Limit group mapping to client

tf-stage-1/service_gitea.tf

@@ -34,4 +34,5 @@ resource "keycloak_openid_user_client_role_protocol_mapper" "gitea-role-mapper"
   add_to_userinfo             = true
   add_to_access_token         = true
   add_to_id_token             = false
+  client_id_for_role_mappings = module.giteaclient.client.id
 }

tf-stage-1/service_grafana.tf

@@ -48,6 +48,7 @@ resource "keycloak_openid_user_client_role_protocol_mapper" "grafana-role-mapper
   add_to_userinfo             = true
   add_to_access_token         = true
   add_to_id_token             = false
+  client_id_for_role_mappings = module.grafanaclient.client.id
 }
 
 resource "keycloak_role" "grafana-admin" {

tf-stage-1/service_hedgedoc.tf

@@ -48,4 +48,5 @@ resource "keycloak_openid_user_session_note_protocol_mapper" "hedgedoc-ip-mapper
   session_note        = "clientAddress"
   add_to_access_token = true
   add_to_id_token     = true
+
 }