@pulumi/keycloak 5.3.0 → 5.3.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/attributeImporterIdentityProviderMapper.d.ts +45 -63
- package/attributeImporterIdentityProviderMapper.js +24 -33
- package/attributeImporterIdentityProviderMapper.js.map +1 -1
- package/attributeToRoleIdentityMapper.d.ts +14 -6
- package/attributeToRoleIdentityMapper.js +14 -6
- package/attributeToRoleIdentityMapper.js.map +1 -1
- package/authentication/bindings.d.ts +3 -3
- package/authentication/bindings.js +3 -3
- package/authentication/execution.d.ts +8 -4
- package/authentication/execution.js +8 -4
- package/authentication/execution.js.map +1 -1
- package/authentication/executionConfig.d.ts +10 -2
- package/authentication/executionConfig.js +10 -2
- package/authentication/executionConfig.js.map +1 -1
- package/authentication/flow.d.ts +14 -2
- package/authentication/flow.js +14 -2
- package/authentication/flow.js.map +1 -1
- package/authentication/subflow.d.ts +16 -2
- package/authentication/subflow.js +16 -2
- package/authentication/subflow.js.map +1 -1
- package/customIdentityProviderMapping.d.ts +12 -5
- package/customIdentityProviderMapping.js +12 -5
- package/customIdentityProviderMapping.js.map +1 -1
- package/customUserFederation.d.ts +48 -48
- package/customUserFederation.js +24 -12
- package/customUserFederation.js.map +1 -1
- package/defaultGroups.d.ts +19 -26
- package/defaultGroups.js +19 -8
- package/defaultGroups.js.map +1 -1
- package/defaultRoles.d.ts +12 -3
- package/defaultRoles.js +12 -3
- package/defaultRoles.js.map +1 -1
- package/genericClientProtocolMapper.d.ts +36 -34
- package/genericClientProtocolMapper.js +21 -10
- package/genericClientProtocolMapper.js.map +1 -1
- package/genericClientRoleMapper.d.ts +42 -15
- package/genericClientRoleMapper.js +42 -15
- package/genericClientRoleMapper.js.map +1 -1
- package/genericProtocolMapper.d.ts +9 -4
- package/genericProtocolMapper.js +9 -4
- package/genericProtocolMapper.js.map +1 -1
- package/genericRoleMapper.d.ts +42 -15
- package/genericRoleMapper.js +42 -15
- package/genericRoleMapper.js.map +1 -1
- package/getClientDescriptionConverter.d.ts +50 -50
- package/getClientDescriptionConverter.js +50 -50
- package/getGroup.d.ts +4 -62
- package/getGroup.js +4 -50
- package/getGroup.js.map +1 -1
- package/getRealm.d.ts +36 -10
- package/getRealm.js +36 -4
- package/getRealm.js.map +1 -1
- package/getRealmKeys.d.ts +8 -28
- package/getRealmKeys.js +8 -4
- package/getRealmKeys.js.map +1 -1
- package/getRole.d.ts +4 -65
- package/getRole.js +4 -44
- package/getRole.js.map +1 -1
- package/getUser.d.ts +2 -0
- package/getUser.js +2 -0
- package/getUser.js.map +1 -1
- package/getUserRealmRoles.d.ts +4 -0
- package/getUserRealmRoles.js +4 -0
- package/getUserRealmRoles.js.map +1 -1
- package/group.d.ts +37 -57
- package/group.js +37 -15
- package/group.js.map +1 -1
- package/groupMemberships.d.ts +28 -43
- package/groupMemberships.js +28 -16
- package/groupMemberships.js.map +1 -1
- package/groupPermissions.d.ts +13 -0
- package/groupPermissions.js +13 -0
- package/groupPermissions.js.map +1 -1
- package/groupRoles.d.ts +35 -90
- package/groupRoles.js +35 -54
- package/groupRoles.js.map +1 -1
- package/hardcodedAttributeIdentityProviderMapper.d.ts +4 -3
- package/hardcodedAttributeIdentityProviderMapper.js +4 -3
- package/hardcodedAttributeIdentityProviderMapper.js.map +1 -1
- package/hardcodedRoleIdentityMapper.d.ts +6 -4
- package/hardcodedRoleIdentityMapper.js +6 -4
- package/hardcodedRoleIdentityMapper.js.map +1 -1
- package/identityProviderTokenExchangeScopePermission.d.ts +13 -6
- package/identityProviderTokenExchangeScopePermission.js +13 -6
- package/identityProviderTokenExchangeScopePermission.js.map +1 -1
- package/ldap/customMapper.d.ts +14 -6
- package/ldap/customMapper.js +14 -6
- package/ldap/customMapper.js.map +1 -1
- package/ldap/fullNameMapper.d.ts +35 -48
- package/ldap/fullNameMapper.js +26 -12
- package/ldap/fullNameMapper.js.map +1 -1
- package/ldap/groupMapper.d.ts +47 -156
- package/ldap/groupMapper.js +38 -12
- package/ldap/groupMapper.js.map +1 -1
- package/ldap/hardcodedAttributeMapper.d.ts +12 -4
- package/ldap/hardcodedAttributeMapper.js +12 -4
- package/ldap/hardcodedAttributeMapper.js.map +1 -1
- package/ldap/hardcodedGroupMapper.d.ts +16 -5
- package/ldap/hardcodedGroupMapper.js +16 -5
- package/ldap/hardcodedGroupMapper.js.map +1 -1
- package/ldap/hardcodedRoleMapper.d.ts +31 -66
- package/ldap/hardcodedRoleMapper.js +19 -54
- package/ldap/hardcodedRoleMapper.js.map +1 -1
- package/ldap/msadLdsUserAccountControlMapper.d.ts +12 -4
- package/ldap/msadLdsUserAccountControlMapper.js +12 -4
- package/ldap/msadLdsUserAccountControlMapper.js.map +1 -1
- package/ldap/msadUserAccountControlMapper.d.ts +29 -27
- package/ldap/msadUserAccountControlMapper.js +20 -9
- package/ldap/msadUserAccountControlMapper.js.map +1 -1
- package/ldap/roleMapper.d.ts +12 -4
- package/ldap/roleMapper.js +12 -4
- package/ldap/roleMapper.js.map +1 -1
- package/ldap/userAttributeMapper.d.ts +54 -39
- package/ldap/userAttributeMapper.js +24 -9
- package/ldap/userAttributeMapper.js.map +1 -1
- package/ldap/userFederation.d.ts +117 -88
- package/ldap/userFederation.js +45 -13
- package/ldap/userFederation.js.map +1 -1
- package/oidc/googleIdentityProvider.d.ts +8 -4
- package/oidc/googleIdentityProvider.js +8 -4
- package/oidc/googleIdentityProvider.js.map +1 -1
- package/oidc/identityProvider.d.ts +7 -3
- package/oidc/identityProvider.js +7 -3
- package/oidc/identityProvider.js.map +1 -1
- package/openid/audienceProtocolMapper.d.ts +62 -43
- package/openid/audienceProtocolMapper.js +38 -19
- package/openid/audienceProtocolMapper.js.map +1 -1
- package/openid/audienceResolveProtocolMapper.d.ts +22 -7
- package/openid/audienceResolveProtocolMapper.js +22 -7
- package/openid/audienceResolveProtocolMapper.js.map +1 -1
- package/openid/audienceResolveProtocolMappter.d.ts +22 -7
- package/openid/audienceResolveProtocolMappter.js +22 -7
- package/openid/audienceResolveProtocolMappter.js.map +1 -1
- package/openid/client.d.ts +45 -429
- package/openid/client.js +45 -12
- package/openid/client.js.map +1 -1
- package/openid/clientAuthorizationPermission.d.ts +6 -2
- package/openid/clientAuthorizationPermission.js +6 -2
- package/openid/clientAuthorizationPermission.js.map +1 -1
- package/openid/clientDefaultScopes.d.ts +16 -31
- package/openid/clientDefaultScopes.js +16 -4
- package/openid/clientDefaultScopes.js.map +1 -1
- package/openid/clientOptionalScopes.d.ts +16 -32
- package/openid/clientOptionalScopes.js +16 -5
- package/openid/clientOptionalScopes.js.map +1 -1
- package/openid/clientPolicy.d.ts +5 -3
- package/openid/clientPolicy.js +5 -3
- package/openid/clientPolicy.js.map +1 -1
- package/openid/clientScope.d.ts +25 -66
- package/openid/clientScope.js +25 -12
- package/openid/clientScope.js.map +1 -1
- package/openid/clientServiceAccountRealmRole.d.ts +12 -4
- package/openid/clientServiceAccountRealmRole.js +12 -4
- package/openid/clientServiceAccountRealmRole.js.map +1 -1
- package/openid/clientServiceAccountRole.d.ts +14 -5
- package/openid/clientServiceAccountRole.js +14 -5
- package/openid/clientServiceAccountRole.js.map +1 -1
- package/openid/fullNameProtocolMapper.d.ts +49 -59
- package/openid/fullNameProtocolMapper.js +37 -20
- package/openid/fullNameProtocolMapper.js.map +1 -1
- package/openid/getClient.d.ts +30 -14
- package/openid/getClient.js +30 -2
- package/openid/getClient.js.map +1 -1
- package/openid/getClientAuthorizationPolicy.d.ts +8 -2
- package/openid/getClientAuthorizationPolicy.js +8 -2
- package/openid/getClientAuthorizationPolicy.js.map +1 -1
- package/openid/getClientScope.d.ts +4 -2
- package/openid/getClientScope.js +4 -2
- package/openid/getClientScope.js.map +1 -1
- package/openid/getClientServiceAccountUser.d.ts +4 -2
- package/openid/getClientServiceAccountUser.js +4 -2
- package/openid/getClientServiceAccountUser.js.map +1 -1
- package/openid/groupMembershipProtocolMapper.d.ts +51 -77
- package/openid/groupMembershipProtocolMapper.js +39 -20
- package/openid/groupMembershipProtocolMapper.js.map +1 -1
- package/openid/hardcodedClaimProtocolMapper.d.ts +64 -62
- package/openid/hardcodedClaimProtocolMapper.js +40 -20
- package/openid/hardcodedClaimProtocolMapper.js.map +1 -1
- package/openid/hardcodedRoleProtocolMapper.d.ts +56 -43
- package/openid/hardcodedRoleProtocolMapper.js +44 -22
- package/openid/hardcodedRoleProtocolMapper.js.map +1 -1
- package/openid/scriptProtocolMapper.d.ts +23 -7
- package/openid/scriptProtocolMapper.js +23 -7
- package/openid/scriptProtocolMapper.js.map +1 -1
- package/openid/userAttributeProtocolMapper.d.ts +71 -68
- package/openid/userAttributeProtocolMapper.js +41 -20
- package/openid/userAttributeProtocolMapper.js.map +1 -1
- package/openid/userClientRoleProtocolMapper.d.ts +23 -7
- package/openid/userClientRoleProtocolMapper.js +23 -7
- package/openid/userClientRoleProtocolMapper.js.map +1 -1
- package/openid/userPropertyProtocolMapper.d.ts +64 -63
- package/openid/userPropertyProtocolMapper.js +40 -21
- package/openid/userPropertyProtocolMapper.js.map +1 -1
- package/openid/userRealmRoleProtocolMapper.d.ts +71 -59
- package/openid/userRealmRoleProtocolMapper.js +41 -20
- package/openid/userRealmRoleProtocolMapper.js.map +1 -1
- package/openid/userSessionNoteProtocolMapper.d.ts +23 -7
- package/openid/userSessionNoteProtocolMapper.js +23 -7
- package/openid/userSessionNoteProtocolMapper.js.map +1 -1
- package/package.json +1 -1
- package/realm.d.ts +30 -509
- package/realm.js +0 -83
- package/realm.js.map +1 -1
- package/realmEvents.d.ts +15 -71
- package/realmEvents.js +15 -8
- package/realmEvents.js.map +1 -1
- package/realmKeystoreAesGenerated.d.ts +8 -3
- package/realmKeystoreAesGenerated.js +8 -3
- package/realmKeystoreAesGenerated.js.map +1 -1
- package/realmKeystoreEcdsaGenerated.d.ts +8 -3
- package/realmKeystoreEcdsaGenerated.js +8 -3
- package/realmKeystoreEcdsaGenerated.js.map +1 -1
- package/realmKeystoreHmacGenerated.d.ts +8 -3
- package/realmKeystoreHmacGenerated.js +8 -3
- package/realmKeystoreHmacGenerated.js.map +1 -1
- package/realmKeystoreJavaGenerated.d.ts +8 -3
- package/realmKeystoreJavaGenerated.js +8 -3
- package/realmKeystoreJavaGenerated.js.map +1 -1
- package/realmKeystoreRsa.d.ts +6 -2
- package/realmKeystoreRsa.js +6 -2
- package/realmKeystoreRsa.js.map +1 -1
- package/realmKeystoreRsaGenerated.d.ts +8 -3
- package/realmKeystoreRsaGenerated.js +8 -3
- package/realmKeystoreRsaGenerated.js.map +1 -1
- package/realmUserProfile.d.ts +1 -1
- package/realmUserProfile.js +1 -1
- package/requiredAction.d.ts +8 -3
- package/requiredAction.js +8 -3
- package/requiredAction.js.map +1 -1
- package/role.d.ts +57 -110
- package/role.js +57 -56
- package/role.js.map +1 -1
- package/saml/client.d.ts +9 -344
- package/saml/client.js +9 -29
- package/saml/client.js.map +1 -1
- package/saml/clientDefaultScope.d.ts +0 -33
- package/saml/clientDefaultScope.js +0 -33
- package/saml/clientDefaultScope.js.map +1 -1
- package/saml/clientScope.d.ts +10 -3
- package/saml/clientScope.js +10 -3
- package/saml/clientScope.js.map +1 -1
- package/saml/getClient.d.ts +2 -0
- package/saml/getClient.js +2 -0
- package/saml/getClient.js.map +1 -1
- package/saml/getClientInstallationProvider.d.ts +0 -62
- package/saml/getClientInstallationProvider.js +0 -62
- package/saml/getClientInstallationProvider.js.map +1 -1
- package/saml/identityProvider.d.ts +155 -111
- package/saml/identityProvider.js +44 -15
- package/saml/identityProvider.js.map +1 -1
- package/saml/scriptProtocolMapper.d.ts +15 -5
- package/saml/scriptProtocolMapper.js +15 -5
- package/saml/scriptProtocolMapper.js.map +1 -1
- package/saml/userAttributeProtocolMapper.d.ts +32 -91
- package/saml/userAttributeProtocolMapper.js +32 -19
- package/saml/userAttributeProtocolMapper.js.map +1 -1
- package/saml/userPropertyProtocolMapper.d.ts +32 -91
- package/saml/userPropertyProtocolMapper.js +32 -19
- package/saml/userPropertyProtocolMapper.js.map +1 -1
- package/types/input.d.ts +74 -231
- package/types/output.d.ts +44 -255
- package/user.d.ts +26 -104
- package/user.js +26 -14
- package/user.js.map +1 -1
- package/userGroups.d.ts +5 -33
- package/userGroups.js +5 -33
- package/userGroups.js.map +1 -1
- package/userRoles.d.ts +16 -6
- package/userRoles.js +16 -6
- package/userRoles.js.map +1 -1
- package/userTemplateImporterIdentityProviderMapper.d.ts +10 -3
- package/userTemplateImporterIdentityProviderMapper.js +10 -3
- package/userTemplateImporterIdentityProviderMapper.js.map +1 -1
- package/usersPermissions.d.ts +10 -25
- package/usersPermissions.js +10 -25
- package/usersPermissions.js.map +1 -1
package/realmKeystoreRsa.d.ts
CHANGED
|
@@ -6,10 +6,14 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
6
6
|
*
|
|
7
7
|
* ## Import
|
|
8
8
|
*
|
|
9
|
-
* Realm keys can be imported using realm name and keystore id, you can find it in web UI.
|
|
9
|
+
* Realm keys can be imported using realm name and keystore id, you can find it in web UI.
|
|
10
|
+
*
|
|
11
|
+
* Example:
|
|
12
|
+
*
|
|
13
|
+
* bash
|
|
10
14
|
*
|
|
11
15
|
* ```sh
|
|
12
|
-
*
|
|
16
|
+
* $ pulumi import keycloak:index/realmKeystoreRsa:RealmKeystoreRsa keystore_rsa my-realm/618cfba7-49aa-4c09-9a19-2f699b576f0b
|
|
13
17
|
* ```
|
|
14
18
|
*/
|
|
15
19
|
export declare class RealmKeystoreRsa extends pulumi.CustomResource {
|
package/realmKeystoreRsa.js
CHANGED
|
@@ -12,10 +12,14 @@ const utilities = require("./utilities");
|
|
|
12
12
|
*
|
|
13
13
|
* ## Import
|
|
14
14
|
*
|
|
15
|
-
* Realm keys can be imported using realm name and keystore id, you can find it in web UI.
|
|
15
|
+
* Realm keys can be imported using realm name and keystore id, you can find it in web UI.
|
|
16
|
+
*
|
|
17
|
+
* Example:
|
|
18
|
+
*
|
|
19
|
+
* bash
|
|
16
20
|
*
|
|
17
21
|
* ```sh
|
|
18
|
-
*
|
|
22
|
+
* $ pulumi import keycloak:index/realmKeystoreRsa:RealmKeystoreRsa keystore_rsa my-realm/618cfba7-49aa-4c09-9a19-2f699b576f0b
|
|
19
23
|
* ```
|
|
20
24
|
*/
|
|
21
25
|
class RealmKeystoreRsa extends pulumi.CustomResource {
|
package/realmKeystoreRsa.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"realmKeystoreRsa.js","sourceRoot":"","sources":["../realmKeystoreRsa.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"realmKeystoreRsa.js","sourceRoot":"","sources":["../realmKeystoreRsa.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAa,gBAAiB,SAAQ,MAAM,CAAC,cAAc;IACvD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA6B,EAAE,IAAmC;QAC3H,OAAO,IAAI,gBAAgB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACvE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,gBAAgB,CAAC,YAAY,CAAC;IACjE,CAAC;IA+CD,YAAY,IAAY,EAAE,WAA0D,EAAE,IAAmC;QACrH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAgD,CAAC;YAC/D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAA+C,CAAC;YAC7D,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,gBAAgB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC;;AA9GL,4CA+GC;AAjGG,gBAAgB;AACO,6BAAY,GAAG,kDAAkD,CAAC"}
|
|
@@ -11,7 +11,8 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
11
11
|
* import * as keycloak from "@pulumi/keycloak";
|
|
12
12
|
*
|
|
13
13
|
* const realm = new keycloak.Realm("realm", {realm: "my-realm"});
|
|
14
|
-
* const keystoreRsaGenerated = new keycloak.RealmKeystoreRsaGenerated("
|
|
14
|
+
* const keystoreRsaGenerated = new keycloak.RealmKeystoreRsaGenerated("keystore_rsa_generated", {
|
|
15
|
+
* name: "my-rsa-generated-key",
|
|
15
16
|
* realmId: realm.id,
|
|
16
17
|
* enabled: true,
|
|
17
18
|
* active: true,
|
|
@@ -23,10 +24,14 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
23
24
|
*
|
|
24
25
|
* ## Import
|
|
25
26
|
*
|
|
26
|
-
* Realm keys can be imported using realm name and keystore id, you can find it in web UI.
|
|
27
|
+
* Realm keys can be imported using realm name and keystore id, you can find it in web UI.
|
|
28
|
+
*
|
|
29
|
+
* Example:
|
|
30
|
+
*
|
|
31
|
+
* bash
|
|
27
32
|
*
|
|
28
33
|
* ```sh
|
|
29
|
-
*
|
|
34
|
+
* $ pulumi import keycloak:index/realmKeystoreRsaGenerated:RealmKeystoreRsaGenerated keystore_rsa_generated my-realm/618cfba7-49aa-4c09-9a19-2f699b576f0b
|
|
30
35
|
* ```
|
|
31
36
|
*/
|
|
32
37
|
export declare class RealmKeystoreRsaGenerated extends pulumi.CustomResource {
|
|
@@ -17,7 +17,8 @@ const utilities = require("./utilities");
|
|
|
17
17
|
* import * as keycloak from "@pulumi/keycloak";
|
|
18
18
|
*
|
|
19
19
|
* const realm = new keycloak.Realm("realm", {realm: "my-realm"});
|
|
20
|
-
* const keystoreRsaGenerated = new keycloak.RealmKeystoreRsaGenerated("
|
|
20
|
+
* const keystoreRsaGenerated = new keycloak.RealmKeystoreRsaGenerated("keystore_rsa_generated", {
|
|
21
|
+
* name: "my-rsa-generated-key",
|
|
21
22
|
* realmId: realm.id,
|
|
22
23
|
* enabled: true,
|
|
23
24
|
* active: true,
|
|
@@ -29,10 +30,14 @@ const utilities = require("./utilities");
|
|
|
29
30
|
*
|
|
30
31
|
* ## Import
|
|
31
32
|
*
|
|
32
|
-
* Realm keys can be imported using realm name and keystore id, you can find it in web UI.
|
|
33
|
+
* Realm keys can be imported using realm name and keystore id, you can find it in web UI.
|
|
34
|
+
*
|
|
35
|
+
* Example:
|
|
36
|
+
*
|
|
37
|
+
* bash
|
|
33
38
|
*
|
|
34
39
|
* ```sh
|
|
35
|
-
*
|
|
40
|
+
* $ pulumi import keycloak:index/realmKeystoreRsaGenerated:RealmKeystoreRsaGenerated keystore_rsa_generated my-realm/618cfba7-49aa-4c09-9a19-2f699b576f0b
|
|
36
41
|
* ```
|
|
37
42
|
*/
|
|
38
43
|
class RealmKeystoreRsaGenerated extends pulumi.CustomResource {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"realmKeystoreRsaGenerated.js","sourceRoot":"","sources":["../realmKeystoreRsaGenerated.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"realmKeystoreRsaGenerated.js","sourceRoot":"","sources":["../realmKeystoreRsaGenerated.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAa,yBAA0B,SAAQ,MAAM,CAAC,cAAc;IAChE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAsC,EAAE,IAAmC;QACpI,OAAO,IAAI,yBAAyB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAChF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,yBAAyB,CAAC,YAAY,CAAC;IAC1E,CAAC;IAuCD,YAAY,IAAY,EAAE,WAA4E,EAAE,IAAmC;QACvI,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAyD,CAAC;YACxE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAAwD,CAAC;YACtE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,yBAAyB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC9E,CAAC;;AA5FL,8DA6FC;AA/EG,gBAAgB;AACO,sCAAY,GAAG,oEAAoE,CAAC"}
|
package/realmUserProfile.d.ts
CHANGED
package/realmUserProfile.js
CHANGED
package/requiredAction.d.ts
CHANGED
|
@@ -14,19 +14,24 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
14
14
|
* realm: "my-realm",
|
|
15
15
|
* enabled: true,
|
|
16
16
|
* });
|
|
17
|
-
* const requiredAction = new keycloak.RequiredAction("
|
|
17
|
+
* const requiredAction = new keycloak.RequiredAction("required_action", {
|
|
18
18
|
* realmId: realm.realm,
|
|
19
19
|
* alias: "webauthn-register",
|
|
20
20
|
* enabled: true,
|
|
21
|
+
* name: "Webauthn Register",
|
|
21
22
|
* });
|
|
22
23
|
* ```
|
|
23
24
|
*
|
|
24
25
|
* ## Import
|
|
25
26
|
*
|
|
26
|
-
* Authentication executions can be imported using the formats`{{realm}}/{{alias}}`.
|
|
27
|
+
* Authentication executions can be imported using the formats: `{{realm}}/{{alias}}`.
|
|
28
|
+
*
|
|
29
|
+
* Example:
|
|
30
|
+
*
|
|
31
|
+
* bash
|
|
27
32
|
*
|
|
28
33
|
* ```sh
|
|
29
|
-
*
|
|
34
|
+
* $ pulumi import keycloak:index/requiredAction:RequiredAction required_action my-realm/my-default-action-alias
|
|
30
35
|
* ```
|
|
31
36
|
*/
|
|
32
37
|
export declare class RequiredAction extends pulumi.CustomResource {
|
package/requiredAction.js
CHANGED
|
@@ -20,19 +20,24 @@ const utilities = require("./utilities");
|
|
|
20
20
|
* realm: "my-realm",
|
|
21
21
|
* enabled: true,
|
|
22
22
|
* });
|
|
23
|
-
* const requiredAction = new keycloak.RequiredAction("
|
|
23
|
+
* const requiredAction = new keycloak.RequiredAction("required_action", {
|
|
24
24
|
* realmId: realm.realm,
|
|
25
25
|
* alias: "webauthn-register",
|
|
26
26
|
* enabled: true,
|
|
27
|
+
* name: "Webauthn Register",
|
|
27
28
|
* });
|
|
28
29
|
* ```
|
|
29
30
|
*
|
|
30
31
|
* ## Import
|
|
31
32
|
*
|
|
32
|
-
* Authentication executions can be imported using the formats`{{realm}}/{{alias}}`.
|
|
33
|
+
* Authentication executions can be imported using the formats: `{{realm}}/{{alias}}`.
|
|
34
|
+
*
|
|
35
|
+
* Example:
|
|
36
|
+
*
|
|
37
|
+
* bash
|
|
33
38
|
*
|
|
34
39
|
* ```sh
|
|
35
|
-
*
|
|
40
|
+
* $ pulumi import keycloak:index/requiredAction:RequiredAction required_action my-realm/my-default-action-alias
|
|
36
41
|
* ```
|
|
37
42
|
*/
|
|
38
43
|
class RequiredAction extends pulumi.CustomResource {
|
package/requiredAction.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"requiredAction.js","sourceRoot":"","sources":["../requiredAction.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"requiredAction.js","sourceRoot":"","sources":["../requiredAction.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAa,cAAe,SAAQ,MAAM,CAAC,cAAc;IACrD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA2B,EAAE,IAAmC;QACzH,OAAO,IAAI,cAAc,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACrE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,cAAc,CAAC,YAAY,CAAC;IAC/D,CAAC;IAmCD,YAAY,IAAY,EAAE,WAAsD,EAAE,IAAmC;QACjH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA8C,CAAC;YAC7D,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAA6C,CAAC;YAC3D,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,cAAc,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACnE,CAAC;;AAzFL,wCA0FC;AA5EG,gBAAgB;AACO,2BAAY,GAAG,8CAA8C,CAAC"}
|
package/role.d.ts
CHANGED
|
@@ -1,11 +1,13 @@
|
|
|
1
1
|
import * as pulumi from "@pulumi/pulumi";
|
|
2
2
|
/**
|
|
3
|
+
* ## # keycloak.Role
|
|
4
|
+
*
|
|
3
5
|
* Allows for creating and managing roles within Keycloak.
|
|
4
6
|
*
|
|
5
|
-
* Roles allow you define privileges within Keycloak and map them to users
|
|
7
|
+
* Roles allow you define privileges within Keycloak and map them to users
|
|
8
|
+
* and groups.
|
|
6
9
|
*
|
|
7
|
-
*
|
|
8
|
-
* ### Realm Role)
|
|
10
|
+
* ### Example Usage (Realm role)
|
|
9
11
|
*
|
|
10
12
|
* ```typescript
|
|
11
13
|
* import * as pulumi from "@pulumi/pulumi";
|
|
@@ -15,16 +17,14 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
15
17
|
* realm: "my-realm",
|
|
16
18
|
* enabled: true,
|
|
17
19
|
* });
|
|
18
|
-
* const realmRole = new keycloak.Role("
|
|
20
|
+
* const realmRole = new keycloak.Role("realm_role", {
|
|
19
21
|
* realmId: realm.id,
|
|
22
|
+
* name: "my-realm-role",
|
|
20
23
|
* description: "My Realm Role",
|
|
21
|
-
* attributes: {
|
|
22
|
-
* key: "value",
|
|
23
|
-
* multivalue: "value1##value2",
|
|
24
|
-
* },
|
|
25
24
|
* });
|
|
26
25
|
* ```
|
|
27
|
-
*
|
|
26
|
+
*
|
|
27
|
+
* ### Example Usage (Client role)
|
|
28
28
|
*
|
|
29
29
|
* ```typescript
|
|
30
30
|
* import * as pulumi from "@pulumi/pulumi";
|
|
@@ -34,23 +34,22 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
34
34
|
* realm: "my-realm",
|
|
35
35
|
* enabled: true,
|
|
36
36
|
* });
|
|
37
|
-
* const
|
|
37
|
+
* const client = new keycloak.openid.Client("client", {
|
|
38
38
|
* realmId: realm.id,
|
|
39
39
|
* clientId: "client",
|
|
40
|
+
* name: "client",
|
|
40
41
|
* enabled: true,
|
|
41
|
-
* accessType: "
|
|
42
|
-
* validRedirectUris: ["http://localhost:8080/openid-callback"],
|
|
42
|
+
* accessType: "BEARER-ONLY",
|
|
43
43
|
* });
|
|
44
|
-
* const clientRole = new keycloak.Role("
|
|
44
|
+
* const clientRole = new keycloak.Role("client_role", {
|
|
45
45
|
* realmId: realm.id,
|
|
46
|
-
* clientId:
|
|
46
|
+
* clientId: clientKeycloakClient.id,
|
|
47
|
+
* name: "my-client-role",
|
|
47
48
|
* description: "My Client Role",
|
|
48
|
-
* attributes: {
|
|
49
|
-
* key: "value",
|
|
50
|
-
* },
|
|
51
49
|
* });
|
|
52
50
|
* ```
|
|
53
|
-
*
|
|
51
|
+
*
|
|
52
|
+
* ### Example Usage (Composite role)
|
|
54
53
|
*
|
|
55
54
|
* ```typescript
|
|
56
55
|
* import * as pulumi from "@pulumi/pulumi";
|
|
@@ -61,68 +60,70 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
61
60
|
* enabled: true,
|
|
62
61
|
* });
|
|
63
62
|
* // realm roles
|
|
64
|
-
* const createRole = new keycloak.Role("
|
|
63
|
+
* const createRole = new keycloak.Role("create_role", {
|
|
65
64
|
* realmId: realm.id,
|
|
66
|
-
*
|
|
67
|
-
* key: "value",
|
|
68
|
-
* },
|
|
65
|
+
* name: "create",
|
|
69
66
|
* });
|
|
70
|
-
* const readRole = new keycloak.Role("
|
|
67
|
+
* const readRole = new keycloak.Role("read_role", {
|
|
71
68
|
* realmId: realm.id,
|
|
72
|
-
*
|
|
73
|
-
* key: "value",
|
|
74
|
-
* },
|
|
69
|
+
* name: "read",
|
|
75
70
|
* });
|
|
76
|
-
* const updateRole = new keycloak.Role("
|
|
71
|
+
* const updateRole = new keycloak.Role("update_role", {
|
|
77
72
|
* realmId: realm.id,
|
|
78
|
-
*
|
|
79
|
-
* key: "value",
|
|
80
|
-
* },
|
|
73
|
+
* name: "update",
|
|
81
74
|
* });
|
|
82
|
-
* const deleteRole = new keycloak.Role("
|
|
75
|
+
* const deleteRole = new keycloak.Role("delete_role", {
|
|
83
76
|
* realmId: realm.id,
|
|
84
|
-
*
|
|
85
|
-
* key: "value",
|
|
86
|
-
* },
|
|
77
|
+
* name: "delete",
|
|
87
78
|
* });
|
|
88
79
|
* // client role
|
|
89
|
-
* const
|
|
80
|
+
* const client = new keycloak.openid.Client("client", {
|
|
90
81
|
* realmId: realm.id,
|
|
91
82
|
* clientId: "client",
|
|
83
|
+
* name: "client",
|
|
92
84
|
* enabled: true,
|
|
93
|
-
* accessType: "
|
|
94
|
-
* validRedirectUris: ["http://localhost:8080/openid-callback"],
|
|
85
|
+
* accessType: "BEARER-ONLY",
|
|
95
86
|
* });
|
|
96
|
-
* const clientRole = new keycloak.Role("
|
|
87
|
+
* const clientRole = new keycloak.Role("client_role", {
|
|
97
88
|
* realmId: realm.id,
|
|
98
|
-
* clientId:
|
|
89
|
+
* clientId: clientKeycloakClient.id,
|
|
90
|
+
* name: "my-client-role",
|
|
99
91
|
* description: "My Client Role",
|
|
100
|
-
* attributes: {
|
|
101
|
-
* key: "value",
|
|
102
|
-
* },
|
|
103
92
|
* });
|
|
104
|
-
* const adminRole = new keycloak.Role("
|
|
93
|
+
* const adminRole = new keycloak.Role("admin_role", {
|
|
105
94
|
* realmId: realm.id,
|
|
95
|
+
* name: "admin",
|
|
106
96
|
* compositeRoles: [
|
|
107
|
-
*
|
|
108
|
-
*
|
|
109
|
-
*
|
|
110
|
-
*
|
|
111
|
-
*
|
|
97
|
+
* "{keycloak_role.create_role.id}",
|
|
98
|
+
* "{keycloak_role.read_role.id}",
|
|
99
|
+
* "{keycloak_role.update_role.id}",
|
|
100
|
+
* "{keycloak_role.delete_role.id}",
|
|
101
|
+
* "{keycloak_role.client_role.id}",
|
|
112
102
|
* ],
|
|
113
|
-
* attributes: {
|
|
114
|
-
* key: "value",
|
|
115
|
-
* },
|
|
116
103
|
* });
|
|
117
104
|
* ```
|
|
118
105
|
*
|
|
119
|
-
*
|
|
106
|
+
* ### Argument Reference
|
|
120
107
|
*
|
|
121
|
-
*
|
|
108
|
+
* The following arguments are supported:
|
|
122
109
|
*
|
|
123
|
-
*
|
|
124
|
-
*
|
|
125
|
-
*
|
|
110
|
+
* - `realmId` - (Required) The realm this role exists within.
|
|
111
|
+
* - `clientId` - (Optional) When specified, this role will be created as
|
|
112
|
+
* a client role attached to the client with the provided ID
|
|
113
|
+
* - `name` - (Required) The name of the role
|
|
114
|
+
* - `description` - (Optional) The description of the role
|
|
115
|
+
* - `compositeRoles` - (Optional) When specified, this role will be a
|
|
116
|
+
* composite role, composed of all roles that have an ID present within
|
|
117
|
+
* this list.
|
|
118
|
+
*
|
|
119
|
+
* ### Import
|
|
120
|
+
*
|
|
121
|
+
* Roles can be imported using the format `{{realm_id}}/{{role_id}}`, where
|
|
122
|
+
* `roleId` is the unique ID that Keycloak assigns to the role. The ID is
|
|
123
|
+
* not easy to find in the GUI, but it appears in the URL when editing the
|
|
124
|
+
* role.
|
|
125
|
+
*
|
|
126
|
+
* Example:
|
|
126
127
|
*/
|
|
127
128
|
export declare class Role extends pulumi.CustomResource {
|
|
128
129
|
/**
|
|
@@ -140,31 +141,13 @@ export declare class Role extends pulumi.CustomResource {
|
|
|
140
141
|
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
141
142
|
*/
|
|
142
143
|
static isInstance(obj: any): obj is Role;
|
|
143
|
-
/**
|
|
144
|
-
* A map representing attributes for the role. In order to add multivalue attributes, use `##` to seperate the values. Max length for each value is 255 chars
|
|
145
|
-
*/
|
|
146
144
|
readonly attributes: pulumi.Output<{
|
|
147
145
|
[key: string]: any;
|
|
148
146
|
} | undefined>;
|
|
149
|
-
/**
|
|
150
|
-
* When specified, this role will be created as a client role attached to the client with the provided ID
|
|
151
|
-
*/
|
|
152
147
|
readonly clientId: pulumi.Output<string | undefined>;
|
|
153
|
-
/**
|
|
154
|
-
* When specified, this role will be a composite role, composed of all roles that have an ID present within this list.
|
|
155
|
-
*/
|
|
156
148
|
readonly compositeRoles: pulumi.Output<string[] | undefined>;
|
|
157
|
-
/**
|
|
158
|
-
* The description of the role
|
|
159
|
-
*/
|
|
160
149
|
readonly description: pulumi.Output<string | undefined>;
|
|
161
|
-
/**
|
|
162
|
-
* The name of the role
|
|
163
|
-
*/
|
|
164
150
|
readonly name: pulumi.Output<string>;
|
|
165
|
-
/**
|
|
166
|
-
* The realm this role exists within.
|
|
167
|
-
*/
|
|
168
151
|
readonly realmId: pulumi.Output<string>;
|
|
169
152
|
/**
|
|
170
153
|
* Create a Role resource with the given unique name, arguments, and options.
|
|
@@ -179,61 +162,25 @@ export declare class Role extends pulumi.CustomResource {
|
|
|
179
162
|
* Input properties used for looking up and filtering Role resources.
|
|
180
163
|
*/
|
|
181
164
|
export interface RoleState {
|
|
182
|
-
/**
|
|
183
|
-
* A map representing attributes for the role. In order to add multivalue attributes, use `##` to seperate the values. Max length for each value is 255 chars
|
|
184
|
-
*/
|
|
185
165
|
attributes?: pulumi.Input<{
|
|
186
166
|
[key: string]: any;
|
|
187
167
|
}>;
|
|
188
|
-
/**
|
|
189
|
-
* When specified, this role will be created as a client role attached to the client with the provided ID
|
|
190
|
-
*/
|
|
191
168
|
clientId?: pulumi.Input<string>;
|
|
192
|
-
/**
|
|
193
|
-
* When specified, this role will be a composite role, composed of all roles that have an ID present within this list.
|
|
194
|
-
*/
|
|
195
169
|
compositeRoles?: pulumi.Input<pulumi.Input<string>[]>;
|
|
196
|
-
/**
|
|
197
|
-
* The description of the role
|
|
198
|
-
*/
|
|
199
170
|
description?: pulumi.Input<string>;
|
|
200
|
-
/**
|
|
201
|
-
* The name of the role
|
|
202
|
-
*/
|
|
203
171
|
name?: pulumi.Input<string>;
|
|
204
|
-
/**
|
|
205
|
-
* The realm this role exists within.
|
|
206
|
-
*/
|
|
207
172
|
realmId?: pulumi.Input<string>;
|
|
208
173
|
}
|
|
209
174
|
/**
|
|
210
175
|
* The set of arguments for constructing a Role resource.
|
|
211
176
|
*/
|
|
212
177
|
export interface RoleArgs {
|
|
213
|
-
/**
|
|
214
|
-
* A map representing attributes for the role. In order to add multivalue attributes, use `##` to seperate the values. Max length for each value is 255 chars
|
|
215
|
-
*/
|
|
216
178
|
attributes?: pulumi.Input<{
|
|
217
179
|
[key: string]: any;
|
|
218
180
|
}>;
|
|
219
|
-
/**
|
|
220
|
-
* When specified, this role will be created as a client role attached to the client with the provided ID
|
|
221
|
-
*/
|
|
222
181
|
clientId?: pulumi.Input<string>;
|
|
223
|
-
/**
|
|
224
|
-
* When specified, this role will be a composite role, composed of all roles that have an ID present within this list.
|
|
225
|
-
*/
|
|
226
182
|
compositeRoles?: pulumi.Input<pulumi.Input<string>[]>;
|
|
227
|
-
/**
|
|
228
|
-
* The description of the role
|
|
229
|
-
*/
|
|
230
183
|
description?: pulumi.Input<string>;
|
|
231
|
-
/**
|
|
232
|
-
* The name of the role
|
|
233
|
-
*/
|
|
234
184
|
name?: pulumi.Input<string>;
|
|
235
|
-
/**
|
|
236
|
-
* The realm this role exists within.
|
|
237
|
-
*/
|
|
238
185
|
realmId: pulumi.Input<string>;
|
|
239
186
|
}
|
package/role.js
CHANGED
|
@@ -6,12 +6,14 @@ exports.Role = void 0;
|
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("./utilities");
|
|
8
8
|
/**
|
|
9
|
+
* ## # keycloak.Role
|
|
10
|
+
*
|
|
9
11
|
* Allows for creating and managing roles within Keycloak.
|
|
10
12
|
*
|
|
11
|
-
* Roles allow you define privileges within Keycloak and map them to users
|
|
13
|
+
* Roles allow you define privileges within Keycloak and map them to users
|
|
14
|
+
* and groups.
|
|
12
15
|
*
|
|
13
|
-
*
|
|
14
|
-
* ### Realm Role)
|
|
16
|
+
* ### Example Usage (Realm role)
|
|
15
17
|
*
|
|
16
18
|
* ```typescript
|
|
17
19
|
* import * as pulumi from "@pulumi/pulumi";
|
|
@@ -21,16 +23,14 @@ const utilities = require("./utilities");
|
|
|
21
23
|
* realm: "my-realm",
|
|
22
24
|
* enabled: true,
|
|
23
25
|
* });
|
|
24
|
-
* const realmRole = new keycloak.Role("
|
|
26
|
+
* const realmRole = new keycloak.Role("realm_role", {
|
|
25
27
|
* realmId: realm.id,
|
|
28
|
+
* name: "my-realm-role",
|
|
26
29
|
* description: "My Realm Role",
|
|
27
|
-
* attributes: {
|
|
28
|
-
* key: "value",
|
|
29
|
-
* multivalue: "value1##value2",
|
|
30
|
-
* },
|
|
31
30
|
* });
|
|
32
31
|
* ```
|
|
33
|
-
*
|
|
32
|
+
*
|
|
33
|
+
* ### Example Usage (Client role)
|
|
34
34
|
*
|
|
35
35
|
* ```typescript
|
|
36
36
|
* import * as pulumi from "@pulumi/pulumi";
|
|
@@ -40,23 +40,22 @@ const utilities = require("./utilities");
|
|
|
40
40
|
* realm: "my-realm",
|
|
41
41
|
* enabled: true,
|
|
42
42
|
* });
|
|
43
|
-
* const
|
|
43
|
+
* const client = new keycloak.openid.Client("client", {
|
|
44
44
|
* realmId: realm.id,
|
|
45
45
|
* clientId: "client",
|
|
46
|
+
* name: "client",
|
|
46
47
|
* enabled: true,
|
|
47
|
-
* accessType: "
|
|
48
|
-
* validRedirectUris: ["http://localhost:8080/openid-callback"],
|
|
48
|
+
* accessType: "BEARER-ONLY",
|
|
49
49
|
* });
|
|
50
|
-
* const clientRole = new keycloak.Role("
|
|
50
|
+
* const clientRole = new keycloak.Role("client_role", {
|
|
51
51
|
* realmId: realm.id,
|
|
52
|
-
* clientId:
|
|
52
|
+
* clientId: clientKeycloakClient.id,
|
|
53
|
+
* name: "my-client-role",
|
|
53
54
|
* description: "My Client Role",
|
|
54
|
-
* attributes: {
|
|
55
|
-
* key: "value",
|
|
56
|
-
* },
|
|
57
55
|
* });
|
|
58
56
|
* ```
|
|
59
|
-
*
|
|
57
|
+
*
|
|
58
|
+
* ### Example Usage (Composite role)
|
|
60
59
|
*
|
|
61
60
|
* ```typescript
|
|
62
61
|
* import * as pulumi from "@pulumi/pulumi";
|
|
@@ -67,68 +66,70 @@ const utilities = require("./utilities");
|
|
|
67
66
|
* enabled: true,
|
|
68
67
|
* });
|
|
69
68
|
* // realm roles
|
|
70
|
-
* const createRole = new keycloak.Role("
|
|
69
|
+
* const createRole = new keycloak.Role("create_role", {
|
|
71
70
|
* realmId: realm.id,
|
|
72
|
-
*
|
|
73
|
-
* key: "value",
|
|
74
|
-
* },
|
|
71
|
+
* name: "create",
|
|
75
72
|
* });
|
|
76
|
-
* const readRole = new keycloak.Role("
|
|
73
|
+
* const readRole = new keycloak.Role("read_role", {
|
|
77
74
|
* realmId: realm.id,
|
|
78
|
-
*
|
|
79
|
-
* key: "value",
|
|
80
|
-
* },
|
|
75
|
+
* name: "read",
|
|
81
76
|
* });
|
|
82
|
-
* const updateRole = new keycloak.Role("
|
|
77
|
+
* const updateRole = new keycloak.Role("update_role", {
|
|
83
78
|
* realmId: realm.id,
|
|
84
|
-
*
|
|
85
|
-
* key: "value",
|
|
86
|
-
* },
|
|
79
|
+
* name: "update",
|
|
87
80
|
* });
|
|
88
|
-
* const deleteRole = new keycloak.Role("
|
|
81
|
+
* const deleteRole = new keycloak.Role("delete_role", {
|
|
89
82
|
* realmId: realm.id,
|
|
90
|
-
*
|
|
91
|
-
* key: "value",
|
|
92
|
-
* },
|
|
83
|
+
* name: "delete",
|
|
93
84
|
* });
|
|
94
85
|
* // client role
|
|
95
|
-
* const
|
|
86
|
+
* const client = new keycloak.openid.Client("client", {
|
|
96
87
|
* realmId: realm.id,
|
|
97
88
|
* clientId: "client",
|
|
89
|
+
* name: "client",
|
|
98
90
|
* enabled: true,
|
|
99
|
-
* accessType: "
|
|
100
|
-
* validRedirectUris: ["http://localhost:8080/openid-callback"],
|
|
91
|
+
* accessType: "BEARER-ONLY",
|
|
101
92
|
* });
|
|
102
|
-
* const clientRole = new keycloak.Role("
|
|
93
|
+
* const clientRole = new keycloak.Role("client_role", {
|
|
103
94
|
* realmId: realm.id,
|
|
104
|
-
* clientId:
|
|
95
|
+
* clientId: clientKeycloakClient.id,
|
|
96
|
+
* name: "my-client-role",
|
|
105
97
|
* description: "My Client Role",
|
|
106
|
-
* attributes: {
|
|
107
|
-
* key: "value",
|
|
108
|
-
* },
|
|
109
98
|
* });
|
|
110
|
-
* const adminRole = new keycloak.Role("
|
|
99
|
+
* const adminRole = new keycloak.Role("admin_role", {
|
|
111
100
|
* realmId: realm.id,
|
|
101
|
+
* name: "admin",
|
|
112
102
|
* compositeRoles: [
|
|
113
|
-
*
|
|
114
|
-
*
|
|
115
|
-
*
|
|
116
|
-
*
|
|
117
|
-
*
|
|
103
|
+
* "{keycloak_role.create_role.id}",
|
|
104
|
+
* "{keycloak_role.read_role.id}",
|
|
105
|
+
* "{keycloak_role.update_role.id}",
|
|
106
|
+
* "{keycloak_role.delete_role.id}",
|
|
107
|
+
* "{keycloak_role.client_role.id}",
|
|
118
108
|
* ],
|
|
119
|
-
* attributes: {
|
|
120
|
-
* key: "value",
|
|
121
|
-
* },
|
|
122
109
|
* });
|
|
123
110
|
* ```
|
|
124
111
|
*
|
|
125
|
-
*
|
|
112
|
+
* ### Argument Reference
|
|
126
113
|
*
|
|
127
|
-
*
|
|
114
|
+
* The following arguments are supported:
|
|
128
115
|
*
|
|
129
|
-
*
|
|
130
|
-
*
|
|
131
|
-
*
|
|
116
|
+
* - `realmId` - (Required) The realm this role exists within.
|
|
117
|
+
* - `clientId` - (Optional) When specified, this role will be created as
|
|
118
|
+
* a client role attached to the client with the provided ID
|
|
119
|
+
* - `name` - (Required) The name of the role
|
|
120
|
+
* - `description` - (Optional) The description of the role
|
|
121
|
+
* - `compositeRoles` - (Optional) When specified, this role will be a
|
|
122
|
+
* composite role, composed of all roles that have an ID present within
|
|
123
|
+
* this list.
|
|
124
|
+
*
|
|
125
|
+
* ### Import
|
|
126
|
+
*
|
|
127
|
+
* Roles can be imported using the format `{{realm_id}}/{{role_id}}`, where
|
|
128
|
+
* `roleId` is the unique ID that Keycloak assigns to the role. The ID is
|
|
129
|
+
* not easy to find in the GUI, but it appears in the URL when editing the
|
|
130
|
+
* role.
|
|
131
|
+
*
|
|
132
|
+
* Example:
|
|
132
133
|
*/
|
|
133
134
|
class Role extends pulumi.CustomResource {
|
|
134
135
|
/**
|