diff --git a/kc_bootstrap.tf b/kc_bootstrap.tf deleted file mode 100644 index ca7c1ca..0000000 --- a/kc_bootstrap.tf +++ /dev/null @@ -1,77 +0,0 @@ -# Configure provider -provider "keycloak" { - client_id = var.keycloak_user - client_secret = var.keycloak_password - url = "${module.ingress_resources.service_url}/auth" -} - -# Create realm -resource "keycloak_realm" "realm" { - depends_on = [module.ingress_resources] - - realm = var.realm_name - enabled = true -} - -# Create realm role -resource "keycloak_role" "developer_role" { - depends_on = [module.ingress_resources] - realm_id = keycloak_realm.realm.id - name = "developer" - description = "Developer role for ${var.realm_name}" -} - -# Create admin user -resource "keycloak_user" "user" { - depends_on = [module.ingress_resources] - realm_id = keycloak_realm.realm.id - username = var.realm_user - email = var.realm_email - enabled = true - - initial_password { - value = var.realm_password - temporary = false - } -} - -# Assign role to user -resource "keycloak_user_roles" "user_roles" { - depends_on = [module.ingress_resources] - realm_id = keycloak_realm.realm.id - user_id = keycloak_user.user.id - - role_ids = [ - keycloak_role.developer_role.id - ] -} - -# Create client -resource "keycloak_openid_client" "client" { - depends_on = [module.ingress_resources] - realm_id = keycloak_realm.realm.id - client_id = var.client_id - client_secret = var.client_secret - enabled = true - access_type = "CONFIDENTIAL" - valid_redirect_uris = var.redirect_uris - root_url = var.root_url - base_url = var.base_url -} - -# Create secret with realm creds -resource "kubernetes_secret" "keycloak_realm_creds" { - metadata { - name = "keycloak-${var.realm_name}-creds" - namespace = var.namespace - } - - data = { - username = var.realm_user - password = var.realm_password - client-id = var.client_id - client-secret = var.client_secret - realm-name = var.realm_name - } - -}