@pulumi/keycloak 6.13.0-alpha.1785480702 → 6.13.0

package/config/vars.d.ts

@@ -33,6 +33,10 @@ export declare const jwtToken: string | undefined;
  * A path to a file containing a signed JWT token used for client authentication.
  */
 export declare const jwtTokenFile: string | undefined;
+/**
+ * The Keycloak version to assume when the server does not report it via the /admin/serverinfo endpoint. Useful on Keycloak 26.4+ when the service account lacks the view-system (or, since 26.5.4, manage-realms) role. Example: "26.4.7".
+ */
+export declare const keycloakVersion: string | undefined;
 export declare const password: string | undefined;
 export declare const realm: string | undefined;
 /**

package/config/vars.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vars.d.ts","sourceRoot":"","sources":["../../config/vars.ts"],"names":[],"mappings":"AASA,MAAM,CAAC,OAAO,CAAC,MAAM,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;AAQrD,MAAM,CAAC,OAAO,CAAC,MAAM,iBAAiB,EAAE;IAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;CAAC,GAAG,SAAS,CAAC;AAQ5E;;GAEG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;AAQlD,MAAM,CAAC,OAAO,CAAC,MAAM,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;AAQlD,MAAM,CAAC,OAAO,CAAC,MAAM,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;AAQlD,MAAM,CAAC,OAAO,CAAC,MAAM,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;AAQtD;;GAEG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,aAAa,EAAE,MAAM,CAAC;AAQ3C;;GAEG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,YAAY,EAAE,OAAO,GAAG,SAAS,CAAC;AAQvD;;GAEG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;AAQvD;;GAEG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;AAQvD;;GAEG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;AAQlD;;GAEG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;AAQtD,MAAM,CAAC,OAAO,CAAC,MAAM,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;AAQlD,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;AAQ/C;;GAEG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,SAAS,EAAE,OAAO,GAAG,SAAS,CAAC;AAQpD;;GAEG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;AAQ3D;;GAEG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAAC;AAQ9D;;GAEG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,mBAAmB,EAAE,MAAM,GAAG,SAAS,CAAC;AAQ7D;;GAEG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,qBAAqB,EAAE,OAAO,GAAG,SAAS,CAAC;AAQhE;;GAEG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;AAQ7C,MAAM,CAAC,OAAO,CAAC,MAAM,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC"}
+{"version":3,"file":"vars.d.ts","sourceRoot":"","sources":["../../config/vars.ts"],"names":[],"mappings":"AASA,MAAM,CAAC,OAAO,CAAC,MAAM,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;AAQrD,MAAM,CAAC,OAAO,CAAC,MAAM,iBAAiB,EAAE;IAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;CAAC,GAAG,SAAS,CAAC;AAQ5E;;GAEG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;AAQlD,MAAM,CAAC,OAAO,CAAC,MAAM,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;AAQlD,MAAM,CAAC,OAAO,CAAC,MAAM,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;AAQlD,MAAM,CAAC,OAAO,CAAC,MAAM,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;AAQtD;;GAEG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,aAAa,EAAE,MAAM,CAAC;AAQ3C;;GAEG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,YAAY,EAAE,OAAO,GAAG,SAAS,CAAC;AAQvD;;GAEG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;AAQvD;;GAEG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;AAQvD;;GAEG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;AAQlD;;GAEG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;AAQtD;;GAEG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;AAQzD,MAAM,CAAC,OAAO,CAAC,MAAM,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;AAQlD,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;AAQ/C;;GAEG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,SAAS,EAAE,OAAO,GAAG,SAAS,CAAC;AAQpD;;GAEG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;AAQ3D;;GAEG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAAC;AAQ9D;;GAEG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,mBAAmB,EAAE,MAAM,GAAG,SAAS,CAAC;AAQ7D;;GAEG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,qBAAqB,EAAE,OAAO,GAAG,SAAS,CAAC;AAQhE;;GAEG;AACH,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;AAQ7C,MAAM,CAAC,OAAO,CAAC,MAAM,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC"}

package/config/vars.js

@@ -100,6 +100,12 @@ Object.defineProperty(exports, "jwtTokenFile", {
     },
     enumerable: true,
 });
+Object.defineProperty(exports, "keycloakVersion", {
+    get() {
+        return __config.get("keycloakVersion");
+    },
+    enumerable: true,
+});
 Object.defineProperty(exports, "password", {
     get() {
         return __config.get("password");

package/config/vars.js.map

@@ -1 +1 @@
-{"version":3,"file":"vars.js","sourceRoot":"","sources":["../../config/vars.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,wDAA0C;AAG1C,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AAG/C,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,EAAE;IAC1C,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACvC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAGH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,mBAAmB,EAAE;IAChD,GAAG;QACC,OAAO,QAAQ,CAAC,SAAS,CAA0B,mBAAmB,CAAC,CAAC;IAC5E,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE;IACvC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAGH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE;IACvC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAGH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE;IACvC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAGH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE;IAC3C,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACxC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,eAAe,EAAE;IAC5C,GAAG;QACC,OAAO,QAAQ,CAAC,SAAS,CAAS,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC;IACnH,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE;IAC3C,GAAG;QACC,OAAO,QAAQ,CAAC,SAAS,CAAU,cAAc,CAAC,CAAC;IACvD,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,eAAe,EAAE;IAC5C,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACzC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,eAAe,EAAE;IAC5C,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACzC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE;IACvC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE;IAC3C,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACxC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAGH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE;IACvC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAGH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE;IACpC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE;IACxC,GAAG;QACC,OAAO,QAAQ,CAAC,SAAS,CAAU,WAAW,CAAC,CAAC;IACpD,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,mBAAmB,EAAE;IAChD,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC7C,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,sBAAsB,EAAE;IACnD,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAChD,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,qBAAqB,EAAE;IAClD,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC/C,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,uBAAuB,EAAE;IACpD,GAAG;QACC,OAAO,QAAQ,CAAC,SAAS,CAAU,uBAAuB,CAAC,CAAC;IAChE,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE;IAClC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAGH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE;IACvC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC"}
+{"version":3,"file":"vars.js","sourceRoot":"","sources":["../../config/vars.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,wDAA0C;AAG1C,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AAG/C,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,EAAE;IAC1C,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACvC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAGH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,mBAAmB,EAAE;IAChD,GAAG;QACC,OAAO,QAAQ,CAAC,SAAS,CAA0B,mBAAmB,CAAC,CAAC;IAC5E,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE;IACvC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAGH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE;IACvC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAGH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE;IACvC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAGH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE;IAC3C,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACxC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,eAAe,EAAE;IAC5C,GAAG;QACC,OAAO,QAAQ,CAAC,SAAS,CAAS,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC;IACnH,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE;IAC3C,GAAG;QACC,OAAO,QAAQ,CAAC,SAAS,CAAU,cAAc,CAAC,CAAC;IACvD,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,eAAe,EAAE;IAC5C,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACzC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,eAAe,EAAE;IAC5C,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACzC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE;IACvC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE;IAC3C,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACxC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,iBAAiB,EAAE;IAC9C,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC3C,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAGH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE;IACvC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAGH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE;IACpC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE;IACxC,GAAG;QACC,OAAO,QAAQ,CAAC,SAAS,CAAU,WAAW,CAAC,CAAC;IACpD,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,mBAAmB,EAAE;IAChD,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC7C,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,sBAAsB,EAAE;IACnD,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAChD,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,qBAAqB,EAAE;IAClD,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC/C,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,uBAAuB,EAAE;IACpD,GAAG;QACC,OAAO,QAAQ,CAAC,SAAS,CAAU,uBAAuB,CAAC,CAAC;IAChE,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAMH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE;IAClC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC;AAGH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE;IACvC,GAAG;QACC,OAAO,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IACD,UAAU,EAAE,IAAI;CACnB,CAAC,CAAC"}

package/customUserFederation.d.ts

@@ -62,7 +62,7 @@ export declare class CustomUserFederation extends pulumi.CustomResource {
      */
     readonly changedSyncPeriod: pulumi.Output<number | undefined>;
     /**
-     * The provider configuration handed over to your custom user federation provider. In order to add multivalued settings, use `##` to separate the values.
+     * The provider configuration handed over to your custom user federation provider. To give a setting more than one value, join the values with `##`; each value is stored separately in Keycloak.
      */
     readonly config: pulumi.Output<{
         [key: string]: string;
@@ -117,7 +117,7 @@ export interface CustomUserFederationState {
      */
     changedSyncPeriod?: pulumi.Input<number | undefined>;
     /**
-     * The provider configuration handed over to your custom user federation provider. In order to add multivalued settings, use `##` to separate the values.
+     * The provider configuration handed over to your custom user federation provider. To give a setting more than one value, join the values with `##`; each value is stored separately in Keycloak.
      */
     config?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;
@@ -164,7 +164,7 @@ export interface CustomUserFederationArgs {
      */
     changedSyncPeriod?: pulumi.Input<number | undefined>;
     /**
-     * The provider configuration handed over to your custom user federation provider. In order to add multivalued settings, use `##` to separate the values.
+     * The provider configuration handed over to your custom user federation provider. To give a setting more than one value, join the values with `##`; each value is stored separately in Keycloak.
      */
     config?: pulumi.Input<{
         [key: string]: pulumi.Input<string>;

package/genericClientAuthorizationPolicy.d.ts

@@ -0,0 +1,207 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Allows you to manage a Keycloak client authorization policy of any provider type by referencing that
+ * provider by its `type`. This is the policy equivalent of `keycloak.GenericRoleMapper` /
+ * `keycloak.GenericProtocolMapper`: it works with any policy provider registered in Keycloak, including
+ * custom providers you implement yourself.
+ *
+ * This is intended for custom policy providers that are deployed to Keycloak as a JAR. The `type` is simply
+ * the provider id that the policy's
+ * [`PolicyProviderFactory`](https://www.keycloak.org/docs-api/latest/javadocs/org/keycloak/authorization/policy/provider/PolicyProviderFactory.html)
+ * exposes via `getId()`:
+ *
+ * - For a policy implemented in Java as an SPI, `type` is whatever your `PolicyProviderFactory.getId()` returns.
+ * - For a [JavaScript policy](https://www.keycloak.org/docs/latest/authorization_services/index.html#_policy_js)
+ *   deployed as a script (in a JAR with a `META-INF/keycloak-scripts.json` descriptor), Keycloak generates the
+ *   provider id for you as `script-` followed by the `fileName` from the descriptor (if the `fileName`
+ *   contains a path, it is kept). The `script-` prefix is an implementation detail of the scripting SPI, not a
+ *   requirement of this resource. For example, `"fileName": "my-policy.js"` is referenced as
+ *   `type = "script-my-policy.js"`.
+ *   (Modern Keycloak no longer allows uploading the JavaScript code through the API, so the script must be
+ *   deployed alongside Keycloak and only referenced here.)
+ *
+ * For the policy types that ship with Keycloak (role, group, user, client, time, regex, ...) prefer the
+ * dedicated resources, e.g. `keycloak.openid.ClientRolePolicy`.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as keycloak from "@pulumi/keycloak";
+ *
+ * const realm = new keycloak.Realm("realm", {
+ *     realm: "my-realm",
+ *     enabled: true,
+ * });
+ * const test = new keycloak.openid.Client("test", {
+ *     clientId: "client_id",
+ *     realmId: realm.id,
+ *     accessType: "CONFIDENTIAL",
+ *     serviceAccountsEnabled: true,
+ *     authorization: {
+ *         policyEnforcementMode: "ENFORCING",
+ *     },
+ * });
+ * // References a custom policy provider implemented in Java and deployed as a JAR.
+ * // "type" is the id returned by your PolicyProviderFactory.getId().
+ * const custom = new keycloak.GenericClientAuthorizationPolicy("custom", {
+ *     resourceServerId: test.resourceServerId,
+ *     realmId: realm.id,
+ *     name: "my-custom-policy",
+ *     type: "my-custom-policy-provider",
+ *     decisionStrategy: "UNANIMOUS",
+ *     logic: "POSITIVE",
+ *     description: "Authorization policy backed by a custom Java SPI provider",
+ * });
+ * // References a JavaScript policy deployed as a script. Here Keycloak generates the
+ * // type as "script-" + the fileName from META-INF/keycloak-scripts.json.
+ * const deployedJs = new keycloak.GenericClientAuthorizationPolicy("deployed_js", {
+ *     resourceServerId: test.resourceServerId,
+ *     realmId: realm.id,
+ *     name: "deployed-js-policy",
+ *     type: "script-my-policy.js",
+ *     decisionStrategy: "UNANIMOUS",
+ *     logic: "POSITIVE",
+ *     description: "Authorization policy backed by a deployed JavaScript script",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * This resource can be imported using the format: `{{realmId}}/{{resourceServerId}}/{{policyId}}`.
+ *
+ * Example:
+ *
+ * ```sh
+ * $ pulumi import keycloak:index/genericClientAuthorizationPolicy:GenericClientAuthorizationPolicy deployed_js my-realm/3bd4a686-1062-4b59-97b8-e4e3f10b99da/63b3cde8-987d-4cd9-9306-1955579281d9
+ * ```
+ */
+export declare class GenericClientAuthorizationPolicy extends pulumi.CustomResource {
+    /**
+     * Get an existing GenericClientAuthorizationPolicy resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: GenericClientAuthorizationPolicyState, opts?: pulumi.CustomResourceOptions): GenericClientAuthorizationPolicy;
+    /**
+     * Returns true if the given object is an instance of GenericClientAuthorizationPolicy.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is GenericClientAuthorizationPolicy;
+    /**
+     * The decision strategy, can be one of `UNANIMOUS`, `AFFIRMATIVE`, or `CONSENSUS`.
+     */
+    readonly decisionStrategy: pulumi.Output<string>;
+    /**
+     * A description for the authorization policy.
+     */
+    readonly description: pulumi.Output<string | undefined>;
+    /**
+     * The logic, can be one of `POSITIVE` or `NEGATIVE`. Defaults to `POSITIVE`.
+     */
+    readonly logic: pulumi.Output<string | undefined>;
+    /**
+     * The name of the policy.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * The realm this policy exists in.
+     */
+    readonly realmId: pulumi.Output<string>;
+    /**
+     * The ID of the resource server this policy is attached to.
+     */
+    readonly resourceServerId: pulumi.Output<string>;
+    /**
+     * The provider type of the policy, i.e. the id returned by the policy's
+     * `PolicyProviderFactory.getId()`. For a custom Java SPI this is whatever id your factory exposes; for a
+     * JavaScript policy deployed as a script it is `script-` followed by the `fileName` declared in
+     * `META-INF/keycloak-scripts.json`, e.g. `script-my-policy.js`.
+     */
+    readonly type: pulumi.Output<string>;
+    /**
+     * Create a GenericClientAuthorizationPolicy resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: GenericClientAuthorizationPolicyArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering GenericClientAuthorizationPolicy resources.
+ */
+export interface GenericClientAuthorizationPolicyState {
+    /**
+     * The decision strategy, can be one of `UNANIMOUS`, `AFFIRMATIVE`, or `CONSENSUS`.
+     */
+    decisionStrategy?: pulumi.Input<string | undefined>;
+    /**
+     * A description for the authorization policy.
+     */
+    description?: pulumi.Input<string | undefined>;
+    /**
+     * The logic, can be one of `POSITIVE` or `NEGATIVE`. Defaults to `POSITIVE`.
+     */
+    logic?: pulumi.Input<string | undefined>;
+    /**
+     * The name of the policy.
+     */
+    name?: pulumi.Input<string | undefined>;
+    /**
+     * The realm this policy exists in.
+     */
+    realmId?: pulumi.Input<string | undefined>;
+    /**
+     * The ID of the resource server this policy is attached to.
+     */
+    resourceServerId?: pulumi.Input<string | undefined>;
+    /**
+     * The provider type of the policy, i.e. the id returned by the policy's
+     * `PolicyProviderFactory.getId()`. For a custom Java SPI this is whatever id your factory exposes; for a
+     * JavaScript policy deployed as a script it is `script-` followed by the `fileName` declared in
+     * `META-INF/keycloak-scripts.json`, e.g. `script-my-policy.js`.
+     */
+    type?: pulumi.Input<string | undefined>;
+}
+/**
+ * The set of arguments for constructing a GenericClientAuthorizationPolicy resource.
+ */
+export interface GenericClientAuthorizationPolicyArgs {
+    /**
+     * The decision strategy, can be one of `UNANIMOUS`, `AFFIRMATIVE`, or `CONSENSUS`.
+     */
+    decisionStrategy: pulumi.Input<string>;
+    /**
+     * A description for the authorization policy.
+     */
+    description?: pulumi.Input<string | undefined>;
+    /**
+     * The logic, can be one of `POSITIVE` or `NEGATIVE`. Defaults to `POSITIVE`.
+     */
+    logic?: pulumi.Input<string | undefined>;
+    /**
+     * The name of the policy.
+     */
+    name?: pulumi.Input<string | undefined>;
+    /**
+     * The realm this policy exists in.
+     */
+    realmId: pulumi.Input<string>;
+    /**
+     * The ID of the resource server this policy is attached to.
+     */
+    resourceServerId: pulumi.Input<string>;
+    /**
+     * The provider type of the policy, i.e. the id returned by the policy's
+     * `PolicyProviderFactory.getId()`. For a custom Java SPI this is whatever id your factory exposes; for a
+     * JavaScript policy deployed as a script it is `script-` followed by the `fileName` declared in
+     * `META-INF/keycloak-scripts.json`, e.g. `script-my-policy.js`.
+     */
+    type: pulumi.Input<string>;
+}
+//# sourceMappingURL=genericClientAuthorizationPolicy.d.ts.map

package/genericClientAuthorizationPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"genericClientAuthorizationPolicy.d.ts","sourceRoot":"","sources":["../genericClientAuthorizationPolicy.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4EG;AACH,qBAAa,gCAAiC,SAAQ,MAAM,CAAC,cAAc;IACvE;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,qCAAqC,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,gCAAgC;IAOlL;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,gCAAgC;IAO3E;;OAEG;IACH,SAAwB,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChE;;OAEG;IACH,SAAwB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACvE;;OAEG;IACH,SAAwB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD;;OAEG;IACH,SAAwB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvD;;OAEG;IACH,SAAwB,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChE;;;;;OAKG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEpD;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oCAAoC,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAsC5G;AAED;;GAEG;AACH,MAAM,WAAW,qCAAqC;IAClD;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACpD;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3C;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACpD;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,oCAAoC;IACjD;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACvC;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACvC;;;;;OAKG;IACH,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAC9B"}

package/genericClientAuthorizationPolicy.js

@@ -0,0 +1,173 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GenericClientAuthorizationPolicy = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const utilities = __importStar(require("./utilities"));
+/**
+ * Allows you to manage a Keycloak client authorization policy of any provider type by referencing that
+ * provider by its `type`. This is the policy equivalent of `keycloak.GenericRoleMapper` /
+ * `keycloak.GenericProtocolMapper`: it works with any policy provider registered in Keycloak, including
+ * custom providers you implement yourself.
+ *
+ * This is intended for custom policy providers that are deployed to Keycloak as a JAR. The `type` is simply
+ * the provider id that the policy's
+ * [`PolicyProviderFactory`](https://www.keycloak.org/docs-api/latest/javadocs/org/keycloak/authorization/policy/provider/PolicyProviderFactory.html)
+ * exposes via `getId()`:
+ *
+ * - For a policy implemented in Java as an SPI, `type` is whatever your `PolicyProviderFactory.getId()` returns.
+ * - For a [JavaScript policy](https://www.keycloak.org/docs/latest/authorization_services/index.html#_policy_js)
+ *   deployed as a script (in a JAR with a `META-INF/keycloak-scripts.json` descriptor), Keycloak generates the
+ *   provider id for you as `script-` followed by the `fileName` from the descriptor (if the `fileName`
+ *   contains a path, it is kept). The `script-` prefix is an implementation detail of the scripting SPI, not a
+ *   requirement of this resource. For example, `"fileName": "my-policy.js"` is referenced as
+ *   `type = "script-my-policy.js"`.
+ *   (Modern Keycloak no longer allows uploading the JavaScript code through the API, so the script must be
+ *   deployed alongside Keycloak and only referenced here.)
+ *
+ * For the policy types that ship with Keycloak (role, group, user, client, time, regex, ...) prefer the
+ * dedicated resources, e.g. `keycloak.openid.ClientRolePolicy`.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as keycloak from "@pulumi/keycloak";
+ *
+ * const realm = new keycloak.Realm("realm", {
+ *     realm: "my-realm",
+ *     enabled: true,
+ * });
+ * const test = new keycloak.openid.Client("test", {
+ *     clientId: "client_id",
+ *     realmId: realm.id,
+ *     accessType: "CONFIDENTIAL",
+ *     serviceAccountsEnabled: true,
+ *     authorization: {
+ *         policyEnforcementMode: "ENFORCING",
+ *     },
+ * });
+ * // References a custom policy provider implemented in Java and deployed as a JAR.
+ * // "type" is the id returned by your PolicyProviderFactory.getId().
+ * const custom = new keycloak.GenericClientAuthorizationPolicy("custom", {
+ *     resourceServerId: test.resourceServerId,
+ *     realmId: realm.id,
+ *     name: "my-custom-policy",
+ *     type: "my-custom-policy-provider",
+ *     decisionStrategy: "UNANIMOUS",
+ *     logic: "POSITIVE",
+ *     description: "Authorization policy backed by a custom Java SPI provider",
+ * });
+ * // References a JavaScript policy deployed as a script. Here Keycloak generates the
+ * // type as "script-" + the fileName from META-INF/keycloak-scripts.json.
+ * const deployedJs = new keycloak.GenericClientAuthorizationPolicy("deployed_js", {
+ *     resourceServerId: test.resourceServerId,
+ *     realmId: realm.id,
+ *     name: "deployed-js-policy",
+ *     type: "script-my-policy.js",
+ *     decisionStrategy: "UNANIMOUS",
+ *     logic: "POSITIVE",
+ *     description: "Authorization policy backed by a deployed JavaScript script",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * This resource can be imported using the format: `{{realmId}}/{{resourceServerId}}/{{policyId}}`.
+ *
+ * Example:
+ *
+ * ```sh
+ * $ pulumi import keycloak:index/genericClientAuthorizationPolicy:GenericClientAuthorizationPolicy deployed_js my-realm/3bd4a686-1062-4b59-97b8-e4e3f10b99da/63b3cde8-987d-4cd9-9306-1955579281d9
+ * ```
+ */
+class GenericClientAuthorizationPolicy extends pulumi.CustomResource {
+    /**
+     * Get an existing GenericClientAuthorizationPolicy resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new GenericClientAuthorizationPolicy(name, state, { ...opts, id: id });
+    }
+    /** @internal */
+    static __pulumiType = 'keycloak:index/genericClientAuthorizationPolicy:GenericClientAuthorizationPolicy';
+    /**
+     * Returns true if the given object is an instance of GenericClientAuthorizationPolicy.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === GenericClientAuthorizationPolicy.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["decisionStrategy"] = state?.decisionStrategy;
+            resourceInputs["description"] = state?.description;
+            resourceInputs["logic"] = state?.logic;
+            resourceInputs["name"] = state?.name;
+            resourceInputs["realmId"] = state?.realmId;
+            resourceInputs["resourceServerId"] = state?.resourceServerId;
+            resourceInputs["type"] = state?.type;
+        }
+        else {
+            const args = argsOrState;
+            if (args?.decisionStrategy === undefined && !opts.urn) {
+                throw new Error("Missing required property 'decisionStrategy'");
+            }
+            if (args?.realmId === undefined && !opts.urn) {
+                throw new Error("Missing required property 'realmId'");
+            }
+            if (args?.resourceServerId === undefined && !opts.urn) {
+                throw new Error("Missing required property 'resourceServerId'");
+            }
+            if (args?.type === undefined && !opts.urn) {
+                throw new Error("Missing required property 'type'");
+            }
+            resourceInputs["decisionStrategy"] = args?.decisionStrategy;
+            resourceInputs["description"] = args?.description;
+            resourceInputs["logic"] = args?.logic;
+            resourceInputs["name"] = args?.name;
+            resourceInputs["realmId"] = args?.realmId;
+            resourceInputs["resourceServerId"] = args?.resourceServerId;
+            resourceInputs["type"] = args?.type;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(GenericClientAuthorizationPolicy.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.GenericClientAuthorizationPolicy = GenericClientAuthorizationPolicy;
+//# sourceMappingURL=genericClientAuthorizationPolicy.js.map

package/genericClientAuthorizationPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"genericClientAuthorizationPolicy.js","sourceRoot":"","sources":["../genericClientAuthorizationPolicy.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,uDAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4EG;AACH,MAAa,gCAAiC,SAAQ,MAAM,CAAC,cAAc;IACvE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA6C,EAAE,IAAmC;QAC3I,OAAO,IAAI,gCAAgC,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,kFAAkF,CAAC;IAEzH;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,gCAAgC,CAAC,YAAY,CAAC;IACjF,CAAC;IA0CD,YAAY,IAAY,EAAE,WAA0F,EAAE,IAAmC;QACrJ,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAgE,CAAC;YAC/E,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;SACxC;aAAM;YACH,MAAM,IAAI,GAAG,WAA+D,CAAC;YAC7E,IAAI,IAAI,EAAE,gBAAgB,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;aACnE;YACD,IAAI,IAAI,EAAE,OAAO,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,IAAI,IAAI,EAAE,gBAAgB,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;aACnE;YACD,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;SACvC;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,gCAAgC,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACrF,CAAC;;AAxGL,4EAyGC"}

package/getGroup.d.ts

@@ -26,6 +26,20 @@ import * as pulumi from "@pulumi/pulumi";
  *     groupId: group.apply(group => group.id),
  *     roleIds: [offlineAccess.apply(offlineAccess => offlineAccess.id)],
  * });
+ * // Using group_path to look up nested groups by their full path
+ * const superAdmin = keycloak.getRoleOutput({
+ *     realmId: realm.id,
+ *     name: "super_admin",
+ * });
+ * const admins = keycloak.getGroupOutput({
+ *     realmId: realm.id,
+ *     groupPath: "/Administration/Full Admins",
+ * });
+ * const adminsRoles = new keycloak.GroupRoles("admins_roles", {
+ *     realmId: realm.id,
+ *     groupId: admins.apply(admins => admins.id),
+ *     roleIds: [superAdmin.apply(superAdmin => superAdmin.id)],
+ * });
  * ```
  *
  * Organization groups can be looked up by setting `organizationId`. Organization groups require Keycloak 26.6.0 or later.
@@ -48,9 +62,13 @@ export declare function getGroup(args: GetGroupArgs, opts?: pulumi.InvokeOptions
 export interface GetGroupArgs {
     description?: string;
     /**
-     * The name of the group. If there are multiple groups match `name`, the first result will be returned.
+     * The full path of the group (e.g. `"/parent/child/subgroup"`). Mutually exclusive with `name`. This uses the Keycloak `/group-by-path` endpoint for a precise lookup.
+     */
+    groupPath?: string;
+    /**
+     * The name of the group. Mutually exclusive with `groupPath`. If there are multiple groups matching `name`, the first result is returned.
      */
-    name: string;
+    name?: string;
     /**
      * The organization this group exists within. If omitted, the data source looks up realm groups.
      */
@@ -68,11 +86,12 @@ export interface GetGroupResult {
         [key: string]: string;
     };
     readonly description?: string;
+    readonly groupPath?: string;
     /**
      * The provider-assigned unique ID for this managed resource.
      */
     readonly id: string;
-    readonly name: string;
+    readonly name?: string;
     readonly organizationId?: string;
     readonly parentId: string;
     readonly path: string;
@@ -105,6 +124,20 @@ export interface GetGroupResult {
  *     groupId: group.apply(group => group.id),
  *     roleIds: [offlineAccess.apply(offlineAccess => offlineAccess.id)],
  * });
+ * // Using group_path to look up nested groups by their full path
+ * const superAdmin = keycloak.getRoleOutput({
+ *     realmId: realm.id,
+ *     name: "super_admin",
+ * });
+ * const admins = keycloak.getGroupOutput({
+ *     realmId: realm.id,
+ *     groupPath: "/Administration/Full Admins",
+ * });
+ * const adminsRoles = new keycloak.GroupRoles("admins_roles", {
+ *     realmId: realm.id,
+ *     groupId: admins.apply(admins => admins.id),
+ *     roleIds: [superAdmin.apply(superAdmin => superAdmin.id)],
+ * });
  * ```
  *
  * Organization groups can be looked up by setting `organizationId`. Organization groups require Keycloak 26.6.0 or later.
@@ -127,9 +160,13 @@ export declare function getGroupOutput(args: GetGroupOutputArgs, opts?: pulumi.I
 export interface GetGroupOutputArgs {
     description?: pulumi.Input<string | undefined>;
     /**
-     * The name of the group. If there are multiple groups match `name`, the first result will be returned.
+     * The full path of the group (e.g. `"/parent/child/subgroup"`). Mutually exclusive with `name`. This uses the Keycloak `/group-by-path` endpoint for a precise lookup.
+     */
+    groupPath?: pulumi.Input<string | undefined>;
+    /**
+     * The name of the group. Mutually exclusive with `groupPath`. If there are multiple groups matching `name`, the first result is returned.
      */
-    name: pulumi.Input<string>;
+    name?: pulumi.Input<string | undefined>;
     /**
      * The organization this group exists within. If omitted, the data source looks up realm groups.
      */

package/getGroup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getGroup.d.ts","sourceRoot":"","sources":["../getGroup.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CAQjG;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC3B,QAAQ,CAAC,UAAU,EAAE;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAC,CAAC;IAC7C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;OAEG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC5B;AACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,kBAAkB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAQzH;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClD;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CACjC"}
+{"version":3,"file":"getGroup.d.ts","sourceRoot":"","sources":["../getGroup.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CASjG;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC3B,QAAQ,CAAC,UAAU,EAAE;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAC,CAAC;IAC7C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;OAEG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC5B;AACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,kBAAkB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CASzH;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClD;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CACjC"}

package/getGroup.js

@@ -55,6 +55,20 @@ const utilities = __importStar(require("./utilities"));
  *     groupId: group.apply(group => group.id),
  *     roleIds: [offlineAccess.apply(offlineAccess => offlineAccess.id)],
  * });
+ * // Using group_path to look up nested groups by their full path
+ * const superAdmin = keycloak.getRoleOutput({
+ *     realmId: realm.id,
+ *     name: "super_admin",
+ * });
+ * const admins = keycloak.getGroupOutput({
+ *     realmId: realm.id,
+ *     groupPath: "/Administration/Full Admins",
+ * });
+ * const adminsRoles = new keycloak.GroupRoles("admins_roles", {
+ *     realmId: realm.id,
+ *     groupId: admins.apply(admins => admins.id),
+ *     roleIds: [superAdmin.apply(superAdmin => superAdmin.id)],
+ * });
  * ```
  *
  * Organization groups can be looked up by setting `organizationId`. Organization groups require Keycloak 26.6.0 or later.
@@ -74,6 +88,7 @@ function getGroup(args, opts) {
     opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
     return pulumi.runtime.invoke("keycloak:index/getGroup:getGroup", {
         "description": args.description,
+        "groupPath": args.groupPath,
         "name": args.name,
         "organizationId": args.organizationId,
         "realmId": args.realmId,
@@ -107,6 +122,20 @@ exports.getGroup = getGroup;
  *     groupId: group.apply(group => group.id),
  *     roleIds: [offlineAccess.apply(offlineAccess => offlineAccess.id)],
  * });
+ * // Using group_path to look up nested groups by their full path
+ * const superAdmin = keycloak.getRoleOutput({
+ *     realmId: realm.id,
+ *     name: "super_admin",
+ * });
+ * const admins = keycloak.getGroupOutput({
+ *     realmId: realm.id,
+ *     groupPath: "/Administration/Full Admins",
+ * });
+ * const adminsRoles = new keycloak.GroupRoles("admins_roles", {
+ *     realmId: realm.id,
+ *     groupId: admins.apply(admins => admins.id),
+ *     roleIds: [superAdmin.apply(superAdmin => superAdmin.id)],
+ * });
  * ```
  *
  * Organization groups can be looked up by setting `organizationId`. Organization groups require Keycloak 26.6.0 or later.
@@ -126,6 +155,7 @@ function getGroupOutput(args, opts) {
     opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
     return pulumi.runtime.invokeOutput("keycloak:index/getGroup:getGroup", {
         "description": args.description,
+        "groupPath": args.groupPath,
         "name": args.name,
         "organizationId": args.organizationId,
         "realmId": args.realmId,

package/getGroup.js.map

@@ -1 +1 @@
-{"version":3,"file":"getGroup.js","sourceRoot":"","sources":["../getGroup.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,uDAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,SAAgB,QAAQ,CAAC,IAAkB,EAAE,IAA2B;IACpE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,kCAAkC,EAAE;QAC7D,aAAa,EAAE,IAAI,CAAC,WAAW;QAC/B,MAAM,EAAE,IAAI,CAAC,IAAI;QACjB,gBAAgB,EAAE,IAAI,CAAC,cAAc;QACrC,SAAS,EAAE,IAAI,CAAC,OAAO;KAC1B,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AARD,4BAQC;AAqCD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,SAAgB,cAAc,CAAC,IAAwB,EAAE,IAAiC;IACtF,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,kCAAkC,EAAE;QACnE,aAAa,EAAE,IAAI,CAAC,WAAW;QAC/B,MAAM,EAAE,IAAI,CAAC,IAAI;QACjB,gBAAgB,EAAE,IAAI,CAAC,cAAc;QACrC,SAAS,EAAE,IAAI,CAAC,OAAO;KAC1B,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AARD,wCAQC"}
+{"version":3,"file":"getGroup.js","sourceRoot":"","sources":["../getGroup.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,uDAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,SAAgB,QAAQ,CAAC,IAAkB,EAAE,IAA2B;IACpE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,kCAAkC,EAAE;QAC7D,aAAa,EAAE,IAAI,CAAC,WAAW;QAC/B,WAAW,EAAE,IAAI,CAAC,SAAS;QAC3B,MAAM,EAAE,IAAI,CAAC,IAAI;QACjB,gBAAgB,EAAE,IAAI,CAAC,cAAc;QACrC,SAAS,EAAE,IAAI,CAAC,OAAO;KAC1B,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AATD,4BASC;AA0CD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,SAAgB,cAAc,CAAC,IAAwB,EAAE,IAAiC;IACtF,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,kCAAkC,EAAE;QACnE,aAAa,EAAE,IAAI,CAAC,WAAW;QAC/B,WAAW,EAAE,IAAI,CAAC,SAAS;QAC3B,MAAM,EAAE,IAAI,CAAC,IAAI;QACjB,gBAAgB,EAAE,IAAI,CAAC,cAAc;QACrC,SAAS,EAAE,IAAI,CAAC,OAAO;KAC1B,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AATD,wCASC"}