardcodedAttributeMapper:HardcodedAttributeMapper assign_bar_to_foo my-realm/af2a6ca3-e4d7-49c3-b08b-1b3c70b4b860/3d923ece-1a91-4bf7-adaf-3b82f2a12b67
|
|
48
56
|
* ```
|
|
49
57
|
*/
|
|
50
58
|
export declare class HardcodedAttributeMapper extends pulumi.CustomResource {
|
|
@@ -14,6 +14,7 @@ const utilities = require("../utilities");
|
|
|
14
14
|
*
|
|
15
15
|
* ## Example Usage
|
|
16
16
|
*
|
|
17
|
+
* <!--Start PulumiCodeChooser -->
|
|
17
18
|
* ```typescript
|
|
18
19
|
* import * as pulumi from "@pulumi/pulumi";
|
|
19
20
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -44,13 +45,20 @@ const utilities = require("../utilities");
|
|
|
44
45
|
* attributeValue: "bar",
|
|
45
46
|
* });
|
|
46
47
|
* ```
|
|
48
|
+
* <!--End PulumiCodeChooser -->
|
|
47
49
|
*
|
|
48
50
|
* ## Import
|
|
49
51
|
*
|
|
50
|
-
* LDAP mappers can be imported using the format `{{realm_id}}/{{ldap_user_federation_id}}/{{ldap_mapper_id}}`.
|
|
52
|
+
* LDAP mappers can be imported using the format `{{realm_id}}/{{ldap_user_federation_id}}/{{ldap_mapper_id}}`.
|
|
53
|
+
*
|
|
54
|
+
* The ID of the LDAP user federation provider and the mapper can be found within the Keycloak GUI, and they are typically GUIDs.
|
|
55
|
+
*
|
|
56
|
+
* Example:
|
|
57
|
+
*
|
|
58
|
+
* bash
|
|
51
59
|
*
|
|
52
60
|
* ```sh
|
|
53
|
-
*
|
|
61
|
+
* $ pulumi import keycloak:ldap/hardcodedAttributeMapper:HardcodedAttributeMapper assign_bar_to_foo my-realm/af2a6ca3-e4d7-49c3-b08b-1b3c70b4b860/3d923ece-1a91-4bf7-adaf-3b82f2a12b67
|
|
54
62
|
* ```
|
|
55
63
|
*/
|
|
56
64
|
class HardcodedAttributeMapper extends pulumi.CustomResource {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"hardcodedAttributeMapper.js","sourceRoot":"","sources":["../../ldap/hardcodedAttributeMapper.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C
|
|
1
|
+
{"version":3,"file":"hardcodedAttributeMapper.js","sourceRoot":"","sources":["../../ldap/hardcodedAttributeMapper.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,MAAa,wBAAyB,SAAQ,MAAM,CAAC,cAAc;IAC/D;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAqC,EAAE,IAAmC;QACnI,OAAO,IAAI,wBAAwB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC/E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,wBAAwB,CAAC,YAAY,CAAC;IACzE,CAAC;IA+BD,YAAY,IAAY,EAAE,WAA0E,EAAE,IAAmC;QACrI,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAwD,CAAC;YACvE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAAuD,CAAC;YACrE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;aAChE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3D,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;aACjE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;aACvE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,wBAAwB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC7E,CAAC;;AAzFL,4DA0FC;AA5EG,gBAAgB;AACO,qCAAY,GAAG,iEAAiE,CAAC"}
|
|
@@ -6,6 +6,7 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
6
6
|
*
|
|
7
7
|
* ## Example Usage
|
|
8
8
|
*
|
|
9
|
+
* <!--Start PulumiCodeChooser -->
|
|
9
10
|
* ```typescript
|
|
10
11
|
* import * as pulumi from "@pulumi/pulumi";
|
|
11
12
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -35,13 +36,20 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
35
36
|
* group: realmGroup.name,
|
|
36
37
|
* });
|
|
37
38
|
* ```
|
|
39
|
+
* <!--End PulumiCodeChooser -->
|
|
38
40
|
*
|
|
39
41
|
* ## Import
|
|
40
42
|
*
|
|
41
|
-
* LDAP mappers can be imported using the format `{{realm_id}}/{{ldap_user_federation_id}}/{{ldap_mapper_id}}`.
|
|
43
|
+
* LDAP mappers can be imported using the format `{{realm_id}}/{{ldap_user_federation_id}}/{{ldap_mapper_id}}`.
|
|
44
|
+
*
|
|
45
|
+
* The ID of the LDAP user federation provider and the mapper can be found within the Keycloak GUI, and they are typically GUIDs.
|
|
46
|
+
*
|
|
47
|
+
* Example:
|
|
48
|
+
*
|
|
49
|
+
* bash
|
|
42
50
|
*
|
|
43
51
|
* ```sh
|
|
44
|
-
*
|
|
52
|
+
* $ pulumi import keycloak:ldap/hardcodedGroupMapper:HardcodedGroupMapper assign_group_to_users my-realm/af2a6ca3-e4d7-49c3-b08b-1b3c70b4b860/3d923ece-1a91-4bf7-adaf-3b82f2a12b67
|
|
45
53
|
* ```
|
|
46
54
|
*/
|
|
47
55
|
export declare class HardcodedGroupMapper extends pulumi.CustomResource {
|
|
@@ -12,6 +12,7 @@ const utilities = require("../utilities");
|
|
|
12
12
|
*
|
|
13
13
|
* ## Example Usage
|
|
14
14
|
*
|
|
15
|
+
* <!--Start PulumiCodeChooser -->
|
|
15
16
|
* ```typescript
|
|
16
17
|
* import * as pulumi from "@pulumi/pulumi";
|
|
17
18
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -41,13 +42,20 @@ const utilities = require("../utilities");
|
|
|
41
42
|
* group: realmGroup.name,
|
|
42
43
|
* });
|
|
43
44
|
* ```
|
|
45
|
+
* <!--End PulumiCodeChooser -->
|
|
44
46
|
*
|
|
45
47
|
* ## Import
|
|
46
48
|
*
|
|
47
|
-
* LDAP mappers can be imported using the format `{{realm_id}}/{{ldap_user_federation_id}}/{{ldap_mapper_id}}`.
|
|
49
|
+
* LDAP mappers can be imported using the format `{{realm_id}}/{{ldap_user_federation_id}}/{{ldap_mapper_id}}`.
|
|
50
|
+
*
|
|
51
|
+
* The ID of the LDAP user federation provider and the mapper can be found within the Keycloak GUI, and they are typically GUIDs.
|
|
52
|
+
*
|
|
53
|
+
* Example:
|
|
54
|
+
*
|
|
55
|
+
* bash
|
|
48
56
|
*
|
|
49
57
|
* ```sh
|
|
50
|
-
*
|
|
58
|
+
* $ pulumi import keycloak:ldap/hardcodedGroupMapper:HardcodedGroupMapper assign_group_to_users my-realm/af2a6ca3-e4d7-49c3-b08b-1b3c70b4b860/3d923ece-1a91-4bf7-adaf-3b82f2a12b67
|
|
51
59
|
* ```
|
|
52
60
|
*/
|
|
53
61
|
class HardcodedGroupMapper extends pulumi.CustomResource {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"hardcodedGroupMapper.js","sourceRoot":"","sources":["../../ldap/hardcodedGroupMapper.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C
|
|
1
|
+
{"version":3,"file":"hardcodedGroupMapper.js","sourceRoot":"","sources":["../../ldap/hardcodedGroupMapper.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AACH,MAAa,oBAAqB,SAAQ,MAAM,CAAC,cAAc;IAC3D;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAiC,EAAE,IAAmC;QAC/H,OAAO,IAAI,oBAAoB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC3E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,oBAAoB,CAAC,YAAY,CAAC;IACrE,CAAC;IA2BD,YAAY,IAAY,EAAE,WAAkE,EAAE,IAAmC;QAC7H,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAoD,CAAC;YACnE,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAAmD,CAAC;YACjE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;aACvE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,oBAAoB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACzE,CAAC;;AAhFL,oDAiFC;AAnEG,gBAAgB;AACO,iCAAY,GAAG,yDAAyD,CAAC"}
|
|
@@ -1,18 +1,18 @@
|
|
|
1
1
|
import * as pulumi from "@pulumi/pulumi";
|
|
2
2
|
/**
|
|
3
|
-
*
|
|
3
|
+
* ## # keycloak.ldap.HardcodedRoleMapper
|
|
4
4
|
*
|
|
5
|
-
*
|
|
5
|
+
* This mapper will grant a specified Keycloak role to each Keycloak user linked with LDAP.
|
|
6
6
|
*
|
|
7
|
-
*
|
|
8
|
-
* ### Realm Role)
|
|
7
|
+
* ### Example Usage
|
|
9
8
|
*
|
|
9
|
+
* <!--Start PulumiCodeChooser -->
|
|
10
10
|
* ```typescript
|
|
11
11
|
* import * as pulumi from "@pulumi/pulumi";
|
|
12
12
|
* import * as keycloak from "@pulumi/keycloak";
|
|
13
13
|
*
|
|
14
14
|
* const realm = new keycloak.Realm("realm", {
|
|
15
|
-
* realm: "
|
|
15
|
+
* realm: "test",
|
|
16
16
|
* enabled: true,
|
|
17
17
|
* });
|
|
18
18
|
* const ldapUserFederation = new keycloak.ldap.UserFederation("ldapUserFederation", {
|
|
@@ -29,63 +29,28 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
29
29
|
* bindDn: "cn=admin,dc=example,dc=org",
|
|
30
30
|
* bindCredential: "admin",
|
|
31
31
|
* });
|
|
32
|
-
* const realmAdminRole = new keycloak.Role("realmAdminRole", {
|
|
33
|
-
* realmId: realm.id,
|
|
34
|
-
* description: "My Realm Role",
|
|
35
|
-
* });
|
|
36
32
|
* const assignAdminRoleToAllUsers = new keycloak.ldap.HardcodedRoleMapper("assignAdminRoleToAllUsers", {
|
|
37
33
|
* realmId: realm.id,
|
|
38
34
|
* ldapUserFederationId: ldapUserFederation.id,
|
|
39
|
-
* role:
|
|
35
|
+
* role: "admin",
|
|
40
36
|
* });
|
|
41
37
|
* ```
|
|
42
|
-
*
|
|
38
|
+
* <!--End PulumiCodeChooser -->
|
|
43
39
|
*
|
|
44
|
-
*
|
|
45
|
-
* import * as pulumi from "@pulumi/pulumi";
|
|
46
|
-
* import * as keycloak from "@pulumi/keycloak";
|
|
40
|
+
* ### Argument Reference
|
|
47
41
|
*
|
|
48
|
-
*
|
|
49
|
-
* realm: "my-realm",
|
|
50
|
-
* enabled: true,
|
|
51
|
-
* });
|
|
52
|
-
* const ldapUserFederation = new keycloak.ldap.UserFederation("ldapUserFederation", {
|
|
53
|
-
* realmId: realm.id,
|
|
54
|
-
* usernameLdapAttribute: "cn",
|
|
55
|
-
* rdnLdapAttribute: "cn",
|
|
56
|
-
* uuidLdapAttribute: "entryDN",
|
|
57
|
-
* userObjectClasses: [
|
|
58
|
-
* "simpleSecurityObject",
|
|
59
|
-
* "organizationalRole",
|
|
60
|
-
* ],
|
|
61
|
-
* connectionUrl: "ldap://openldap",
|
|
62
|
-
* usersDn: "dc=example,dc=org",
|
|
63
|
-
* bindDn: "cn=admin,dc=example,dc=org",
|
|
64
|
-
* bindCredential: "admin",
|
|
65
|
-
* });
|
|
66
|
-
* const realmManagement = keycloak.openid.getClientOutput({
|
|
67
|
-
* realmId: realm.id,
|
|
68
|
-
* clientId: "realm-management",
|
|
69
|
-
* });
|
|
70
|
-
* const createClient = pulumi.all([realm.id, realmManagement]).apply(([id, realmManagement]) => keycloak.getRoleOutput({
|
|
71
|
-
* realmId: id,
|
|
72
|
-
* clientId: realmManagement.id,
|
|
73
|
-
* name: "create-client",
|
|
74
|
-
* }));
|
|
75
|
-
* const assignAdminRoleToAllUsers = new keycloak.ldap.HardcodedRoleMapper("assignAdminRoleToAllUsers", {
|
|
76
|
-
* realmId: realm.id,
|
|
77
|
-
* ldapUserFederationId: ldapUserFederation.id,
|
|
78
|
-
* role: pulumi.all([realmManagement, createClient]).apply(([realmManagement, createClient]) => `${realmManagement.clientId}.${createClient.name}`),
|
|
79
|
-
* });
|
|
80
|
-
* ```
|
|
42
|
+
* The following arguments are supported:
|
|
81
43
|
*
|
|
82
|
-
*
|
|
44
|
+
* - `realmId` - (Required) The realm that this LDAP mapper will exist in.
|
|
45
|
+
* - `ldapUserFederationId` - (Required) The ID of the LDAP user federation provider to attach this mapper to.
|
|
46
|
+
* - `name` - (Required) Display name of this mapper when displayed in the console.
|
|
47
|
+
* - `role` - (Required) The role which should be assigned to the users.
|
|
83
48
|
*
|
|
84
|
-
*
|
|
49
|
+
* ### Import
|
|
85
50
|
*
|
|
86
|
-
*
|
|
87
|
-
*
|
|
88
|
-
*
|
|
51
|
+
* LDAP mappers can be imported using the format `{{realm_id}}/{{ldap_user_federation_id}}/{{ldap_mapper_id}}`.
|
|
52
|
+
* The ID of the LDAP user federation provider and the mapper can be found within
|
|
53
|
+
* the Keycloak GUI, and they are typically GUIDs:
|
|
89
54
|
*/
|
|
90
55
|
export declare class HardcodedRoleMapper extends pulumi.CustomResource {
|
|
91
56
|
/**
|
|
@@ -104,19 +69,19 @@ export declare class HardcodedRoleMapper extends pulumi.CustomResource {
|
|
|
104
69
|
*/
|
|
105
70
|
static isInstance(obj: any): obj is HardcodedRoleMapper;
|
|
106
71
|
/**
|
|
107
|
-
* The
|
|
72
|
+
* The ldap user federation provider to attach this mapper to.
|
|
108
73
|
*/
|
|
109
74
|
readonly ldapUserFederationId: pulumi.Output<string>;
|
|
110
75
|
/**
|
|
111
|
-
* Display name of
|
|
76
|
+
* Display name of the mapper when displayed in the console.
|
|
112
77
|
*/
|
|
113
78
|
readonly name: pulumi.Output<string>;
|
|
114
79
|
/**
|
|
115
|
-
* The realm
|
|
80
|
+
* The realm in which the ldap user federation provider exists.
|
|
116
81
|
*/
|
|
117
82
|
readonly realmId: pulumi.Output<string>;
|
|
118
83
|
/**
|
|
119
|
-
*
|
|
84
|
+
* Role to grant to user.
|
|
120
85
|
*/
|
|
121
86
|
readonly role: pulumi.Output<string>;
|
|
122
87
|
/**
|
|
@@ -133,19 +98,19 @@ export declare class HardcodedRoleMapper extends pulumi.CustomResource {
|
|
|
133
98
|
*/
|
|
134
99
|
export interface HardcodedRoleMapperState {
|
|
135
100
|
/**
|
|
136
|
-
* The
|
|
101
|
+
* The ldap user federation provider to attach this mapper to.
|
|
137
102
|
*/
|
|
138
103
|
ldapUserFederationId?: pulumi.Input<string>;
|
|
139
104
|
/**
|
|
140
|
-
* Display name of
|
|
105
|
+
* Display name of the mapper when displayed in the console.
|
|
141
106
|
*/
|
|
142
107
|
name?: pulumi.Input<string>;
|
|
143
108
|
/**
|
|
144
|
-
* The realm
|
|
109
|
+
* The realm in which the ldap user federation provider exists.
|
|
145
110
|
*/
|
|
146
111
|
realmId?: pulumi.Input<string>;
|
|
147
112
|
/**
|
|
148
|
-
*
|
|
113
|
+
* Role to grant to user.
|
|
149
114
|
*/
|
|
150
115
|
role?: pulumi.Input<string>;
|
|
151
116
|
}
|
|
@@ -154,19 +119,19 @@ export interface HardcodedRoleMapperState {
|
|
|
154
119
|
*/
|
|
155
120
|
export interface HardcodedRoleMapperArgs {
|
|
156
121
|
/**
|
|
157
|
-
* The
|
|
122
|
+
* The ldap user federation provider to attach this mapper to.
|
|
158
123
|
*/
|
|
159
124
|
ldapUserFederationId: pulumi.Input<string>;
|
|
160
125
|
/**
|
|
161
|
-
* Display name of
|
|
126
|
+
* Display name of the mapper when displayed in the console.
|
|
162
127
|
*/
|
|
163
128
|
name?: pulumi.Input<string>;
|
|
164
129
|
/**
|
|
165
|
-
* The realm
|
|
130
|
+
* The realm in which the ldap user federation provider exists.
|
|
166
131
|
*/
|
|
167
132
|
realmId: pulumi.Input<string>;
|
|
168
133
|
/**
|
|
169
|
-
*
|
|
134
|
+
* Role to grant to user.
|
|
170
135
|
*/
|
|
171
136
|
role: pulumi.Input<string>;
|
|
172
137
|
}
|
|
@@ -6,19 +6,19 @@ exports.HardcodedRoleMapper = void 0;
|
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("../utilities");
|
|
8
8
|
/**
|
|
9
|
-
*
|
|
9
|
+
* ## # keycloak.ldap.HardcodedRoleMapper
|
|
10
10
|
*
|
|
11
|
-
*
|
|
11
|
+
* This mapper will grant a specified Keycloak role to each Keycloak user linked with LDAP.
|
|
12
12
|
*
|
|
13
|
-
*
|
|
14
|
-
* ### Realm Role)
|
|
13
|
+
* ### Example Usage
|
|
15
14
|
*
|
|
15
|
+
* <!--Start PulumiCodeChooser -->
|
|
16
16
|
* ```typescript
|
|
17
17
|
* import * as pulumi from "@pulumi/pulumi";
|
|
18
18
|
* import * as keycloak from "@pulumi/keycloak";
|
|
19
19
|
*
|
|
20
20
|
* const realm = new keycloak.Realm("realm", {
|
|
21
|
-
* realm: "
|
|
21
|
+
* realm: "test",
|
|
22
22
|
* enabled: true,
|
|
23
23
|
* });
|
|
24
24
|
* const ldapUserFederation = new keycloak.ldap.UserFederation("ldapUserFederation", {
|
|
@@ -35,63 +35,28 @@ const utilities = require("../utilities");
|
|
|
35
35
|
* bindDn: "cn=admin,dc=example,dc=org",
|
|
36
36
|
* bindCredential: "admin",
|
|
37
37
|
* });
|
|
38
|
-
* const realmAdminRole = new keycloak.Role("realmAdminRole", {
|
|
39
|
-
* realmId: realm.id,
|
|
40
|
-
* description: "My Realm Role",
|
|
41
|
-
* });
|
|
42
38
|
* const assignAdminRoleToAllUsers = new keycloak.ldap.HardcodedRoleMapper("assignAdminRoleToAllUsers", {
|
|
43
39
|
* realmId: realm.id,
|
|
44
40
|
* ldapUserFederationId: ldapUserFederation.id,
|
|
45
|
-
* role:
|
|
41
|
+
* role: "admin",
|
|
46
42
|
* });
|
|
47
43
|
* ```
|
|
48
|
-
*
|
|
44
|
+
* <!--End PulumiCodeChooser -->
|
|
49
45
|
*
|
|
50
|
-
*
|
|
51
|
-
* import * as pulumi from "@pulumi/pulumi";
|
|
52
|
-
* import * as keycloak from "@pulumi/keycloak";
|
|
46
|
+
* ### Argument Reference
|
|
53
47
|
*
|
|
54
|
-
*
|
|
55
|
-
* realm: "my-realm",
|
|
56
|
-
* enabled: true,
|
|
57
|
-
* });
|
|
58
|
-
* const ldapUserFederation = new keycloak.ldap.UserFederation("ldapUserFederation", {
|
|
59
|
-
* realmId: realm.id,
|
|
60
|
-
* usernameLdapAttribute: "cn",
|
|
61
|
-
* rdnLdapAttribute: "cn",
|
|
62
|
-
* uuidLdapAttribute: "entryDN",
|
|
63
|
-
* userObjectClasses: [
|
|
64
|
-
* "simpleSecurityObject",
|
|
65
|
-
* "organizationalRole",
|
|
66
|
-
* ],
|
|
67
|
-
* connectionUrl: "ldap://openldap",
|
|
68
|
-
* usersDn: "dc=example,dc=org",
|
|
69
|
-
* bindDn: "cn=admin,dc=example,dc=org",
|
|
70
|
-
* bindCredential: "admin",
|
|
71
|
-
* });
|
|
72
|
-
* const realmManagement = keycloak.openid.getClientOutput({
|
|
73
|
-
* realmId: realm.id,
|
|
74
|
-
* clientId: "realm-management",
|
|
75
|
-
* });
|
|
76
|
-
* const createClient = pulumi.all([realm.id, realmManagement]).apply(([id, realmManagement]) => keycloak.getRoleOutput({
|
|
77
|
-
* realmId: id,
|
|
78
|
-
* clientId: realmManagement.id,
|
|
79
|
-
* name: "create-client",
|
|
80
|
-
* }));
|
|
81
|
-
* const assignAdminRoleToAllUsers = new keycloak.ldap.HardcodedRoleMapper("assignAdminRoleToAllUsers", {
|
|
82
|
-
* realmId: realm.id,
|
|
83
|
-
* ldapUserFederationId: ldapUserFederation.id,
|
|
84
|
-
* role: pulumi.all([realmManagement, createClient]).apply(([realmManagement, createClient]) => `${realmManagement.clientId}.${createClient.name}`),
|
|
85
|
-
* });
|
|
86
|
-
* ```
|
|
48
|
+
* The following arguments are supported:
|
|
87
49
|
*
|
|
88
|
-
*
|
|
50
|
+
* - `realmId` - (Required) The realm that this LDAP mapper will exist in.
|
|
51
|
+
* - `ldapUserFederationId` - (Required) The ID of the LDAP user federation provider to attach this mapper to.
|
|
52
|
+
* - `name` - (Required) Display name of this mapper when displayed in the console.
|
|
53
|
+
* - `role` - (Required) The role which should be assigned to the users.
|
|
89
54
|
*
|
|
90
|
-
*
|
|
55
|
+
* ### Import
|
|
91
56
|
*
|
|
92
|
-
*
|
|
93
|
-
*
|
|
94
|
-
*
|
|
57
|
+
* LDAP mappers can be imported using the format `{{realm_id}}/{{ldap_user_federation_id}}/{{ldap_mapper_id}}`.
|
|
58
|
+
* The ID of the LDAP user federation provider and the mapper can be found within
|
|
59
|
+
* the Keycloak GUI, and they are typically GUIDs:
|
|
95
60
|
*/
|
|
96
61
|
class HardcodedRoleMapper extends pulumi.CustomResource {
|
|
97
62
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"hardcodedRoleMapper.js","sourceRoot":"","sources":["../../ldap/hardcodedRoleMapper.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C
|
|
1
|
+
{"version":3,"file":"hardcodedRoleMapper.js","sourceRoot":"","sources":["../../ldap/hardcodedRoleMapper.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AACH,MAAa,mBAAoB,SAAQ,MAAM,CAAC,cAAc;IAC1D;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAgC,EAAE,IAAmC;QAC9H,OAAO,IAAI,mBAAmB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC1E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,mBAAmB,CAAC,YAAY,CAAC;IACpE,CAAC;IA2BD,YAAY,IAAY,EAAE,WAAgE,EAAE,IAAmC;QAC3H,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAmD,CAAC;YAClE,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D;aAAM;YACH,MAAM,IAAI,GAAG,WAAkD,CAAC;YAChE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;aACvE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;SACzD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,mBAAmB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACxE,CAAC;;AAhFL,kDAiFC;AAnEG,gBAAgB;AACO,gCAAY,GAAG,uDAAuD,CAAC"}
|
|
@@ -10,6 +10,7 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
10
10
|
*
|
|
11
11
|
* ## Example Usage
|
|
12
12
|
*
|
|
13
|
+
* <!--Start PulumiCodeChooser -->
|
|
13
14
|
* ```typescript
|
|
14
15
|
* import * as pulumi from "@pulumi/pulumi";
|
|
15
16
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -38,13 +39,20 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
38
39
|
* ldapUserFederationId: ldapUserFederation.id,
|
|
39
40
|
* });
|
|
40
41
|
* ```
|
|
42
|
+
* <!--End PulumiCodeChooser -->
|
|
41
43
|
*
|
|
42
44
|
* ## Import
|
|
43
45
|
*
|
|
44
|
-
* LDAP mappers can be imported using the format `{{realm_id}}/{{ldap_user_federation_id}}/{{ldap_mapper_id}}`.
|
|
46
|
+
* LDAP mappers can be imported using the format `{{realm_id}}/{{ldap_user_federation_id}}/{{ldap_mapper_id}}`.
|
|
47
|
+
*
|
|
48
|
+
* The ID of the LDAP user federation provider and the mapper can be found within the Keycloak GUI, and they are typically GUIDs.
|
|
49
|
+
*
|
|
50
|
+
* Example:
|
|
51
|
+
*
|
|
52
|
+
* bash
|
|
45
53
|
*
|
|
46
54
|
* ```sh
|
|
47
|
-
*
|
|
55
|
+
* $ pulumi import keycloak:ldap/msadLdsUserAccountControlMapper:MsadLdsUserAccountControlMapper msad_lds_user_account_control_mapper my-realm/af2a6ca3-e4d7-49c3-b08b-1b3c70b4b860/3d923ece-1a91-4bf7-adaf-3b82f2a12b67
|
|
48
56
|
* ```
|
|
49
57
|
*/
|
|
50
58
|
export declare class MsadLdsUserAccountControlMapper extends pulumi.CustomResource {
|
|
@@ -16,6 +16,7 @@ const utilities = require("../utilities");
|
|
|
16
16
|
*
|
|
17
17
|
* ## Example Usage
|
|
18
18
|
*
|
|
19
|
+
* <!--Start PulumiCodeChooser -->
|
|
19
20
|
* ```typescript
|
|
20
21
|
* import * as pulumi from "@pulumi/pulumi";
|
|
21
22
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -44,13 +45,20 @@ const utilities = require("../utilities");
|
|
|
44
45
|
* ldapUserFederationId: ldapUserFederation.id,
|
|
45
46
|
* });
|
|
46
47
|
* ```
|
|
48
|
+
* <!--End PulumiCodeChooser -->
|
|
47
49
|
*
|
|
48
50
|
* ## Import
|
|
49
51
|
*
|
|
50
|
-
* LDAP mappers can be imported using the format `{{realm_id}}/{{ldap_user_federation_id}}/{{ldap_mapper_id}}`.
|
|
52
|
+
* LDAP mappers can be imported using the format `{{realm_id}}/{{ldap_user_federation_id}}/{{ldap_mapper_id}}`.
|
|
53
|
+
*
|
|
54
|
+
* The ID of the LDAP user federation provider and the mapper can be found within the Keycloak GUI, and they are typically GUIDs.
|
|
55
|
+
*
|
|
56
|
+
* Example:
|
|
57
|
+
*
|
|
58
|
+
* bash
|
|
51
59
|
*
|
|
52
60
|
* ```sh
|
|
53
|
-
*
|
|
61
|
+
* $ pulumi import keycloak:ldap/msadLdsUserAccountControlMapper:MsadLdsUserAccountControlMapper msad_lds_user_account_control_mapper my-realm/af2a6ca3-e4d7-49c3-b08b-1b3c70b4b860/3d923ece-1a91-4bf7-adaf-3b82f2a12b67
|
|
54
62
|
* ```
|
|
55
63
|
*/
|
|
56
64
|
class MsadLdsUserAccountControlMapper extends pulumi.CustomResource {
|