@pulumi/keycloak 5.3.1 → 5.3.3-alpha.1721330331
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/attributeImporterIdentityProviderMapper.d.ts +4 -5
- package/attributeImporterIdentityProviderMapper.js +4 -5
- package/attributeImporterIdentityProviderMapper.js.map +1 -1
- package/attributeToRoleIdentityMapper.d.ts +6 -6
- package/attributeToRoleIdentityMapper.js +6 -6
- package/authentication/bindings.d.ts +3 -5
- package/authentication/bindings.js +3 -5
- package/authentication/bindings.js.map +1 -1
- package/authentication/execution.d.ts +2 -4
- package/authentication/execution.js +2 -4
- package/authentication/execution.js.map +1 -1
- package/authentication/executionConfig.d.ts +0 -2
- package/authentication/executionConfig.js +0 -2
- package/authentication/executionConfig.js.map +1 -1
- package/authentication/flow.d.ts +0 -2
- package/authentication/flow.js +0 -2
- package/authentication/flow.js.map +1 -1
- package/authentication/subflow.d.ts +0 -2
- package/authentication/subflow.js +0 -2
- package/authentication/subflow.js.map +1 -1
- package/customIdentityProviderMapping.d.ts +7 -8
- package/customIdentityProviderMapping.js +4 -5
- package/customIdentityProviderMapping.js.map +1 -1
- package/customUserFederation.d.ts +8 -9
- package/customUserFederation.js +5 -6
- package/customUserFederation.js.map +1 -1
- package/defaultGroups.d.ts +6 -5
- package/defaultGroups.js +6 -5
- package/defaultGroups.js.map +1 -1
- package/defaultRoles.d.ts +1 -3
- package/defaultRoles.js +1 -3
- package/defaultRoles.js.map +1 -1
- package/genericClientProtocolMapper.d.ts +8 -9
- package/genericClientProtocolMapper.js +8 -9
- package/genericClientProtocolMapper.js.map +1 -1
- package/genericClientRoleMapper.d.ts +28 -21
- package/genericClientRoleMapper.js +28 -21
- package/genericClientRoleMapper.js.map +1 -1
- package/genericProtocolMapper.d.ts +3 -4
- package/genericProtocolMapper.js +3 -4
- package/genericProtocolMapper.js.map +1 -1
- package/genericRoleMapper.d.ts +28 -21
- package/genericRoleMapper.js +28 -21
- package/genericRoleMapper.js.map +1 -1
- package/getAuthenticationExecution.d.ts +0 -4
- package/getAuthenticationExecution.js +0 -4
- package/getAuthenticationExecution.js.map +1 -1
- package/getAuthenticationFlow.d.ts +0 -4
- package/getAuthenticationFlow.js +0 -4
- package/getAuthenticationFlow.js.map +1 -1
- package/getClientDescriptionConverter.d.ts +50 -54
- package/getClientDescriptionConverter.js +50 -54
- package/getClientDescriptionConverter.js.map +1 -1
- package/getRealm.d.ts +10 -6
- package/getRealm.js +10 -6
- package/getRealm.js.map +1 -1
- package/getUser.d.ts +2 -4
- package/getUser.js +2 -4
- package/getUser.js.map +1 -1
- package/getUserRealmRoles.d.ts +4 -4
- package/getUserRealmRoles.js +4 -4
- package/group.d.ts +12 -9
- package/group.js +12 -9
- package/group.js.map +1 -1
- package/groupMemberships.d.ts +7 -6
- package/groupMemberships.js +7 -6
- package/groupMemberships.js.map +1 -1
- package/groupRoles.d.ts +16 -12
- package/groupRoles.js +16 -12
- package/groupRoles.js.map +1 -1
- package/hardcodedAttributeIdentityProviderMapper.d.ts +4 -5
- package/hardcodedAttributeIdentityProviderMapper.js +4 -5
- package/hardcodedAttributeIdentityProviderMapper.js.map +1 -1
- package/hardcodedRoleIdentityMapper.d.ts +6 -6
- package/hardcodedRoleIdentityMapper.js +6 -6
- package/identityProviderTokenExchangeScopePermission.d.ts +5 -6
- package/identityProviderTokenExchangeScopePermission.js +5 -6
- package/identityProviderTokenExchangeScopePermission.js.map +1 -1
- package/ldap/customMapper.d.ts +6 -6
- package/ldap/customMapper.js +6 -6
- package/ldap/fullNameMapper.d.ts +13 -13
- package/ldap/fullNameMapper.js +13 -13
- package/ldap/groupMapper.d.ts +15 -15
- package/ldap/groupMapper.js +15 -15
- package/ldap/hardcodedAttributeMapper.d.ts +4 -4
- package/ldap/hardcodedAttributeMapper.js +4 -4
- package/ldap/hardcodedGroupMapper.d.ts +8 -5
- package/ldap/hardcodedGroupMapper.js +8 -5
- package/ldap/hardcodedGroupMapper.js.map +1 -1
- package/ldap/hardcodedRoleMapper.d.ts +4 -4
- package/ldap/hardcodedRoleMapper.js +4 -4
- package/ldap/msadLdsUserAccountControlMapper.d.ts +4 -4
- package/ldap/msadLdsUserAccountControlMapper.js +4 -4
- package/ldap/msadUserAccountControlMapper.d.ts +12 -12
- package/ldap/msadUserAccountControlMapper.js +12 -12
- package/ldap/roleMapper.d.ts +4 -4
- package/ldap/roleMapper.js +4 -4
- package/ldap/userAttributeMapper.d.ts +16 -16
- package/ldap/userAttributeMapper.js +13 -13
- package/ldap/userFederation.d.ts +11 -12
- package/ldap/userFederation.js +11 -12
- package/ldap/userFederation.js.map +1 -1
- package/oidc/googleIdentityProvider.d.ts +2 -4
- package/oidc/googleIdentityProvider.js +2 -4
- package/oidc/googleIdentityProvider.js.map +1 -1
- package/oidc/identityProvider.d.ts +1 -3
- package/oidc/identityProvider.js +1 -3
- package/oidc/identityProvider.js.map +1 -1
- package/openid/audienceProtocolMapper.d.ts +16 -14
- package/openid/audienceProtocolMapper.js +16 -14
- package/openid/audienceProtocolMapper.js.map +1 -1
- package/openid/audienceResolveProtocolMapper.d.ts +9 -8
- package/openid/audienceResolveProtocolMapper.js +9 -8
- package/openid/audienceResolveProtocolMapper.js.map +1 -1
- package/openid/audienceResolveProtocolMappter.d.ts +9 -8
- package/openid/audienceResolveProtocolMappter.js +9 -8
- package/openid/audienceResolveProtocolMappter.js.map +1 -1
- package/openid/client.d.ts +5 -6
- package/openid/client.js +5 -6
- package/openid/client.js.map +1 -1
- package/openid/clientDefaultScopes.d.ts +8 -7
- package/openid/clientDefaultScopes.js +8 -7
- package/openid/clientDefaultScopes.js.map +1 -1
- package/openid/clientOptionalScopes.d.ts +8 -7
- package/openid/clientOptionalScopes.js +8 -7
- package/openid/clientOptionalScopes.js.map +1 -1
- package/openid/clientPolicy.d.ts +5 -5
- package/openid/clientPolicy.js +5 -5
- package/openid/clientScope.d.ts +4 -5
- package/openid/clientScope.js +4 -5
- package/openid/clientScope.js.map +1 -1
- package/openid/clientServiceAccountRealmRole.d.ts +6 -4
- package/openid/clientServiceAccountRealmRole.js +6 -4
- package/openid/clientServiceAccountRealmRole.js.map +1 -1
- package/openid/clientServiceAccountRole.d.ts +8 -5
- package/openid/clientServiceAccountRole.js +8 -5
- package/openid/clientServiceAccountRole.js.map +1 -1
- package/openid/fullNameProtocolMapper.d.ts +16 -14
- package/openid/fullNameProtocolMapper.js +16 -14
- package/openid/fullNameProtocolMapper.js.map +1 -1
- package/openid/getClient.d.ts +2 -4
- package/openid/getClient.js +2 -4
- package/openid/getClient.js.map +1 -1
- package/openid/getClientAuthorizationPolicy.d.ts +8 -6
- package/openid/getClientAuthorizationPolicy.js +8 -6
- package/openid/getClientAuthorizationPolicy.js.map +1 -1
- package/openid/getClientScope.d.ts +4 -6
- package/openid/getClientScope.js +4 -6
- package/openid/getClientScope.js.map +1 -1
- package/openid/getClientServiceAccountUser.d.ts +4 -6
- package/openid/getClientServiceAccountUser.js +4 -6
- package/openid/getClientServiceAccountUser.js.map +1 -1
- package/openid/groupMembershipProtocolMapper.d.ts +18 -16
- package/openid/groupMembershipProtocolMapper.js +18 -16
- package/openid/groupMembershipProtocolMapper.js.map +1 -1
- package/openid/hardcodedClaimProtocolMapper.d.ts +18 -16
- package/openid/hardcodedClaimProtocolMapper.js +18 -16
- package/openid/hardcodedClaimProtocolMapper.js.map +1 -1
- package/openid/hardcodedRoleProtocolMapper.d.ts +24 -16
- package/openid/hardcodedRoleProtocolMapper.js +24 -16
- package/openid/hardcodedRoleProtocolMapper.js.map +1 -1
- package/openid/scriptProtocolMapper.d.ts +10 -8
- package/openid/scriptProtocolMapper.js +10 -8
- package/openid/scriptProtocolMapper.js.map +1 -1
- package/openid/userAttributeProtocolMapper.d.ts +18 -16
- package/openid/userAttributeProtocolMapper.js +18 -16
- package/openid/userAttributeProtocolMapper.js.map +1 -1
- package/openid/userClientRoleProtocolMapper.d.ts +10 -8
- package/openid/userClientRoleProtocolMapper.js +10 -8
- package/openid/userClientRoleProtocolMapper.js.map +1 -1
- package/openid/userPropertyProtocolMapper.d.ts +18 -16
- package/openid/userPropertyProtocolMapper.js +18 -16
- package/openid/userPropertyProtocolMapper.js.map +1 -1
- package/openid/userRealmRoleProtocolMapper.d.ts +18 -16
- package/openid/userRealmRoleProtocolMapper.js +18 -16
- package/openid/userRealmRoleProtocolMapper.js.map +1 -1
- package/openid/userSessionNoteProtocolMapper.d.ts +10 -8
- package/openid/userSessionNoteProtocolMapper.js +10 -8
- package/openid/userSessionNoteProtocolMapper.js.map +1 -1
- package/package.json +3 -2
- package/realmEvents.d.ts +5 -7
- package/realmEvents.js +5 -7
- package/realmEvents.js.map +1 -1
- package/realmKeystoreAesGenerated.d.ts +2 -3
- package/realmKeystoreAesGenerated.js +2 -3
- package/realmKeystoreAesGenerated.js.map +1 -1
- package/realmKeystoreEcdsaGenerated.d.ts +2 -3
- package/realmKeystoreEcdsaGenerated.js +2 -3
- package/realmKeystoreEcdsaGenerated.js.map +1 -1
- package/realmKeystoreHmacGenerated.d.ts +2 -3
- package/realmKeystoreHmacGenerated.js +2 -3
- package/realmKeystoreHmacGenerated.js.map +1 -1
- package/realmKeystoreJavaGenerated.d.ts +2 -3
- package/realmKeystoreJavaGenerated.js +2 -3
- package/realmKeystoreJavaGenerated.js.map +1 -1
- package/realmKeystoreRsaGenerated.d.ts +2 -3
- package/realmKeystoreRsaGenerated.js +2 -3
- package/realmKeystoreRsaGenerated.js.map +1 -1
- package/realmUserProfile.d.ts +1 -3
- package/realmUserProfile.js +1 -3
- package/realmUserProfile.js.map +1 -1
- package/requiredAction.d.ts +2 -3
- package/requiredAction.js +2 -3
- package/requiredAction.js.map +1 -1
- package/role.d.ts +41 -27
- package/role.js +41 -27
- package/role.js.map +1 -1
- package/saml/client.d.ts +0 -54
- package/saml/client.js +0 -54
- package/saml/client.js.map +1 -1
- package/saml/clientDefaultScope.d.ts +0 -37
- package/saml/clientDefaultScope.js +0 -37
- package/saml/clientDefaultScope.js.map +1 -1
- package/saml/clientScope.d.ts +2 -3
- package/saml/clientScope.js +2 -3
- package/saml/clientScope.js.map +1 -1
- package/saml/getClient.d.ts +2 -4
- package/saml/getClient.js +2 -4
- package/saml/getClient.js.map +1 -1
- package/saml/getClientInstallationProvider.d.ts +0 -66
- package/saml/getClientInstallationProvider.js +0 -66
- package/saml/getClientInstallationProvider.js.map +1 -1
- package/saml/identityProvider.d.ts +7 -9
- package/saml/identityProvider.js +7 -9
- package/saml/identityProvider.js.map +1 -1
- package/saml/scriptProtocolMapper.d.ts +4 -4
- package/saml/scriptProtocolMapper.js +4 -4
- package/saml/userAttributeProtocolMapper.d.ts +8 -8
- package/saml/userAttributeProtocolMapper.js +8 -8
- package/saml/userPropertyProtocolMapper.d.ts +8 -8
- package/saml/userPropertyProtocolMapper.js +8 -8
- package/types/input.d.ts +0 -15
- package/types/output.d.ts +0 -15
- package/user.d.ts +10 -12
- package/user.js +10 -12
- package/user.js.map +1 -1
- package/userGroups.d.ts +4 -40
- package/userGroups.js +4 -40
- package/userGroups.js.map +1 -1
- package/userRoles.d.ts +7 -6
- package/userRoles.js +7 -6
- package/userRoles.js.map +1 -1
- package/userTemplateImporterIdentityProviderMapper.d.ts +2 -3
- package/userTemplateImporterIdentityProviderMapper.js +2 -3
- package/userTemplateImporterIdentityProviderMapper.js.map +1 -1
- package/package.json.bak +0 -27
package/ldap/groupMapper.js
CHANGED
|
@@ -17,42 +17,42 @@ const utilities = require("../utilities");
|
|
|
17
17
|
*
|
|
18
18
|
* ### Example Usage
|
|
19
19
|
*
|
|
20
|
-
* <!--Start PulumiCodeChooser -->
|
|
21
20
|
* ```typescript
|
|
22
21
|
* import * as pulumi from "@pulumi/pulumi";
|
|
23
22
|
* import * as keycloak from "@pulumi/keycloak";
|
|
24
23
|
*
|
|
25
24
|
* const realm = new keycloak.Realm("realm", {
|
|
26
|
-
* enabled: true,
|
|
27
25
|
* realm: "test",
|
|
26
|
+
* enabled: true,
|
|
28
27
|
* });
|
|
29
|
-
* const ldapUserFederation = new keycloak.ldap.UserFederation("
|
|
30
|
-
*
|
|
31
|
-
* bindDn: "cn=admin,dc=example,dc=org",
|
|
32
|
-
* connectionUrl: "ldap://openldap",
|
|
33
|
-
* rdnLdapAttribute: "cn",
|
|
28
|
+
* const ldapUserFederation = new keycloak.ldap.UserFederation("ldap_user_federation", {
|
|
29
|
+
* name: "openldap",
|
|
34
30
|
* realmId: realm.id,
|
|
31
|
+
* usernameLdapAttribute: "cn",
|
|
32
|
+
* rdnLdapAttribute: "cn",
|
|
33
|
+
* uuidLdapAttribute: "entryDN",
|
|
35
34
|
* userObjectClasses: [
|
|
36
35
|
* "simpleSecurityObject",
|
|
37
36
|
* "organizationalRole",
|
|
38
37
|
* ],
|
|
39
|
-
*
|
|
38
|
+
* connectionUrl: "ldap://openldap",
|
|
40
39
|
* usersDn: "dc=example,dc=org",
|
|
41
|
-
*
|
|
40
|
+
* bindDn: "cn=admin,dc=example,dc=org",
|
|
41
|
+
* bindCredential: "admin",
|
|
42
42
|
* });
|
|
43
|
-
* const ldapGroupMapper = new keycloak.ldap.GroupMapper("
|
|
43
|
+
* const ldapGroupMapper = new keycloak.ldap.GroupMapper("ldap_group_mapper", {
|
|
44
|
+
* realmId: realm.id,
|
|
45
|
+
* ldapUserFederationId: ldapUserFederation.id,
|
|
46
|
+
* name: "group-mapper",
|
|
47
|
+
* ldapGroupsDn: "dc=example,dc=org",
|
|
44
48
|
* groupNameLdapAttribute: "cn",
|
|
45
49
|
* groupObjectClasses: ["groupOfNames"],
|
|
46
|
-
* ldapGroupsDn: "dc=example,dc=org",
|
|
47
|
-
* ldapUserFederationId: ldapUserFederation.id,
|
|
48
|
-
* memberofLdapAttribute: "memberOf",
|
|
49
50
|
* membershipAttributeType: "DN",
|
|
50
51
|
* membershipLdapAttribute: "member",
|
|
51
52
|
* membershipUserLdapAttribute: "cn",
|
|
52
|
-
*
|
|
53
|
+
* memberofLdapAttribute: "memberOf",
|
|
53
54
|
* });
|
|
54
55
|
* ```
|
|
55
|
-
* <!--End PulumiCodeChooser -->
|
|
56
56
|
*
|
|
57
57
|
* ### Argument Reference
|
|
58
58
|
*
|
|
@@ -8,7 +8,6 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
8
8
|
*
|
|
9
9
|
* ## Example Usage
|
|
10
10
|
*
|
|
11
|
-
* <!--Start PulumiCodeChooser -->
|
|
12
11
|
* ```typescript
|
|
13
12
|
* import * as pulumi from "@pulumi/pulumi";
|
|
14
13
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -17,7 +16,8 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
17
16
|
* realm: "my-realm",
|
|
18
17
|
* enabled: true,
|
|
19
18
|
* });
|
|
20
|
-
* const ldapUserFederation = new keycloak.ldap.UserFederation("
|
|
19
|
+
* const ldapUserFederation = new keycloak.ldap.UserFederation("ldap_user_federation", {
|
|
20
|
+
* name: "openldap",
|
|
21
21
|
* realmId: realm.id,
|
|
22
22
|
* usernameLdapAttribute: "cn",
|
|
23
23
|
* rdnLdapAttribute: "cn",
|
|
@@ -32,14 +32,14 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
32
32
|
* bindCredential: "admin",
|
|
33
33
|
* syncRegistrations: true,
|
|
34
34
|
* });
|
|
35
|
-
* const assignBarToFoo = new keycloak.ldap.HardcodedAttributeMapper("
|
|
35
|
+
* const assignBarToFoo = new keycloak.ldap.HardcodedAttributeMapper("assign_bar_to_foo", {
|
|
36
36
|
* realmId: realm.id,
|
|
37
37
|
* ldapUserFederationId: ldapUserFederation.id,
|
|
38
|
+
* name: "assign-foo-to-bar",
|
|
38
39
|
* attributeName: "foo",
|
|
39
40
|
* attributeValue: "bar",
|
|
40
41
|
* });
|
|
41
42
|
* ```
|
|
42
|
-
* <!--End PulumiCodeChooser -->
|
|
43
43
|
*
|
|
44
44
|
* ## Import
|
|
45
45
|
*
|
|
@@ -14,7 +14,6 @@ const utilities = require("../utilities");
|
|
|
14
14
|
*
|
|
15
15
|
* ## Example Usage
|
|
16
16
|
*
|
|
17
|
-
* <!--Start PulumiCodeChooser -->
|
|
18
17
|
* ```typescript
|
|
19
18
|
* import * as pulumi from "@pulumi/pulumi";
|
|
20
19
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -23,7 +22,8 @@ const utilities = require("../utilities");
|
|
|
23
22
|
* realm: "my-realm",
|
|
24
23
|
* enabled: true,
|
|
25
24
|
* });
|
|
26
|
-
* const ldapUserFederation = new keycloak.ldap.UserFederation("
|
|
25
|
+
* const ldapUserFederation = new keycloak.ldap.UserFederation("ldap_user_federation", {
|
|
26
|
+
* name: "openldap",
|
|
27
27
|
* realmId: realm.id,
|
|
28
28
|
* usernameLdapAttribute: "cn",
|
|
29
29
|
* rdnLdapAttribute: "cn",
|
|
@@ -38,14 +38,14 @@ const utilities = require("../utilities");
|
|
|
38
38
|
* bindCredential: "admin",
|
|
39
39
|
* syncRegistrations: true,
|
|
40
40
|
* });
|
|
41
|
-
* const assignBarToFoo = new keycloak.ldap.HardcodedAttributeMapper("
|
|
41
|
+
* const assignBarToFoo = new keycloak.ldap.HardcodedAttributeMapper("assign_bar_to_foo", {
|
|
42
42
|
* realmId: realm.id,
|
|
43
43
|
* ldapUserFederationId: ldapUserFederation.id,
|
|
44
|
+
* name: "assign-foo-to-bar",
|
|
44
45
|
* attributeName: "foo",
|
|
45
46
|
* attributeValue: "bar",
|
|
46
47
|
* });
|
|
47
48
|
* ```
|
|
48
|
-
* <!--End PulumiCodeChooser -->
|
|
49
49
|
*
|
|
50
50
|
* ## Import
|
|
51
51
|
*
|
|
@@ -6,7 +6,6 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
6
6
|
*
|
|
7
7
|
* ## Example Usage
|
|
8
8
|
*
|
|
9
|
-
* <!--Start PulumiCodeChooser -->
|
|
10
9
|
* ```typescript
|
|
11
10
|
* import * as pulumi from "@pulumi/pulumi";
|
|
12
11
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -15,7 +14,8 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
15
14
|
* realm: "my-realm",
|
|
16
15
|
* enabled: true,
|
|
17
16
|
* });
|
|
18
|
-
* const ldapUserFederation = new keycloak.ldap.UserFederation("
|
|
17
|
+
* const ldapUserFederation = new keycloak.ldap.UserFederation("ldap_user_federation", {
|
|
18
|
+
* name: "openldap",
|
|
19
19
|
* realmId: realm.id,
|
|
20
20
|
* usernameLdapAttribute: "cn",
|
|
21
21
|
* rdnLdapAttribute: "cn",
|
|
@@ -29,14 +29,17 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
29
29
|
* bindDn: "cn=admin,dc=example,dc=org",
|
|
30
30
|
* bindCredential: "admin",
|
|
31
31
|
* });
|
|
32
|
-
* const realmGroup = new keycloak.Group("
|
|
33
|
-
*
|
|
32
|
+
* const realmGroup = new keycloak.Group("realm_group", {
|
|
33
|
+
* realmId: realm.id,
|
|
34
|
+
* name: "my-group",
|
|
35
|
+
* });
|
|
36
|
+
* const assignGroupToUsers = new keycloak.ldap.HardcodedGroupMapper("assign_group_to_users", {
|
|
34
37
|
* realmId: realm.id,
|
|
35
38
|
* ldapUserFederationId: ldapUserFederation.id,
|
|
39
|
+
* name: "assign-group-to-users",
|
|
36
40
|
* group: realmGroup.name,
|
|
37
41
|
* });
|
|
38
42
|
* ```
|
|
39
|
-
* <!--End PulumiCodeChooser -->
|
|
40
43
|
*
|
|
41
44
|
* ## Import
|
|
42
45
|
*
|
|
@@ -12,7 +12,6 @@ const utilities = require("../utilities");
|
|
|
12
12
|
*
|
|
13
13
|
* ## Example Usage
|
|
14
14
|
*
|
|
15
|
-
* <!--Start PulumiCodeChooser -->
|
|
16
15
|
* ```typescript
|
|
17
16
|
* import * as pulumi from "@pulumi/pulumi";
|
|
18
17
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -21,7 +20,8 @@ const utilities = require("../utilities");
|
|
|
21
20
|
* realm: "my-realm",
|
|
22
21
|
* enabled: true,
|
|
23
22
|
* });
|
|
24
|
-
* const ldapUserFederation = new keycloak.ldap.UserFederation("
|
|
23
|
+
* const ldapUserFederation = new keycloak.ldap.UserFederation("ldap_user_federation", {
|
|
24
|
+
* name: "openldap",
|
|
25
25
|
* realmId: realm.id,
|
|
26
26
|
* usernameLdapAttribute: "cn",
|
|
27
27
|
* rdnLdapAttribute: "cn",
|
|
@@ -35,14 +35,17 @@ const utilities = require("../utilities");
|
|
|
35
35
|
* bindDn: "cn=admin,dc=example,dc=org",
|
|
36
36
|
* bindCredential: "admin",
|
|
37
37
|
* });
|
|
38
|
-
* const realmGroup = new keycloak.Group("
|
|
39
|
-
*
|
|
38
|
+
* const realmGroup = new keycloak.Group("realm_group", {
|
|
39
|
+
* realmId: realm.id,
|
|
40
|
+
* name: "my-group",
|
|
41
|
+
* });
|
|
42
|
+
* const assignGroupToUsers = new keycloak.ldap.HardcodedGroupMapper("assign_group_to_users", {
|
|
40
43
|
* realmId: realm.id,
|
|
41
44
|
* ldapUserFederationId: ldapUserFederation.id,
|
|
45
|
+
* name: "assign-group-to-users",
|
|
42
46
|
* group: realmGroup.name,
|
|
43
47
|
* });
|
|
44
48
|
* ```
|
|
45
|
-
* <!--End PulumiCodeChooser -->
|
|
46
49
|
*
|
|
47
50
|
* ## Import
|
|
48
51
|
*
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"hardcodedGroupMapper.js","sourceRoot":"","sources":["../../ldap/hardcodedGroupMapper.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C
|
|
1
|
+
{"version":3,"file":"hardcodedGroupMapper.js","sourceRoot":"","sources":["../../ldap/hardcodedGroupMapper.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,MAAa,oBAAqB,SAAQ,MAAM,CAAC,cAAc;IAC3D;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAiC,EAAE,IAAmC;QAC/H,OAAO,IAAI,oBAAoB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC3E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,oBAAoB,CAAC,YAAY,CAAC;IACrE,CAAC;IA2BD,YAAY,IAAY,EAAE,WAAkE,EAAE,IAAmC;QAC7H,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAoD,CAAC;YACnE,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAAmD,CAAC;YACjE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;aACvE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,oBAAoB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACzE,CAAC;;AAhFL,oDAiFC;AAnEG,gBAAgB;AACO,iCAAY,GAAG,yDAAyD,CAAC"}
|
|
@@ -6,7 +6,6 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
6
6
|
*
|
|
7
7
|
* ### Example Usage
|
|
8
8
|
*
|
|
9
|
-
* <!--Start PulumiCodeChooser -->
|
|
10
9
|
* ```typescript
|
|
11
10
|
* import * as pulumi from "@pulumi/pulumi";
|
|
12
11
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -15,7 +14,8 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
15
14
|
* realm: "test",
|
|
16
15
|
* enabled: true,
|
|
17
16
|
* });
|
|
18
|
-
* const ldapUserFederation = new keycloak.ldap.UserFederation("
|
|
17
|
+
* const ldapUserFederation = new keycloak.ldap.UserFederation("ldap_user_federation", {
|
|
18
|
+
* name: "openldap",
|
|
19
19
|
* realmId: realm.id,
|
|
20
20
|
* usernameLdapAttribute: "cn",
|
|
21
21
|
* rdnLdapAttribute: "cn",
|
|
@@ -29,13 +29,13 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
29
29
|
* bindDn: "cn=admin,dc=example,dc=org",
|
|
30
30
|
* bindCredential: "admin",
|
|
31
31
|
* });
|
|
32
|
-
* const assignAdminRoleToAllUsers = new keycloak.ldap.HardcodedRoleMapper("
|
|
32
|
+
* const assignAdminRoleToAllUsers = new keycloak.ldap.HardcodedRoleMapper("assign_admin_role_to_all_users", {
|
|
33
33
|
* realmId: realm.id,
|
|
34
34
|
* ldapUserFederationId: ldapUserFederation.id,
|
|
35
|
+
* name: "assign-admin-role-to-all-users",
|
|
35
36
|
* role: "admin",
|
|
36
37
|
* });
|
|
37
38
|
* ```
|
|
38
|
-
* <!--End PulumiCodeChooser -->
|
|
39
39
|
*
|
|
40
40
|
* ### Argument Reference
|
|
41
41
|
*
|
|
@@ -12,7 +12,6 @@ const utilities = require("../utilities");
|
|
|
12
12
|
*
|
|
13
13
|
* ### Example Usage
|
|
14
14
|
*
|
|
15
|
-
* <!--Start PulumiCodeChooser -->
|
|
16
15
|
* ```typescript
|
|
17
16
|
* import * as pulumi from "@pulumi/pulumi";
|
|
18
17
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -21,7 +20,8 @@ const utilities = require("../utilities");
|
|
|
21
20
|
* realm: "test",
|
|
22
21
|
* enabled: true,
|
|
23
22
|
* });
|
|
24
|
-
* const ldapUserFederation = new keycloak.ldap.UserFederation("
|
|
23
|
+
* const ldapUserFederation = new keycloak.ldap.UserFederation("ldap_user_federation", {
|
|
24
|
+
* name: "openldap",
|
|
25
25
|
* realmId: realm.id,
|
|
26
26
|
* usernameLdapAttribute: "cn",
|
|
27
27
|
* rdnLdapAttribute: "cn",
|
|
@@ -35,13 +35,13 @@ const utilities = require("../utilities");
|
|
|
35
35
|
* bindDn: "cn=admin,dc=example,dc=org",
|
|
36
36
|
* bindCredential: "admin",
|
|
37
37
|
* });
|
|
38
|
-
* const assignAdminRoleToAllUsers = new keycloak.ldap.HardcodedRoleMapper("
|
|
38
|
+
* const assignAdminRoleToAllUsers = new keycloak.ldap.HardcodedRoleMapper("assign_admin_role_to_all_users", {
|
|
39
39
|
* realmId: realm.id,
|
|
40
40
|
* ldapUserFederationId: ldapUserFederation.id,
|
|
41
|
+
* name: "assign-admin-role-to-all-users",
|
|
41
42
|
* role: "admin",
|
|
42
43
|
* });
|
|
43
44
|
* ```
|
|
44
|
-
* <!--End PulumiCodeChooser -->
|
|
45
45
|
*
|
|
46
46
|
* ### Argument Reference
|
|
47
47
|
*
|
|
@@ -10,7 +10,6 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
10
10
|
*
|
|
11
11
|
* ## Example Usage
|
|
12
12
|
*
|
|
13
|
-
* <!--Start PulumiCodeChooser -->
|
|
14
13
|
* ```typescript
|
|
15
14
|
* import * as pulumi from "@pulumi/pulumi";
|
|
16
15
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -19,7 +18,8 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
19
18
|
* realm: "my-realm",
|
|
20
19
|
* enabled: true,
|
|
21
20
|
* });
|
|
22
|
-
* const ldapUserFederation = new keycloak.ldap.UserFederation("
|
|
21
|
+
* const ldapUserFederation = new keycloak.ldap.UserFederation("ldap_user_federation", {
|
|
22
|
+
* name: "ad",
|
|
23
23
|
* realmId: realm.id,
|
|
24
24
|
* usernameLdapAttribute: "cn",
|
|
25
25
|
* rdnLdapAttribute: "cn",
|
|
@@ -34,12 +34,12 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
34
34
|
* bindDn: "cn=admin,dc=example,dc=org",
|
|
35
35
|
* bindCredential: "admin",
|
|
36
36
|
* });
|
|
37
|
-
* const msadLdsUserAccountControlMapper = new keycloak.ldap.MsadLdsUserAccountControlMapper("
|
|
37
|
+
* const msadLdsUserAccountControlMapper = new keycloak.ldap.MsadLdsUserAccountControlMapper("msad_lds_user_account_control_mapper", {
|
|
38
38
|
* realmId: realm.id,
|
|
39
39
|
* ldapUserFederationId: ldapUserFederation.id,
|
|
40
|
+
* name: "msad-lds-user-account-control-mapper",
|
|
40
41
|
* });
|
|
41
42
|
* ```
|
|
42
|
-
* <!--End PulumiCodeChooser -->
|
|
43
43
|
*
|
|
44
44
|
* ## Import
|
|
45
45
|
*
|
|
@@ -16,7 +16,6 @@ const utilities = require("../utilities");
|
|
|
16
16
|
*
|
|
17
17
|
* ## Example Usage
|
|
18
18
|
*
|
|
19
|
-
* <!--Start PulumiCodeChooser -->
|
|
20
19
|
* ```typescript
|
|
21
20
|
* import * as pulumi from "@pulumi/pulumi";
|
|
22
21
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -25,7 +24,8 @@ const utilities = require("../utilities");
|
|
|
25
24
|
* realm: "my-realm",
|
|
26
25
|
* enabled: true,
|
|
27
26
|
* });
|
|
28
|
-
* const ldapUserFederation = new keycloak.ldap.UserFederation("
|
|
27
|
+
* const ldapUserFederation = new keycloak.ldap.UserFederation("ldap_user_federation", {
|
|
28
|
+
* name: "ad",
|
|
29
29
|
* realmId: realm.id,
|
|
30
30
|
* usernameLdapAttribute: "cn",
|
|
31
31
|
* rdnLdapAttribute: "cn",
|
|
@@ -40,12 +40,12 @@ const utilities = require("../utilities");
|
|
|
40
40
|
* bindDn: "cn=admin,dc=example,dc=org",
|
|
41
41
|
* bindCredential: "admin",
|
|
42
42
|
* });
|
|
43
|
-
* const msadLdsUserAccountControlMapper = new keycloak.ldap.MsadLdsUserAccountControlMapper("
|
|
43
|
+
* const msadLdsUserAccountControlMapper = new keycloak.ldap.MsadLdsUserAccountControlMapper("msad_lds_user_account_control_mapper", {
|
|
44
44
|
* realmId: realm.id,
|
|
45
45
|
* ldapUserFederationId: ldapUserFederation.id,
|
|
46
|
+
* name: "msad-lds-user-account-control-mapper",
|
|
46
47
|
* });
|
|
47
48
|
* ```
|
|
48
|
-
* <!--End PulumiCodeChooser -->
|
|
49
49
|
*
|
|
50
50
|
* ## Import
|
|
51
51
|
*
|
|
@@ -12,36 +12,36 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
12
12
|
*
|
|
13
13
|
* ### Example Usage
|
|
14
14
|
*
|
|
15
|
-
* <!--Start PulumiCodeChooser -->
|
|
16
15
|
* ```typescript
|
|
17
16
|
* import * as pulumi from "@pulumi/pulumi";
|
|
18
17
|
* import * as keycloak from "@pulumi/keycloak";
|
|
19
18
|
*
|
|
20
19
|
* const realm = new keycloak.Realm("realm", {
|
|
21
|
-
* enabled: true,
|
|
22
20
|
* realm: "test",
|
|
21
|
+
* enabled: true,
|
|
23
22
|
* });
|
|
24
|
-
* const ldapUserFederation = new keycloak.ldap.UserFederation("
|
|
25
|
-
*
|
|
26
|
-
* bindDn: "cn=admin,dc=example,dc=org",
|
|
27
|
-
* connectionUrl: "ldap://my-ad-server",
|
|
28
|
-
* rdnLdapAttribute: "cn",
|
|
23
|
+
* const ldapUserFederation = new keycloak.ldap.UserFederation("ldap_user_federation", {
|
|
24
|
+
* name: "ad",
|
|
29
25
|
* realmId: realm.id,
|
|
26
|
+
* usernameLdapAttribute: "cn",
|
|
27
|
+
* rdnLdapAttribute: "cn",
|
|
28
|
+
* uuidLdapAttribute: "objectGUID",
|
|
30
29
|
* userObjectClasses: [
|
|
31
30
|
* "person",
|
|
32
31
|
* "organizationalPerson",
|
|
33
32
|
* "user",
|
|
34
33
|
* ],
|
|
35
|
-
*
|
|
34
|
+
* connectionUrl: "ldap://my-ad-server",
|
|
36
35
|
* usersDn: "dc=example,dc=org",
|
|
37
|
-
*
|
|
36
|
+
* bindDn: "cn=admin,dc=example,dc=org",
|
|
37
|
+
* bindCredential: "admin",
|
|
38
38
|
* });
|
|
39
|
-
* const msadUserAccountControlMapper = new keycloak.ldap.MsadUserAccountControlMapper("
|
|
40
|
-
* ldapUserFederationId: ldapUserFederation.id,
|
|
39
|
+
* const msadUserAccountControlMapper = new keycloak.ldap.MsadUserAccountControlMapper("msad_user_account_control_mapper", {
|
|
41
40
|
* realmId: realm.id,
|
|
41
|
+
* ldapUserFederationId: ldapUserFederation.id,
|
|
42
|
+
* name: "msad-user-account-control-mapper",
|
|
42
43
|
* });
|
|
43
44
|
* ```
|
|
44
|
-
* <!--End PulumiCodeChooser -->
|
|
45
45
|
*
|
|
46
46
|
* ### Argument Reference
|
|
47
47
|
*
|
|
@@ -18,36 +18,36 @@ const utilities = require("../utilities");
|
|
|
18
18
|
*
|
|
19
19
|
* ### Example Usage
|
|
20
20
|
*
|
|
21
|
-
* <!--Start PulumiCodeChooser -->
|
|
22
21
|
* ```typescript
|
|
23
22
|
* import * as pulumi from "@pulumi/pulumi";
|
|
24
23
|
* import * as keycloak from "@pulumi/keycloak";
|
|
25
24
|
*
|
|
26
25
|
* const realm = new keycloak.Realm("realm", {
|
|
27
|
-
* enabled: true,
|
|
28
26
|
* realm: "test",
|
|
27
|
+
* enabled: true,
|
|
29
28
|
* });
|
|
30
|
-
* const ldapUserFederation = new keycloak.ldap.UserFederation("
|
|
31
|
-
*
|
|
32
|
-
* bindDn: "cn=admin,dc=example,dc=org",
|
|
33
|
-
* connectionUrl: "ldap://my-ad-server",
|
|
34
|
-
* rdnLdapAttribute: "cn",
|
|
29
|
+
* const ldapUserFederation = new keycloak.ldap.UserFederation("ldap_user_federation", {
|
|
30
|
+
* name: "ad",
|
|
35
31
|
* realmId: realm.id,
|
|
32
|
+
* usernameLdapAttribute: "cn",
|
|
33
|
+
* rdnLdapAttribute: "cn",
|
|
34
|
+
* uuidLdapAttribute: "objectGUID",
|
|
36
35
|
* userObjectClasses: [
|
|
37
36
|
* "person",
|
|
38
37
|
* "organizationalPerson",
|
|
39
38
|
* "user",
|
|
40
39
|
* ],
|
|
41
|
-
*
|
|
40
|
+
* connectionUrl: "ldap://my-ad-server",
|
|
42
41
|
* usersDn: "dc=example,dc=org",
|
|
43
|
-
*
|
|
42
|
+
* bindDn: "cn=admin,dc=example,dc=org",
|
|
43
|
+
* bindCredential: "admin",
|
|
44
44
|
* });
|
|
45
|
-
* const msadUserAccountControlMapper = new keycloak.ldap.MsadUserAccountControlMapper("
|
|
46
|
-
* ldapUserFederationId: ldapUserFederation.id,
|
|
45
|
+
* const msadUserAccountControlMapper = new keycloak.ldap.MsadUserAccountControlMapper("msad_user_account_control_mapper", {
|
|
47
46
|
* realmId: realm.id,
|
|
47
|
+
* ldapUserFederationId: ldapUserFederation.id,
|
|
48
|
+
* name: "msad-user-account-control-mapper",
|
|
48
49
|
* });
|
|
49
50
|
* ```
|
|
50
|
-
* <!--End PulumiCodeChooser -->
|
|
51
51
|
*
|
|
52
52
|
* ### Argument Reference
|
|
53
53
|
*
|
package/ldap/roleMapper.d.ts
CHANGED
|
@@ -6,7 +6,6 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
6
6
|
*
|
|
7
7
|
* ## Example Usage
|
|
8
8
|
*
|
|
9
|
-
* <!--Start PulumiCodeChooser -->
|
|
10
9
|
* ```typescript
|
|
11
10
|
* import * as pulumi from "@pulumi/pulumi";
|
|
12
11
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -15,7 +14,8 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
15
14
|
* realm: "my-realm",
|
|
16
15
|
* enabled: true,
|
|
17
16
|
* });
|
|
18
|
-
* const ldapUserFederation = new keycloak.ldap.UserFederation("
|
|
17
|
+
* const ldapUserFederation = new keycloak.ldap.UserFederation("ldap_user_federation", {
|
|
18
|
+
* name: "openldap",
|
|
19
19
|
* realmId: realm.id,
|
|
20
20
|
* usernameLdapAttribute: "cn",
|
|
21
21
|
* rdnLdapAttribute: "cn",
|
|
@@ -29,9 +29,10 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
29
29
|
* bindDn: "cn=admin,dc=example,dc=org",
|
|
30
30
|
* bindCredential: "admin",
|
|
31
31
|
* });
|
|
32
|
-
* const ldapRoleMapper = new keycloak.ldap.RoleMapper("
|
|
32
|
+
* const ldapRoleMapper = new keycloak.ldap.RoleMapper("ldap_role_mapper", {
|
|
33
33
|
* realmId: realm.id,
|
|
34
34
|
* ldapUserFederationId: ldapUserFederation.id,
|
|
35
|
+
* name: "role-mapper",
|
|
35
36
|
* ldapRolesDn: "dc=example,dc=org",
|
|
36
37
|
* roleNameLdapAttribute: "cn",
|
|
37
38
|
* roleObjectClasses: ["groupOfNames"],
|
|
@@ -42,7 +43,6 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
42
43
|
* memberofLdapAttribute: "memberOf",
|
|
43
44
|
* });
|
|
44
45
|
* ```
|
|
45
|
-
* <!--End PulumiCodeChooser -->
|
|
46
46
|
*
|
|
47
47
|
* ## Import
|
|
48
48
|
*
|
package/ldap/roleMapper.js
CHANGED
|
@@ -12,7 +12,6 @@ const utilities = require("../utilities");
|
|
|
12
12
|
*
|
|
13
13
|
* ## Example Usage
|
|
14
14
|
*
|
|
15
|
-
* <!--Start PulumiCodeChooser -->
|
|
16
15
|
* ```typescript
|
|
17
16
|
* import * as pulumi from "@pulumi/pulumi";
|
|
18
17
|
* import * as keycloak from "@pulumi/keycloak";
|
|
@@ -21,7 +20,8 @@ const utilities = require("../utilities");
|
|
|
21
20
|
* realm: "my-realm",
|
|
22
21
|
* enabled: true,
|
|
23
22
|
* });
|
|
24
|
-
* const ldapUserFederation = new keycloak.ldap.UserFederation("
|
|
23
|
+
* const ldapUserFederation = new keycloak.ldap.UserFederation("ldap_user_federation", {
|
|
24
|
+
* name: "openldap",
|
|
25
25
|
* realmId: realm.id,
|
|
26
26
|
* usernameLdapAttribute: "cn",
|
|
27
27
|
* rdnLdapAttribute: "cn",
|
|
@@ -35,9 +35,10 @@ const utilities = require("../utilities");
|
|
|
35
35
|
* bindDn: "cn=admin,dc=example,dc=org",
|
|
36
36
|
* bindCredential: "admin",
|
|
37
37
|
* });
|
|
38
|
-
* const ldapRoleMapper = new keycloak.ldap.RoleMapper("
|
|
38
|
+
* const ldapRoleMapper = new keycloak.ldap.RoleMapper("ldap_role_mapper", {
|
|
39
39
|
* realmId: realm.id,
|
|
40
40
|
* ldapUserFederationId: ldapUserFederation.id,
|
|
41
|
+
* name: "role-mapper",
|
|
41
42
|
* ldapRolesDn: "dc=example,dc=org",
|
|
42
43
|
* roleNameLdapAttribute: "cn",
|
|
43
44
|
* roleObjectClasses: ["groupOfNames"],
|
|
@@ -48,7 +49,6 @@ const utilities = require("../utilities");
|
|
|
48
49
|
* memberofLdapAttribute: "memberOf",
|
|
49
50
|
* });
|
|
50
51
|
* ```
|
|
51
|
-
* <!--End PulumiCodeChooser -->
|
|
52
52
|
*
|
|
53
53
|
* ## Import
|
|
54
54
|
*
|
|
@@ -10,37 +10,37 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
10
10
|
*
|
|
11
11
|
* ### Example Usage
|
|
12
12
|
*
|
|
13
|
-
* <!--Start PulumiCodeChooser -->
|
|
14
13
|
* ```typescript
|
|
15
14
|
* import * as pulumi from "@pulumi/pulumi";
|
|
16
15
|
* import * as keycloak from "@pulumi/keycloak";
|
|
17
16
|
*
|
|
18
17
|
* const realm = new keycloak.Realm("realm", {
|
|
19
|
-
* enabled: true,
|
|
20
18
|
* realm: "test",
|
|
19
|
+
* enabled: true,
|
|
21
20
|
* });
|
|
22
|
-
* const ldapUserFederation = new keycloak.ldap.UserFederation("
|
|
23
|
-
*
|
|
24
|
-
* bindDn: "cn=admin,dc=example,dc=org",
|
|
25
|
-
* connectionUrl: "ldap://openldap",
|
|
26
|
-
* rdnLdapAttribute: "cn",
|
|
21
|
+
* const ldapUserFederation = new keycloak.ldap.UserFederation("ldap_user_federation", {
|
|
22
|
+
* name: "openldap",
|
|
27
23
|
* realmId: realm.id,
|
|
24
|
+
* usernameLdapAttribute: "cn",
|
|
25
|
+
* rdnLdapAttribute: "cn",
|
|
26
|
+
* uuidLdapAttribute: "entryDN",
|
|
28
27
|
* userObjectClasses: [
|
|
29
28
|
* "simpleSecurityObject",
|
|
30
29
|
* "organizationalRole",
|
|
31
30
|
* ],
|
|
32
|
-
*
|
|
31
|
+
* connectionUrl: "ldap://openldap",
|
|
33
32
|
* usersDn: "dc=example,dc=org",
|
|
34
|
-
*
|
|
33
|
+
* bindDn: "cn=admin,dc=example,dc=org",
|
|
34
|
+
* bindCredential: "admin",
|
|
35
35
|
* });
|
|
36
|
-
* const ldapUserAttributeMapper = new keycloak.ldap.UserAttributeMapper("
|
|
37
|
-
* ldapAttribute: "bar",
|
|
38
|
-
* ldapUserFederationId: ldapUserFederation.id,
|
|
36
|
+
* const ldapUserAttributeMapper = new keycloak.ldap.UserAttributeMapper("ldap_user_attribute_mapper", {
|
|
39
37
|
* realmId: realm.id,
|
|
38
|
+
* ldapUserFederationId: ldapUserFederation.id,
|
|
39
|
+
* name: "user-attribute-mapper",
|
|
40
40
|
* userModelAttribute: "foo",
|
|
41
|
+
* ldapAttribute: "bar",
|
|
41
42
|
* });
|
|
42
43
|
* ```
|
|
43
|
-
* <!--End PulumiCodeChooser -->
|
|
44
44
|
*
|
|
45
45
|
* ### Argument Reference
|
|
46
46
|
*
|
|
@@ -82,7 +82,7 @@ export declare class UserAttributeMapper extends pulumi.CustomResource {
|
|
|
82
82
|
*/
|
|
83
83
|
readonly alwaysReadValueFromLdap: pulumi.Output<boolean | undefined>;
|
|
84
84
|
/**
|
|
85
|
-
* Default value to set in LDAP if
|
|
85
|
+
* Default value to set in LDAP if isMandatoryInLdap and the value is empty
|
|
86
86
|
*/
|
|
87
87
|
readonly attributeDefaultValue: pulumi.Output<string | undefined>;
|
|
88
88
|
/**
|
|
@@ -135,7 +135,7 @@ export interface UserAttributeMapperState {
|
|
|
135
135
|
*/
|
|
136
136
|
alwaysReadValueFromLdap?: pulumi.Input<boolean>;
|
|
137
137
|
/**
|
|
138
|
-
* Default value to set in LDAP if
|
|
138
|
+
* Default value to set in LDAP if isMandatoryInLdap and the value is empty
|
|
139
139
|
*/
|
|
140
140
|
attributeDefaultValue?: pulumi.Input<string>;
|
|
141
141
|
/**
|
|
@@ -180,7 +180,7 @@ export interface UserAttributeMapperArgs {
|
|
|
180
180
|
*/
|
|
181
181
|
alwaysReadValueFromLdap?: pulumi.Input<boolean>;
|
|
182
182
|
/**
|
|
183
|
-
* Default value to set in LDAP if
|
|
183
|
+
* Default value to set in LDAP if isMandatoryInLdap and the value is empty
|
|
184
184
|
*/
|
|
185
185
|
attributeDefaultValue?: pulumi.Input<string>;
|
|
186
186
|
/**
|
|
@@ -16,37 +16,37 @@ const utilities = require("../utilities");
|
|
|
16
16
|
*
|
|
17
17
|
* ### Example Usage
|
|
18
18
|
*
|
|
19
|
-
* <!--Start PulumiCodeChooser -->
|
|
20
19
|
* ```typescript
|
|
21
20
|
* import * as pulumi from "@pulumi/pulumi";
|
|
22
21
|
* import * as keycloak from "@pulumi/keycloak";
|
|
23
22
|
*
|
|
24
23
|
* const realm = new keycloak.Realm("realm", {
|
|
25
|
-
* enabled: true,
|
|
26
24
|
* realm: "test",
|
|
25
|
+
* enabled: true,
|
|
27
26
|
* });
|
|
28
|
-
* const ldapUserFederation = new keycloak.ldap.UserFederation("
|
|
29
|
-
*
|
|
30
|
-
* bindDn: "cn=admin,dc=example,dc=org",
|
|
31
|
-
* connectionUrl: "ldap://openldap",
|
|
32
|
-
* rdnLdapAttribute: "cn",
|
|
27
|
+
* const ldapUserFederation = new keycloak.ldap.UserFederation("ldap_user_federation", {
|
|
28
|
+
* name: "openldap",
|
|
33
29
|
* realmId: realm.id,
|
|
30
|
+
* usernameLdapAttribute: "cn",
|
|
31
|
+
* rdnLdapAttribute: "cn",
|
|
32
|
+
* uuidLdapAttribute: "entryDN",
|
|
34
33
|
* userObjectClasses: [
|
|
35
34
|
* "simpleSecurityObject",
|
|
36
35
|
* "organizationalRole",
|
|
37
36
|
* ],
|
|
38
|
-
*
|
|
37
|
+
* connectionUrl: "ldap://openldap",
|
|
39
38
|
* usersDn: "dc=example,dc=org",
|
|
40
|
-
*
|
|
39
|
+
* bindDn: "cn=admin,dc=example,dc=org",
|
|
40
|
+
* bindCredential: "admin",
|
|
41
41
|
* });
|
|
42
|
-
* const ldapUserAttributeMapper = new keycloak.ldap.UserAttributeMapper("
|
|
43
|
-
* ldapAttribute: "bar",
|
|
44
|
-
* ldapUserFederationId: ldapUserFederation.id,
|
|
42
|
+
* const ldapUserAttributeMapper = new keycloak.ldap.UserAttributeMapper("ldap_user_attribute_mapper", {
|
|
45
43
|
* realmId: realm.id,
|
|
44
|
+
* ldapUserFederationId: ldapUserFederation.id,
|
|
45
|
+
* name: "user-attribute-mapper",
|
|
46
46
|
* userModelAttribute: "foo",
|
|
47
|
+
* ldapAttribute: "bar",
|
|
47
48
|
* });
|
|
48
49
|
* ```
|
|
49
|
-
* <!--End PulumiCodeChooser -->
|
|
50
50
|
*
|
|
51
51
|
* ### Argument Reference
|
|
52
52
|
*
|