You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
57 lines
1.9 KiB
YAML
57 lines
1.9 KiB
YAML
---
|
|
- name: "KEYCLOAK: DELETE clients | Authenticate with Keycloak server"
|
|
uri:
|
|
url: "{{ keycloak_server_url }}/auth/realms/master/protocol/openid-connect/token"
|
|
method: POST
|
|
body_format: form-urlencoded
|
|
body: 'username={{ keycloak_admin_username }}&password={{ keycloak_admin_password }}&client_id=admin-cli&grant_type=password'
|
|
retries: 5
|
|
delay: 5
|
|
register: keycloak_authentication
|
|
delegate_to: 127.0.0.1
|
|
become: false
|
|
|
|
- name: "KEYCLOAK: DELETE clients | Read clients from realm {{ current_realm_name }}"
|
|
uri:
|
|
url: "{{ keycloak_server_url }}/auth/admin/realms/{{ current_realm_name }}/clients"
|
|
method: GET
|
|
headers:
|
|
Authorization: "Bearer {{ keycloak_authentication.json.access_token }}"
|
|
status_code: [200]
|
|
register: realm_clients
|
|
delegate_to: 127.0.0.1
|
|
become: false
|
|
|
|
- name: "KEYCLOAK: DELETE clients | Save clients from realm as variable (fact)"
|
|
set_fact:
|
|
realm_clients_json: "{{ realm_clients.json }}"
|
|
delegate_to: 127.0.0.1
|
|
become: false
|
|
|
|
- name: "KEYCLOAK: DELETE clients | Save client ids from realm <{{ current_realm_name }}>"
|
|
set_fact:
|
|
realm_client_ids: "{{ realm_clients_json | json_query(jmesquery) }}"
|
|
vars:
|
|
jmesquery: '[*].{id: id, clientId: clientId}'
|
|
delegate_to: 127.0.0.1
|
|
become: false
|
|
|
|
- set_fact:
|
|
realm_client_id: '{{ realm_client_ids | selectattr("clientId", "equalto", cluster_name) }}'
|
|
delegate_to: 127.0.0.1
|
|
|
|
- assert:
|
|
that: 'realm_client_id | length == 1 '
|
|
|
|
- name: "KEYCLOAK: DELETE client <{{ client_id }}> for realm <{{ current_realm_name }}>"
|
|
uri:
|
|
url: "{{ keycloak_server_url }}/auth/admin/realms/{{ current_realm_name }}/clients/{{ realm_client_id[0].id }}"
|
|
method: DELETE
|
|
body_format: json
|
|
headers:
|
|
Authorization: "Bearer {{ keycloak_authentication.json.access_token }} "
|
|
status_code: [204]
|
|
changed_when: True
|
|
delegate_to: 127.0.0.1
|
|
become: false
|