You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
74 lines
2.0 KiB
YAML
74 lines
2.0 KiB
YAML
---
|
|
- name: "Reading users of realm {{ current_realm_name }}"
|
|
uri:
|
|
url: "{{ keycloak_server_url }}/auth/admin/realms/{{ current_realm_name }}/users"
|
|
method: GET
|
|
headers:
|
|
Authorization: "Bearer {{ access_token }} "
|
|
status_code: [200]
|
|
register: realm_users
|
|
delegate_to: 127.0.0.1
|
|
become: false
|
|
|
|
- name: "Printing realm users"
|
|
debug:
|
|
msg: "{{ realm_users }}"
|
|
delegate_to: 127.0.0.1
|
|
become: false
|
|
when:
|
|
- debug
|
|
|
|
- name: "Saving users of realm {{ current_realm_name }} as variable (fact)"
|
|
set_fact:
|
|
realm_users_json: "{{ realm_users.json }}"
|
|
delegate_to: 127.0.0.1
|
|
become: false
|
|
|
|
- name: "Reading user ids of realm {{ current_realm_name }}"
|
|
set_fact:
|
|
realm_user_usernames: "{{ realm_users_json | json_query(jmesquery) }}"
|
|
vars:
|
|
jmesquery: '[*].username'
|
|
delegate_to: 127.0.0.1
|
|
become: false
|
|
|
|
- name: "Printing usernames of realm {{ current_realm_name }}"
|
|
debug:
|
|
msg: "{{ realm_user_usernames }}"
|
|
delegate_to: 127.0.0.1
|
|
become: false
|
|
when:
|
|
- debug
|
|
|
|
- name: "Printing usernames for realm {{ current_realm_name }}"
|
|
debug:
|
|
msg: "{{ current_realm_admin_users }}"
|
|
delegate_to: 127.0.0.1
|
|
become: false
|
|
when:
|
|
- debug
|
|
|
|
- name: "Creating users for realm {{ current_realm_name }}"
|
|
uri:
|
|
url: "{{ keycloak_server_url }}/auth/admin/realms/{{ current_realm_name }}/users"
|
|
method: POST
|
|
body_format: json
|
|
body: "{{ lookup('template','keycloak-realm-create-user.json.j2') }}"
|
|
headers:
|
|
Content-Type: "application/json"
|
|
Authorization: "Bearer {{ access_token }}"
|
|
status_code: [201]
|
|
with_items: "{{ current_realm_admin_users }}"
|
|
when: current_realm_user.username not in realm_user_usernames
|
|
changed_when: True
|
|
loop_control:
|
|
loop_var: current_realm_user
|
|
delegate_to: 127.0.0.1
|
|
become: false
|
|
|
|
- name: "Adding admin users from realm {{ current_realm_name }}"
|
|
include_tasks: _configure_realm_admin_users.yml
|
|
with_items: "{{ current_realm_admin_users }}"
|
|
loop_control:
|
|
loop_var: current_realm_admin_user
|