cartography 0.104.0rc2__py3-none-any.whl → 0.123.0__py3-none-any.whl

cartography/models/keycloak/client.py

@@ -0,0 +1,179 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.nodes import ExtraNodeLabels
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_source_node_matcher
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import SourceNodeMatcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class KeycloakClientNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    client_id: PropertyRef = PropertyRef("clientId")
+    name: PropertyRef = PropertyRef("name")
+    description: PropertyRef = PropertyRef("description")
+    type: PropertyRef = PropertyRef("type")
+    root_url: PropertyRef = PropertyRef("rootUrl")
+    admin_url: PropertyRef = PropertyRef("adminUrl")
+    base_url: PropertyRef = PropertyRef("baseUrl")
+    surrogate_auth_required: PropertyRef = PropertyRef("surrogateAuthRequired")
+    enabled: PropertyRef = PropertyRef("enabled")
+    always_display_in_console: PropertyRef = PropertyRef("alwaysDisplayInConsole")
+    client_authenticator_type: PropertyRef = PropertyRef("clientAuthenticatorType")
+    registration_access_token: PropertyRef = PropertyRef("registrationAccessToken")
+    not_before: PropertyRef = PropertyRef("notBefore")
+    bearer_only: PropertyRef = PropertyRef("bearerOnly")
+    consent_required: PropertyRef = PropertyRef("consentRequired")
+    standard_flow_enabled: PropertyRef = PropertyRef("standardFlowEnabled")
+    implicit_flow_enabled: PropertyRef = PropertyRef("implicitFlowEnabled")
+    direct_access_grants_enabled: PropertyRef = PropertyRef("directAccessGrantsEnabled")
+    service_accounts_enabled: PropertyRef = PropertyRef("serviceAccountsEnabled")
+    authorization_services_enabled: PropertyRef = PropertyRef(
+        "authorizationServicesEnabled"
+    )
+    direct_grants_only: PropertyRef = PropertyRef("directGrantsOnly")
+    public_client: PropertyRef = PropertyRef("publicClient")
+    frontchannel_logout: PropertyRef = PropertyRef("frontchannelLogout")
+    protocol: PropertyRef = PropertyRef("protocol")
+    full_scope_allowed: PropertyRef = PropertyRef("fullScopeAllowed")
+    node_re_registration_timeout: PropertyRef = PropertyRef("nodeReRegistrationTimeout")
+    client_template: PropertyRef = PropertyRef("clientTemplate")
+    use_template_config: PropertyRef = PropertyRef("useTemplateConfig")
+    use_template_scope: PropertyRef = PropertyRef("useTemplateScope")
+    use_template_mappers: PropertyRef = PropertyRef("useTemplateMappers")
+    origin: PropertyRef = PropertyRef("origin")
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KeycloakClientToRealmRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakClient)<-[:RESOURCE]-(:KeycloakRealm)
+class KeycloakClientToRealmRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakRealm"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"name": PropertyRef("REALM", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: KeycloakClientToRealmRelProperties = (
+        KeycloakClientToRealmRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KeycloakClientToDefaultScopeRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakClient)-[:HAS_DEFAULT_SCOPE]->(:KeycloakScope)
+class KeycloakClientToDefaultScopeRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakScope"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "name": PropertyRef("defaultClientScopes", one_to_many=True),
+            "realm": PropertyRef("REALM", set_in_kwargs=True),
+        },
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "HAS_DEFAULT_SCOPE"
+    properties: KeycloakClientToDefaultScopeRelProperties = (
+        KeycloakClientToDefaultScopeRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KeycloakClientToOptionalScopeRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakClient)-[:HAS_OPTIONAL_SCOPE]->(:KeycloakScope)
+class KeycloakClientToOptionalScopeRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakScope"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "name": PropertyRef("optionalClientScopes", one_to_many=True),
+            "realm": PropertyRef("REALM", set_in_kwargs=True),
+        },
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "HAS_OPTIONAL_SCOPE"
+    properties: KeycloakClientToOptionalScopeRelProperties = (
+        KeycloakClientToOptionalScopeRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KeycloakClientToServiceAccountRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakClient)-[:HAS_SERVICE_ACCOUNT]->(:KeycloakUser)
+class KeycloakClientToServiceAccountRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakUser"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("_service_account_user_id")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "HAS_SERVICE_ACCOUNT"
+    properties: KeycloakClientToServiceAccountRelProperties = (
+        KeycloakClientToServiceAccountRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KeycloakClientSchema(CartographyNodeSchema):
+    label: str = "KeycloakClient"
+    extra_node_labels: ExtraNodeLabels = ExtraNodeLabels(["ThirdPartyApp"])
+    properties: KeycloakClientNodeProperties = KeycloakClientNodeProperties()
+    sub_resource_relationship: KeycloakClientToRealmRel = KeycloakClientToRealmRel()
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            KeycloakClientToDefaultScopeRel(),
+            KeycloakClientToOptionalScopeRel(),
+            KeycloakClientToServiceAccountRel(),
+        ]
+    )
+
+
+# The following relationships are MatchLinks to enable batch loading with rel properties
+@dataclass(frozen=True)
+class KeycloakClientToFlowRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+    flow_name: PropertyRef = PropertyRef("flow_name")
+    default_flow: PropertyRef = PropertyRef("default_flow")
+    # Mandatory fields for MatchLinks
+    _sub_resource_label: PropertyRef = PropertyRef(
+        "_sub_resource_label", set_in_kwargs=True
+    )
+    _sub_resource_id: PropertyRef = PropertyRef("_sub_resource_id", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakClient)-[:USES]->(:KeycloakAuthenticationFlow)
+class KeycloakClientToFlowMatchLink(CartographyRelSchema):
+    source_node_label: str = "KeycloakClient"
+    source_node_matcher: SourceNodeMatcher = make_source_node_matcher(
+        {"id": PropertyRef("client_id")},
+    )
+    target_node_label: str = "KeycloakAuthenticationFlow"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("flow_id")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "USES"
+    properties: KeycloakClientToFlowRelProperties = KeycloakClientToFlowRelProperties()

cartography/models/keycloak/group.py

@@ -0,0 +1,101 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class KeycloakGroupNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    name: PropertyRef = PropertyRef("name")
+    description: PropertyRef = PropertyRef("description")
+    path: PropertyRef = PropertyRef("path")
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KeycloakGroupToRealmRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakGroup)<-[:RESOURCE]-(:KeycloakRealm)
+class KeycloakGroupToRealmRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakRealm"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"name": PropertyRef("REALM", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: KeycloakGroupToRealmRelProperties = KeycloakGroupToRealmRelProperties()
+
+
+@dataclass(frozen=True)
+class KeycloakGroupToGroupRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakGroup)-[:SUBGROUP_OF]->(:KeycloakGroup)
+class KeycloakGroupToGroupRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakGroup"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("parentId")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "SUBGROUP_OF"
+    properties: KeycloakGroupToGroupRelProperties = KeycloakGroupToGroupRelProperties()
+
+
+@dataclass(frozen=True)
+class KeycloakGroupToUserRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakGroup)<-[:MEMBER_OF]-(:KeycloakUser)
+class KeycloakGroupToUserRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakUser"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("_member_ids", one_to_many=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "MEMBER_OF"
+    properties: KeycloakGroupToUserRelProperties = KeycloakGroupToUserRelProperties()
+
+
+@dataclass(frozen=True)
+class KeycloakGroupToRoleRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakGroup)-[:GRANTS]->(:KeycloakRole)
+class KeycloakGroupToRoleRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakRole"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "name": PropertyRef("_roles", one_to_many=True),
+            "realm": PropertyRef("REALM", set_in_kwargs=True),
+        },
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "GRANTS"
+    properties: KeycloakGroupToRoleRelProperties = KeycloakGroupToRoleRelProperties()
+
+
+@dataclass(frozen=True)
+class KeycloakGroupSchema(CartographyNodeSchema):
+    label: str = "KeycloakGroup"
+    properties: KeycloakGroupNodeProperties = KeycloakGroupNodeProperties()
+    sub_resource_relationship: KeycloakGroupToRealmRel = KeycloakGroupToRealmRel()
+    other_relationships: OtherRelationships = OtherRelationships(
+        [KeycloakGroupToGroupRel(), KeycloakGroupToUserRel(), KeycloakGroupToRoleRel()]
+    )

cartography/models/keycloak/identityprovider.py

@@ -0,0 +1,89 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class KeycloakIdentityProviderNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("internalId")
+    alias: PropertyRef = PropertyRef("alias", extra_index=True)
+    display_name: PropertyRef = PropertyRef("displayName")
+    provider_id: PropertyRef = PropertyRef("providerId")
+    enabled: PropertyRef = PropertyRef("enabled")
+    update_profile_first_login_mode: PropertyRef = PropertyRef(
+        "updateProfileFirstLoginMode"
+    )
+    trust_email: PropertyRef = PropertyRef("trustEmail")
+    store_token: PropertyRef = PropertyRef("storeToken")
+    add_read_token_role_on_create: PropertyRef = PropertyRef("addReadTokenRoleOnCreate")
+    authenticate_by_default: PropertyRef = PropertyRef("authenticateByDefault")
+    link_only: PropertyRef = PropertyRef("linkOnly")
+    hide_on_login: PropertyRef = PropertyRef("hideOnLogin")
+    first_broker_login_flow_alias: PropertyRef = PropertyRef(
+        "firstBrokerLoginFlowAlias"
+    )
+    post_broker_login_flow_alias: PropertyRef = PropertyRef("postBrokerLoginFlowAlias")
+    organization_id: PropertyRef = PropertyRef("organizationId")
+    update_profile_first_login: PropertyRef = PropertyRef("updateProfileFirstLogin")
+    config_sync_mode: PropertyRef = PropertyRef("config.syncMode")
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KeycloakIdentityProviderToRealmRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakIdentityProvider)<-[:RESOURCE]-(:KeycloakRealm)
+class KeycloakIdentityProviderToRealmRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakRealm"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"name": PropertyRef("REALM", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: KeycloakIdentityProviderToRealmRelProperties = (
+        KeycloakIdentityProviderToRealmRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KeycloakIdentityProviderToUserRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakIdentityProvider)<-[:HAS_IDENTITY]-(:KeycloakUser)
+class KeycloakIdentityProviderToUserRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakUser"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("_member_ids", one_to_many=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "HAS_IDENTITY"
+    properties: KeycloakIdentityProviderToUserRelProperties = (
+        KeycloakIdentityProviderToUserRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KeycloakIdentityProviderSchema(CartographyNodeSchema):
+    label: str = "KeycloakIdentityProvider"
+    properties: KeycloakIdentityProviderNodeProperties = (
+        KeycloakIdentityProviderNodeProperties()
+    )
+    sub_resource_relationship: KeycloakIdentityProviderToRealmRel = (
+        KeycloakIdentityProviderToRealmRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [KeycloakIdentityProviderToUserRel()],
+    )

cartography/models/keycloak/organization.py

@@ -0,0 +1,116 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class KeycloakOrganizationNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    name: PropertyRef = PropertyRef("name")
+    alias: PropertyRef = PropertyRef("alias")
+    enabled: PropertyRef = PropertyRef("enabled")
+    description: PropertyRef = PropertyRef("description")
+    redirect_url: PropertyRef = PropertyRef("redirectUrl")
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KeycloakOrganizationToRealmRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakOrganization)<-[:RESOURCE]-(:KeycloakRealm)
+class KeycloakOrganizationToRealmRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakRealm"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"name": PropertyRef("REALM", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: KeycloakOrganizationToRealmRelProperties = (
+        KeycloakOrganizationToRealmRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KeycloakOrganizationToManagedUserRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakOrganization)<-[:MANAGED_MEMBER_OF]-(:KeycloakUser)
+class KeycloakOrganizationToManagedUserRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakUser"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("_managed_members", one_to_many=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "MANAGED_MEMBER_OF"
+    properties: KeycloakOrganizationToManagedUserRelProperties = (
+        KeycloakOrganizationToManagedUserRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KeycloakOrganizationToUnmanagedUserRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakOrganization)<-[:UNMANAGED_MEMBER_OF]-(:KeycloakUser)
+class KeycloakOrganizationToUnmanagedUserRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakUser"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("_unmanaged_members", one_to_many=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "UNMANAGED_MEMBER_OF"
+    properties: KeycloakOrganizationToUnmanagedUserRelProperties = (
+        KeycloakOrganizationToUnmanagedUserRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KeycloakOrganizationToIdentityProviderRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakOrganization)-[:ENFORCES]->(:KeycloakIdentityProvider)
+class KeycloakOrganizationToIdentityProviderRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakIdentityProvider"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("_idp_ids", one_to_many=True)},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "ENFORCES"
+    properties: KeycloakOrganizationToIdentityProviderRelProperties = (
+        KeycloakOrganizationToIdentityProviderRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KeycloakOrganizationSchema(CartographyNodeSchema):
+    label: str = "KeycloakOrganization"
+    properties: KeycloakOrganizationNodeProperties = (
+        KeycloakOrganizationNodeProperties()
+    )
+    sub_resource_relationship: KeycloakOrganizationToRealmRel = (
+        KeycloakOrganizationToRealmRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            KeycloakOrganizationToManagedUserRel(),
+            KeycloakOrganizationToUnmanagedUserRel(),
+            KeycloakOrganizationToIdentityProviderRel(),
+        ]
+    )

cartography/models/keycloak/organizationdomain.py

@@ -0,0 +1,73 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class KeycloakOrganizationDomainNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    name: PropertyRef = PropertyRef("name", extra_index=True)
+    verified: PropertyRef = PropertyRef("verified")
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KeycloakOrganizationDomainToRealmRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakOrganizationDomain)<-[:RESOURCE]-(:KeycloakRealm)
+class KeycloakOrganizationDomainToRealmRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakRealm"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"name": PropertyRef("REALM", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: KeycloakOrganizationDomainToRealmRelProperties = (
+        KeycloakOrganizationDomainToRealmRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KeycloakOrganizationDomainToOrganizationRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakOrganizationDomain)-[:BELONGS_TO]->(:KeycloakOrganization)
+class KeycloakOrganizationDomainToOrganizationRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakOrganization"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("organization_id")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "BELONGS_TO"
+    properties: KeycloakOrganizationDomainToOrganizationRelProperties = (
+        KeycloakOrganizationDomainToOrganizationRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KeycloakOrganizationDomainSchema(CartographyNodeSchema):
+    label: str = "KeycloakOrganizationDomain"
+    properties: KeycloakOrganizationDomainNodeProperties = (
+        KeycloakOrganizationDomainNodeProperties()
+    )
+    sub_resource_relationship: KeycloakOrganizationDomainToRealmRel = (
+        KeycloakOrganizationDomainToRealmRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            KeycloakOrganizationDomainToOrganizationRel(),
+        ]
+    )