Allow Keycloak role-mapping: mapping realm roles to groups

[canon-aris-van-dijk]

Summary

There is currently a Keycloak client role mapping module, but not a Keycloak realm role mapping module to map realm roles to groups.

It would be great if realm roles could be assigned to groups too. This could be a variant of community.general.keycloak_client_rolemapping.

Alternatively, it could be a feature of the community.general.keycloak_group module that already has a note:

Presently, the end_state.realmRoles, end_state.clientRoles, and end_state.access attributes returned by the Keycloak API are read-only for groups. This limitation will be removed in a later version of this module.

Issue Type

Feature Idea

Component Name

keycloak_client_rolemapping

Additional Information

Code of Conduct

• [X] I agree to follow the Ansible Code of Conduct

[ansibullbot]

Files identified in the description:

• plugins/modules/keycloak_client_rolemapping.py

If these files are incorrect, please update the component name section of the description or use the !component bot command.

click here for bot help

[ansibullbot]

cc @Gaetan2907 @eikef @mattock @ndclt click here for bot help

[ansibullbot]

cc @thomasbach-dev click here for bot help