Extend ansible role with tasks for realm configuration

NicolasLiampotis commented 3 years ago

[x] Add social IdP configuration
[x] Add AUP configuration
[x] Add SAML key signing/encryption (allow specifying use and key format e.g. trustore)
[x] Add SMTP configuration

laskasn commented 3 years ago

The Keycloak has only the following two plugins for configuring the realm parameters:

community.general keycloak modules
elfelip.keycloak which seems to be not actively supported

The plugins do use the rest (admin) interface, and, apparently, expects java stub objects which are susceptible to minor changes from version to version. So, i believe that the second one (elfelip.keycloak), which is not actively supported, if not already broken, it might break up soon. NOTE: elfelip.keycloak was developed against Keycloak versions 8.0.2 and 9.0.2 (we're at 14.0.0 now)

The community plugin seems able to configure only the smtp configuration, however, for all the above objectives, the only sure way is by writing custom tasks which will use the admin REST API. Maintaining such a playbook might prove quite a task, since it should follow all the changes of the API stub objects from version to version in order not to break.

laskasn commented 3 years ago

Updated the keys configuration. Now it's possible to specify any key type in the configuration. Please, find the new pull requests

eosc-kc / keycloak

Extend ansible role with tasks for realm configuration #99