pulumi / pulumi-keycloak

A KeyCloak Pulumi resource package, providing multi-language access to KeyCloak
Apache License 2.0
35 stars 6 forks source link

Support multivalued attributes in Roles #499

Closed ChristianRaoulis closed 3 weeks ago

ChristianRaoulis commented 1 month ago

Hello!

Issue details

It is possible to create multiple attributes with the same key and different values on one role in keycloak. Sadly the pulumi keycloak provider only supports single values.

// Invalid since attributes need to be strings
attributes:  {
  rabbitmq: [
    "rabbitmq.tag:administrator",
    "rabbitmq.read:*/*",
    "rabbitmq.configure:*/*",
    "rabbitmq.write:*/*",
  ],
},
// Invalid since you can not define the same key multiple times in typescript
attributes:  {
  rabbitmq: "rabbitmq.tag:administrator",
  rabbitmq: "rabbitmq.read:*/*"",
  rabbitmq: "rabbitmq.configure:*/*",
  rabbitmq: "rabbitmq.write:*/*",
},

it would be nice if multiple values per attribute keys would get supported.

Affected area/feature

iwahbe commented 1 month ago

Hey @ChristianRaoulis. Thanks for filing an issue. This provider is generated from terraform-provider-keycloak, so we support the same set of properties that they do. I would recommend opening an issue upstream here.

ChristianRaoulis commented 3 weeks ago

I figured out that multivalued attributes can be defined using value1##value2 strings