63 lines
1.9 KiB
Terraform
63 lines
1.9 KiB
Terraform
|
module "youtrackclient" {
|
||
|
|
source = "./modules/kc-client"
|
||
|
|
|
||
|
|
realm = var.realm
|
||
|
|
client_id = "youtrack"
|
||
|
|
client_name = "YouTrack"
|
||
|
|
description = "todo.unruhig.eu"
|
||
|
|
root_url = "https://todo.unruhig.eu"
|
||
|
|
admin_url = ""
|
||
|
|
base_url = ""
|
||
|
|
valid_redirect_uris = ["/hub/api/rest/oauth2/interactive/login/fb07847a-788d-49cc-82d5-0a80075130a3/land"]
|
||
|
|
web_origins = []
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
resource "keycloak_openid_user_session_note_protocol_mapper" "youtrack-id-mapper" {
|
||
|
|
realm_id = module.youtrackclient.realm.id
|
||
|
|
client_id = module.youtrackclient.client.id
|
||
|
|
name = "id"
|
||
|
|
|
||
|
|
claim_name = "clientId"
|
||
|
|
claim_value_type = "String"
|
||
|
|
session_note = "clientId"
|
||
|
|
add_to_access_token = true
|
||
|
|
add_to_id_token = true
|
||
|
|
}
|
||
|
|
|
||
|
|
resource "keycloak_openid_user_session_note_protocol_mapper" "youtrack-host-mapper" {
|
||
|
|
realm_id = module.youtrackclient.realm.id
|
||
|
|
client_id = module.youtrackclient.client.id
|
||
|
|
name = "host"
|
||
|
|
|
||
|
|
claim_name = "clientHost"
|
||
|
|
claim_value_type = "String"
|
||
|
|
session_note = "clientHost"
|
||
|
|
add_to_access_token = true
|
||
|
|
add_to_id_token = true
|
||
|
|
}
|
||
|
|
|
||
|
|
resource "keycloak_openid_user_session_note_protocol_mapper" "youtrack-ip-mapper" {
|
||
|
|
realm_id = module.youtrackclient.realm.id
|
||
|
|
client_id = module.youtrackclient.client.id
|
||
|
|
name = "ip"
|
||
|
|
|
||
|
|
claim_name = "clientAddress"
|
||
|
|
claim_value_type = "String"
|
||
|
|
session_note = "clientAddress"
|
||
|
|
add_to_access_token = true
|
||
|
|
add_to_id_token = true
|
||
|
|
}
|
||
|
|
|
||
|
|
resource "keycloak_openid_user_client_role_protocol_mapper" "youtrack-role-mapper" {
|
||
|
|
realm_id = module.youtrackclient.realm.id
|
||
|
|
client_id = module.youtrackclient.client.id
|
||
|
|
multivalued = true
|
||
|
|
name = "user-client-role-mapper"
|
||
|
|
claim_name = "youtrack_roles"
|
||
|
|
client_id_for_role_mappings = "youtrack"
|
||
|
|
add_to_userinfo = true
|
||
|
|
add_to_access_token = true
|
||
|
|
add_to_id_token = true
|
||
|
|
}
|