remove realm

README.md

@@ -72,8 +72,6 @@ Common issues and solutions:
 | Name | Version |
 |------|---------|
 | <a name="provider_helm"></a> [helm](#provider\_helm) | 2.17.0 |
-| <a name="provider_keycloak"></a> [keycloak](#provider\_keycloak) | 5.1.1 |
-| <a name="provider_kubernetes"></a> [kubernetes](#provider\_kubernetes) | 2.35.1 |
 
 ## Modules
 
@@ -87,20 +85,11 @@ Common issues and solutions:
 | Name | Type |
 |------|------|
 | [helm_release.keycloak](https://registry.terraform.io/providers/hashicorp/helm/latest/docs/resources/release) | resource |
-| [keycloak_openid_client.client](https://registry.terraform.io/providers/keycloak/keycloak/latest/docs/resources/openid_client) | resource |
-| [keycloak_realm.realm](https://registry.terraform.io/providers/keycloak/keycloak/latest/docs/resources/realm) | resource |
-| [keycloak_role.developer_role](https://registry.terraform.io/providers/keycloak/keycloak/latest/docs/resources/role) | resource |
-| [keycloak_user.user](https://registry.terraform.io/providers/keycloak/keycloak/latest/docs/resources/user) | resource |
-| [keycloak_user_roles.user_roles](https://registry.terraform.io/providers/keycloak/keycloak/latest/docs/resources/user_roles) | resource |
-| [kubernetes_secret.keycloak_realm_creds](https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/secret) | resource |
 
 ## Inputs
 
 | Name | Description | Type | Default | Required |
 |------|-------------|------|---------|:--------:|
-| <a name="input_base_url"></a> [base\_url](#input\_base\_url) | Base URL for the OpenID client | `string` | `""` | no |
-| <a name="input_client_id"></a> [client\_id](#input\_client\_id) | Client ID for the OpenID client | `string` | `"app-client"` | no |
-| <a name="input_client_secret"></a> [client\_secret](#input\_client\_secret) | Client secret for the OpenID client | `string` | `""` | no |
 | <a name="input_cluster_domain"></a> [cluster\_domain](#input\_cluster\_domain) | The domain name used to reference ingresses for the cluster. | `string` | n/a | yes |
 | <a name="input_cluster_name"></a> [cluster\_name](#input\_cluster\_name) | EKS cluster name name component used through out the EKS cluster describing its purpose (ex: dice-dev) | `string` | n/a | yes |
 | <a name="input_default_storage_class"></a> [default\_storage\_class](#input\_default\_storage\_class) | The default storage class to use for persistent volumes | `string` | `"gp3-encrypted"` | no |
@@ -111,12 +100,6 @@ Common issues and solutions:
 | <a name="input_namespace"></a> [namespace](#input\_namespace) | The namespace which will be created and into which keycloak will be deployed. | `string` | `"keycloak"` | no |
 | <a name="input_postgresql_tag"></a> [postgresql\_tag](#input\_postgresql\_tag) | The tag of the postgresql image to use. | `string` | `"17.4.0"` | no |
 | <a name="input_profile"></a> [profile](#input\_profile) | AWS config profile used to upload images into ECR | `string` | `""` | no |
-| <a name="input_realm_email"></a> [realm\_email](#input\_realm\_email) | Email for the realm user | `string` | `"admin@example.com"` | no |
-| <a name="input_realm_name"></a> [realm\_name](#input\_realm\_name) | Name of the Keycloak realm to create | `string` | `"default"` | no |
-| <a name="input_realm_password"></a> [realm\_password](#input\_realm\_password) | Password for the realm user | `string` | `""` | no |
-| <a name="input_realm_user"></a> [realm\_user](#input\_realm\_user) | Username for the realm admin user | `string` | `"user"` | no |
-| <a name="input_redirect_uris"></a> [redirect\_uris](#input\_redirect\_uris) | Valid redirect URIs for the OpenID client | `list(string)` | <pre>[<br/>  "*"<br/>]</pre> | no |
-| <a name="input_root_url"></a> [root\_url](#input\_root\_url) | Root URL for the OpenID client | `string` | `""` | no |
 | <a name="input_service_name"></a> [service\_name](#input\_service\_name) | The name of the service to be deployed in the EKS cluster. | `string` | `"service"` | no |
 | <a name="input_telemetry_namespace"></a> [telemetry\_namespace](#input\_telemetry\_namespace) | The namespace used for telemetry. | `string` | `"namespace"` | no |
 
@@ -133,5 +116,4 @@ Common issues and solutions:
 | <a name="output_namespace"></a> [namespace](#output\_namespace) | The namespace in which keycloak gets installed in. |
 | <a name="output_provider_config"></a> [provider\_config](#output\_provider\_config) | Add provider configuration block for easier consumption |
 | <a name="output_public_endpoint"></a> [public\_endpoint](#output\_public\_endpoint) | The endpoint at which keycloak can be reached from outside the cluster. |
-| <a name="output_realm_id"></a> [realm\_id](#output\_realm\_id) | n/a |
 <!-- END_TF_DOCS -->

outputs.tf

@@ -12,16 +12,12 @@ output "admin_internal_endpoint" {
   }
 }
 
-output "realm_id" {
-  value = keycloak_realm.realm.id
-}
-
 # Add provider configuration block for easier consumption
 output "provider_config" {
   value = {
-    url       = "https://${var.service_name}.${var.cluster_domain}"
+    url       = "${module.ingress_resources.service_url}/auth"
     realm     = "master"
-    client_id = "admin-cli"
+    client_id = var.keycloak_user
   }
   sensitive = true
 }

variables.tf

@@ -67,59 +67,3 @@ variable "postgresql_tag" {
   type        = string
   default     = "17.4.0"
 }
-
-variable "realm_name" {
-  description = "Name of the Keycloak realm to create"
-  type        = string
-  default     = "default"
-}
-
-variable "realm_user" {
-  description = "Username for the realm admin user"
-  type        = string
-  default     = "user"
-}
-
-variable "realm_email" {
-  description = "Email for the realm user"
-  type        = string
-  default     = "admin@example.com"
-}
-
-variable "realm_password" {
-  description = "Password for the realm user"
-  type        = string
-  default     = ""
-  sensitive   = true
-}
-
-variable "client_id" {
-  description = "Client ID for the OpenID client"
-  type        = string
-  default     = "app-client"
-}
-
-variable "client_secret" {
-  description = "Client secret for the OpenID client"
-  type        = string
-  default     = ""
-  sensitive   = true
-}
-
-variable "redirect_uris" {
-  description = "Valid redirect URIs for the OpenID client"
-  type        = list(string)
-  default     = ["*"]
-}
-
-variable "root_url" {
-  description = "Root URL for the OpenID client"
-  type        = string
-  default     = ""
-}
-
-variable "base_url" {
-  description = "Base URL for the OpenID client"
-  type        = string
-  default     = ""
-}