86 lines
2.6 KiB
Terraform
86 lines
2.6 KiB
Terraform
|
module "minioclient" {
|
||
|
|
source = "./modules/kc-client"
|
||
|
|
|
||
|
|
realm = var.realm
|
||
|
|
client_id = "minio"
|
||
|
|
client_name = "minio"
|
||
|
|
description = "minio.tobiasmanske.de"
|
||
|
|
root_url = "https://minio.tobiasmanske.de"
|
||
|
|
admin_url = ""
|
||
|
|
base_url = ""
|
||
|
|
valid_redirect_uris = ["https://minio.tobiasmanske.de/oauth_callback"]
|
||
|
|
web_origins = []
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
resource "keycloak_openid_user_session_note_protocol_mapper" "minio-client-id-mapper" {
|
||
|
|
realm_id = module.minioclient.realm.id
|
||
|
|
client_id = module.minioclient.client.id
|
||
|
|
name = "Client ID"
|
||
|
|
|
||
|
|
claim_name = "clientId"
|
||
|
|
claim_value_type = "String"
|
||
|
|
session_note = "clientId"
|
||
|
|
}
|
||
|
|
resource "keycloak_openid_user_session_note_protocol_mapper" "minio-client-host-mapper" {
|
||
|
|
realm_id = module.minioclient.realm.id
|
||
|
|
client_id = module.minioclient.client.id
|
||
|
|
name = "Client Host"
|
||
|
|
|
||
|
|
claim_name = "clientHost"
|
||
|
|
claim_value_type = "String"
|
||
|
|
session_note = "clientHost"
|
||
|
|
}
|
||
|
|
resource "keycloak_openid_user_session_note_protocol_mapper" "minio-client-ip-address-mapper" {
|
||
|
|
realm_id = module.minioclient.realm.id
|
||
|
|
client_id = module.minioclient.client.id
|
||
|
|
name = "Client Address"
|
||
|
|
|
||
|
|
claim_name = "clientAddress"
|
||
|
|
claim_value_type = "String"
|
||
|
|
session_note = "clientAddress"
|
||
|
|
}
|
||
|
|
|
||
|
|
resource "keycloak_openid_user_client_role_protocol_mapper" "minio-role-mapper" {
|
||
|
|
realm_id = module.minioclient.realm.id
|
||
|
|
client_id = module.minioclient.client.id
|
||
|
|
client_id_for_role_mappings = module.minioclient.client.id
|
||
|
|
multivalued = true
|
||
|
|
name = "user-client-role-mapper"
|
||
|
|
claim_name = "roles"
|
||
|
|
add_to_userinfo = true
|
||
|
|
add_to_access_token = true
|
||
|
|
add_to_id_token = true
|
||
|
|
}
|
||
|
|
|
||
|
|
resource "keycloak_role" "minio-consoleAdmin" {
|
||
|
|
realm_id = module.minioclient.realm.id
|
||
|
|
client_id = module.minioclient.client.id
|
||
|
|
name = "consoleAdmin"
|
||
|
|
description = ""
|
||
|
|
}
|
||
|
|
resource "keycloak_role" "minio-diagnostics" {
|
||
|
|
realm_id = module.minioclient.realm.id
|
||
|
|
client_id = module.minioclient.client.id
|
||
|
|
name = "diagnostics"
|
||
|
|
description = ""
|
||
|
|
}
|
||
|
|
resource "keycloak_role" "minio-readonly" {
|
||
|
|
realm_id = module.minioclient.realm.id
|
||
|
|
client_id = module.minioclient.client.id
|
||
|
|
name = "readonly"
|
||
|
|
description = ""
|
||
|
|
}
|
||
|
|
resource "keycloak_role" "minio-readwrite" {
|
||
|
|
realm_id = module.minioclient.realm.id
|
||
|
|
client_id = module.minioclient.client.id
|
||
|
|
name = "readwrite"
|
||
|
|
description = ""
|
||
|
|
}
|
||
|
|
resource "keycloak_role" "minio-writeonly" {
|
||
|
|
realm_id = module.minioclient.realm.id
|
||
|
|
client_id = module.minioclient.client.id
|
||
|
|
name = "writeonly"
|
||
|
|
description = ""
|
||
|
|
}
|