2 ms·
I've terraformed the Keycloak end of this. I think MrParker's terraform provider might have actually become the default because it's GitHub location is redirect
by raffraffraff 2y ago
I've terraformed the Keycloak end of this. I think MrParker's terraform provider might have actually become the default because it's GitHub location is redirected under the Keycloak org. It's extremely good, and makes dealing with Keycloak a lot easier.
The Azure end is a pain and I leave that to someone else. (Sorry Pete)
- nunez 2y agoThat's good news. That provider is quite good and is 10000% easier than using kcadm.sh for everything. (I'm surprised the provider is as good as it is given how awful Keycloak's API docs are!)
- raffraffraff 2y agoMan, how true... There were one or two things that I wanted to do outside of Terraform because I didn't want secrets in the terraform state. This involved using terraform to execute a go binary with some parameters. The go program created SAML or OIDC clients, wrote the client ID/Secret to AWS Parameter Store and outputs an External Secrets manifest. Everything was easy apart from the Keycloak part. i ended up getting part of the answer on a Chinese blog which I had to Google Translate, and another on the postman docs (not the Keycloak docs)