Man, how true... There were one or two things that I wanted to do outside of Terraform because I didn't want secrets in the terraform state. This involved using

Man, how true... There were one or two things that I wanted to do outside of Terraform because I didn't want secrets in the terraform state. This involved using terraform to execute a go binary with some parameters. The go program created SAML or OIDC clients, wrote the client ID/Secret to AWS Parameter Store and outputs an External Secrets manifest. Everything was easy apart from the Keycloak part. i ended up getting part of the answer on a Chinese blog which I had to Google Translate, and another on the postman docs (not the Keycloak docs)