epam / edp-keycloak-operator

It is responsible for establishing a connection to provided Keycloak Server, reconciling realms, and clients according to the created CRs
https://docs.kuberocketci.io
Apache License 2.0
34 stars 20 forks source link

Add the ability to manage KeycloakRealm Attributes #85

Open dougkirkley opened 2 months ago

dougkirkley commented 2 months ago

Is your feature request related to a problem? Please describe. There are two requests in one here, there is an Unmanaged Attributes flag to enable the ability to add attributes to users. There is also User Profile Attributes which is the structured version that can add specific keys with different permissions on who can set/view them.

Describe the solution you'd like It would be nice to have the ability to enable the Unamanged Attributes via the KeycloakRealm as well as manage the User Profile Attributes.

Describe alternatives you've considered No alternatives

Additional context Unmanaged Attributes in Realm Settings

Screenshot 2024-07-24 at 9 29 21 PM

User Profile Attributes in Realm Settings

Screenshot 2024-07-24 at 9 49 55 PM

dougkirkley commented 2 months ago

@zmotso I did a little bit of research on this and it sadly looks like gocloak doesn't have support for either of these in their repo yet, they must have been added in Keycloak 25.x. Not sure if we can get away with using our own Realm Representation and other types to handle the User Profile pieces here.