bcgov / moh-keycloak-client-configurations

Apache License 2.0
1 stars 2 forks source link

Apply idp restriction module to dev clinets #634

Closed filipflorek closed 1 month ago

filipflorek commented 1 month ago

Changes being made

Applying IDP restriction module to: CONNECT, FORMS, MSP DIRECT, PIDP, PLR. Cleaning up comments from terraform configuration.

Quality Check

github-actions[bot] commented 1 month ago

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖success

Terraform Plan 📖success

Show Plan ``` # module.KEYCLOAK_DEV.module.moh_applications.module.FORMS.keycloak_openid_client.CLIENT will be updated in-place ~ resource "keycloak_openid_client" "CLIENT" { id = "a0e0b458-8e6f-493e-acfc-838d72514be8" + login_theme = "moh-app-realm-idp-restriction" name = "FORMS" # (25 unchanged attributes hidden) + authentication_flow_binding_overrides { + browser_id = "9caca0f9-1c0c-4def-85c6-637d1c8a4d24" } } # module.KEYCLOAK_DEV.module.moh_applications.module.FORMS.keycloak_openid_client_default_scopes.client_default_scopes will be updated in-place ~ resource "keycloak_openid_client_default_scopes" "client_default_scopes" { ~ default_scopes = [ + "idir_aad", + "phsa", # (4 unchanged elements hidden) ] id = "moh_applications/a0e0b458-8e6f-493e-acfc-838d72514be8" # (2 unchanged attributes hidden) } # module.KEYCLOAK_DEV.module.moh_applications.module.MSPDIRECT-WEB.keycloak_openid_client.CLIENT will be updated in-place ~ resource "keycloak_openid_client" "CLIENT" { id = "b69bc4b8-b36b-40e9-9a32-0096530d1e7c" + login_theme = "moh-app-realm-idp-restriction" name = "MSPDirect Dev" # (25 unchanged attributes hidden) + authentication_flow_binding_overrides { + browser_id = "9caca0f9-1c0c-4def-85c6-637d1c8a4d24" } } # module.KEYCLOAK_DEV.module.moh_applications.module.MSPDIRECT-WEB.keycloak_openid_client_default_scopes.client_default_scopes will be created + resource "keycloak_openid_client_default_scopes" "client_default_scopes" { + client_id = "b69bc4b8-b36b-40e9-9a32-0096530d1e7c" + default_scopes = [ + "bceid_business", + "bcsc_mspdirect", + "email", + "idir_aad", + "moh_idp", + "phsa", + "profile", + "roles", + "web-origins", ] + id = (known after apply) + realm_id = "moh_applications" } # module.KEYCLOAK_DEV.module.moh_applications.module.PIDP-WEBAPP.keycloak_openid_client.CLIENT will be updated in-place ~ resource "keycloak_openid_client" "CLIENT" { id = "0a4aed42-f8c1-4004-8218-dc92b231dd70" + login_theme = "moh-app-realm-idp-restriction" # (24 unchanged attributes hidden) + authentication_flow_binding_overrides { + browser_id = "9caca0f9-1c0c-4def-85c6-637d1c8a4d24" } } # module.KEYCLOAK_DEV.module.moh_applications.module.PIDP-WEBAPP.keycloak_openid_client_default_scopes.client_default_scopes will be created + resource "keycloak_openid_client_default_scopes" "client_default_scopes" { + client_id = "0a4aed42-f8c1-4004-8218-dc92b231dd70" + default_scopes = [ + "bceid_business", + "bcsc", + "email", + "idir_aad", + "phsa", + "profile", + "roles", + "web-origins", ] + id = (known after apply) + realm_id = "moh_applications" } # module.KEYCLOAK_DEV.module.moh_applications.module.PLR.keycloak_openid_client_default_scopes.client_default_scopes will be updated in-place ~ resource "keycloak_openid_client_default_scopes" "client_default_scopes" { ~ default_scopes = [ - "idir", + "idir_aad", # (7 unchanged elements hidden) ] id = "moh_applications/dc7b9502-3ffa-4ff8-be2e-ebfebe650590" # (2 unchanged attributes hidden) } Plan: 2 to add, 7 to change, 0 to destroy. ───────────────────────────────────────────────────────────────────────────── Note: You didn't use the -out option to save this plan, so Terraform can't guarantee to take exactly these actions if you run "terraform apply" now. ```

Pushed by: @filipflorek, Action: pull_request

github-actions[bot] commented 1 month ago

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖success

Terraform Plan 📖success

Show Plan ``` # module.KEYCLOAK_DEV.module.moh_applications.module.FORMS.keycloak_openid_client.CLIENT will be updated in-place ~ resource "keycloak_openid_client" "CLIENT" { id = "a0e0b458-8e6f-493e-acfc-838d72514be8" + login_theme = "moh-app-realm-idp-restriction" name = "FORMS" # (25 unchanged attributes hidden) + authentication_flow_binding_overrides { + browser_id = "9caca0f9-1c0c-4def-85c6-637d1c8a4d24" } } # module.KEYCLOAK_DEV.module.moh_applications.module.FORMS.keycloak_openid_client_default_scopes.client_default_scopes will be updated in-place ~ resource "keycloak_openid_client_default_scopes" "client_default_scopes" { ~ default_scopes = [ + "idir_aad", + "phsa", # (4 unchanged elements hidden) ] id = "moh_applications/a0e0b458-8e6f-493e-acfc-838d72514be8" # (2 unchanged attributes hidden) } # module.KEYCLOAK_DEV.module.moh_applications.module.MSPDIRECT-WEB.keycloak_openid_client.CLIENT will be updated in-place ~ resource "keycloak_openid_client" "CLIENT" { id = "b69bc4b8-b36b-40e9-9a32-0096530d1e7c" + login_theme = "moh-app-realm-idp-restriction" name = "MSPDirect Dev" # (25 unchanged attributes hidden) + authentication_flow_binding_overrides { + browser_id = "9caca0f9-1c0c-4def-85c6-637d1c8a4d24" } } # module.KEYCLOAK_DEV.module.moh_applications.module.MSPDIRECT-WEB.keycloak_openid_client_default_scopes.client_default_scopes will be created + resource "keycloak_openid_client_default_scopes" "client_default_scopes" { + client_id = "b69bc4b8-b36b-40e9-9a32-0096530d1e7c" + default_scopes = [ + "bceid_business", + "bcsc_mspdirect", + "email", + "idir_aad", + "moh_idp", + "phsa", + "profile", + "roles", + "web-origins", ] + id = (known after apply) + realm_id = "moh_applications" } # module.KEYCLOAK_DEV.module.moh_applications.module.PIDP-WEBAPP.keycloak_openid_client.CLIENT will be updated in-place ~ resource "keycloak_openid_client" "CLIENT" { id = "0a4aed42-f8c1-4004-8218-dc92b231dd70" + login_theme = "moh-app-realm-idp-restriction" # (24 unchanged attributes hidden) + authentication_flow_binding_overrides { + browser_id = "9caca0f9-1c0c-4def-85c6-637d1c8a4d24" } } # module.KEYCLOAK_DEV.module.moh_applications.module.PIDP-WEBAPP.keycloak_openid_client_default_scopes.client_default_scopes will be created + resource "keycloak_openid_client_default_scopes" "client_default_scopes" { + client_id = "0a4aed42-f8c1-4004-8218-dc92b231dd70" + default_scopes = [ + "bceid_business", + "bcsc", + "email", + "idir_aad", + "phsa", + "profile", + "roles", + "web-origins", ] + id = (known after apply) + realm_id = "moh_applications" } # module.KEYCLOAK_DEV.module.moh_applications.module.PLR.keycloak_openid_client_default_scopes.client_default_scopes will be updated in-place ~ resource "keycloak_openid_client_default_scopes" "client_default_scopes" { ~ default_scopes = [ - "idir", + "idir_aad", # (7 unchanged elements hidden) ] id = "moh_applications/dc7b9502-3ffa-4ff8-be2e-ebfebe650590" # (2 unchanged attributes hidden) } Plan: 2 to add, 7 to change, 0 to destroy. ───────────────────────────────────────────────────────────────────────────── Note: You didn't use the -out option to save this plan, so Terraform can't guarantee to take exactly these actions if you run "terraform apply" now. ```

Pushed by: @filipflorek, Action: pull_request

github-actions[bot] commented 1 month ago

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖success

Terraform Plan 📖success

Show Plan ``` # module.KEYCLOAK_DEV.module.moh_applications.module.FORMS.keycloak_openid_client.CLIENT will be updated in-place ~ resource "keycloak_openid_client" "CLIENT" { id = "a0e0b458-8e6f-493e-acfc-838d72514be8" + login_theme = "moh-app-realm-idp-restriction" name = "FORMS" # (25 unchanged attributes hidden) + authentication_flow_binding_overrides { + browser_id = "9caca0f9-1c0c-4def-85c6-637d1c8a4d24" } } # module.KEYCLOAK_DEV.module.moh_applications.module.FORMS.keycloak_openid_client_default_scopes.client_default_scopes will be updated in-place ~ resource "keycloak_openid_client_default_scopes" "client_default_scopes" { ~ default_scopes = [ + "idir_aad", + "phsa", # (4 unchanged elements hidden) ] id = "moh_applications/a0e0b458-8e6f-493e-acfc-838d72514be8" # (2 unchanged attributes hidden) } # module.KEYCLOAK_DEV.module.moh_applications.module.MSPDIRECT-WEB.keycloak_openid_client.CLIENT will be updated in-place ~ resource "keycloak_openid_client" "CLIENT" { id = "b69bc4b8-b36b-40e9-9a32-0096530d1e7c" + login_theme = "moh-app-realm-idp-restriction" name = "MSPDirect Dev" # (25 unchanged attributes hidden) + authentication_flow_binding_overrides { + browser_id = "9caca0f9-1c0c-4def-85c6-637d1c8a4d24" } } # module.KEYCLOAK_DEV.module.moh_applications.module.MSPDIRECT-WEB.keycloak_openid_client_default_scopes.client_default_scopes will be created + resource "keycloak_openid_client_default_scopes" "client_default_scopes" { + client_id = "b69bc4b8-b36b-40e9-9a32-0096530d1e7c" + default_scopes = [ + "bceid_business", + "bcsc_mspdirect", + "email", + "idir_aad", + "moh_idp", + "phsa", + "profile", + "roles", + "web-origins", ] + id = (known after apply) + realm_id = "moh_applications" } # module.KEYCLOAK_DEV.module.moh_applications.module.PIDP-WEBAPP.keycloak_openid_client.CLIENT will be updated in-place ~ resource "keycloak_openid_client" "CLIENT" { id = "0a4aed42-f8c1-4004-8218-dc92b231dd70" + login_theme = "moh-app-realm-idp-restriction" # (24 unchanged attributes hidden) + authentication_flow_binding_overrides { + browser_id = "9caca0f9-1c0c-4def-85c6-637d1c8a4d24" } } # module.KEYCLOAK_DEV.module.moh_applications.module.PIDP-WEBAPP.keycloak_openid_client_default_scopes.client_default_scopes will be created + resource "keycloak_openid_client_default_scopes" "client_default_scopes" { + client_id = "0a4aed42-f8c1-4004-8218-dc92b231dd70" + default_scopes = [ + "bceid_business", + "bcsc", + "email", + "idir_aad", + "phsa", + "profile", + "roles", + "web-origins", ] + id = (known after apply) + realm_id = "moh_applications" } # module.KEYCLOAK_DEV.module.moh_applications.module.PLR.keycloak_openid_client_default_scopes.client_default_scopes will be updated in-place ~ resource "keycloak_openid_client_default_scopes" "client_default_scopes" { ~ default_scopes = [ - "idir", + "idir_aad", # (7 unchanged elements hidden) ] id = "moh_applications/dc7b9502-3ffa-4ff8-be2e-ebfebe650590" # (2 unchanged attributes hidden) } Plan: 2 to add, 7 to change, 0 to destroy. ───────────────────────────────────────────────────────────────────────────── Note: You didn't use the -out option to save this plan, so Terraform can't guarantee to take exactly these actions if you run "terraform apply" now. ```

Pushed by: @filipflorek, Action: pull_request