sonOfRa
commented
1 year ago I've started a draft implementation of this feature over at https://github.com/adorsys/keycloak-config-cli/pull/818.
The general idea is to use Javers to diff the objects, comparing them to a "baseline" realm export for any given Keycloak version, and then using that diff to produce a normalized/minimized yaml file that can later be imported using keycloak-config-cli.
Any inputs on particular choices or ideas on how to do it better are much appreciated!
katoquro
SebastianKunz
dominiktopp
Problem Statement
(I'm not sure if this feature request is best placed here or in keycloak itself ... I'll first try here ...)
We use keycloak-config-cli to properly define the configuration of our Keycloak server in my-realm.json. That's great!
But we use manual configuration as well, usually because we need try and error to find the proper configuration. To get manual changes into my-realm.json (and thus get a well-defined state again), we diff keycloaks export (kcadm.sh create realms/my-realm/partial-export) before and after the manual change.
Problem with that is: the diff gets big, mostly because ordering in some of keycloaks arrays doesn't matter, and keycloak returns entries in different order. And because we regularly delete and create the realm from my-realm.json to play save - which causes Keycloak to choose new id s.
Proposed Solution
Is it possible to provide normalized realm exports that:
We currently use jq to manually do some normalization (see below). That helps us a lot, but it feels like a poor solution, especially replacing all id s with XXX ...
Best regards, Michael
!/bin/sh
if [ "$#" -ne 1 ] ; then echo "Normalize arrays and ids" echo "usage: normalize.sh"
exit 1
fi
set -e
json=$(cat "$1") json=$(echo "${json}" | jq '.clientScopes = (.clientScopes | sort_by(.name))') json=$(echo "${json}" | jq '(.. | select(.protocolMappers?) | .protocolMappers) |= sort_by(.name)') json=$(echo "${json}" | jq '(.components | .["org.keycloak.keys.KeyProvider"]) |= sort_by(.name)') json=$(echo "${json}" | jq '(.components | .["org.keycloak.storage.UserStorageProvider"] | .[] | .subComponents | .["org.keycloak.storage.ldap.mappers.LDAPStorageMapper"]) |= sort_by(.name)') json=$(echo "${json}" | jq '(.components | .["org.keycloak.services.clientregistration.policy.ClientRegistrationPolicy"]) |= sort_by(.name, .subType)') json=$(echo "${json}" | jq '(.. | select(.["allowed-protocol-mapper-types"]?) | .["allowed-protocol-mapper-types"] ) |= sort') json=$(echo "${json}" | jq '(.. | select(.id?) | .id) |= "XXX" ') echo "${json}" | jq --sort-keys
Environment