infrastructure/tf-stage-1/service_youtrack.tf

63 lines
1.9 KiB
HCL

module "youtrackclient" {
source = "./modules/kc-client"
realm = var.realm
client_id = "youtrack"
client_name = "YouTrack"
description = "todo.unruhig.eu"
root_url = "https://todo.unruhig.eu"
admin_url = ""
base_url = ""
valid_redirect_uris = ["/hub/api/rest/oauth2/interactive/login/fb07847a-788d-49cc-82d5-0a80075130a3/land"]
web_origins = []
}
resource "keycloak_openid_user_session_note_protocol_mapper" "youtrack-id-mapper" {
realm_id = module.youtrackclient.realm.id
client_id = module.youtrackclient.client.id
name = "id"
claim_name = "clientId"
claim_value_type = "String"
session_note = "clientId"
add_to_access_token = true
add_to_id_token = true
}
resource "keycloak_openid_user_session_note_protocol_mapper" "youtrack-host-mapper" {
realm_id = module.youtrackclient.realm.id
client_id = module.youtrackclient.client.id
name = "host"
claim_name = "clientHost"
claim_value_type = "String"
session_note = "clientHost"
add_to_access_token = true
add_to_id_token = true
}
resource "keycloak_openid_user_session_note_protocol_mapper" "youtrack-ip-mapper" {
realm_id = module.youtrackclient.realm.id
client_id = module.youtrackclient.client.id
name = "ip"
claim_name = "clientAddress"
claim_value_type = "String"
session_note = "clientAddress"
add_to_access_token = true
add_to_id_token = true
}
resource "keycloak_openid_user_client_role_protocol_mapper" "youtrack-role-mapper" {
realm_id = module.youtrackclient.realm.id
client_id = module.youtrackclient.client.id
multivalued = true
name = "user-client-role-mapper"
claim_name = "youtrack_roles"
client_id_for_role_mappings = "youtrack"
add_to_userinfo = true
add_to_access_token = true
add_to_id_token = true
}