Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Support for client profiles and policies #888

Open
TBeijen opened this issue Oct 20, 2023 · 1 comment · May be fixed by #910
Open

Support for client profiles and policies #888

TBeijen opened this issue Oct 20, 2023 · 1 comment · May be fixed by #910

Comments

@TBeijen
Copy link

TBeijen commented Oct 20, 2023

It looks like the provider does not support 'client profiles' and 'client policies', as can be found under realm settings.

  • Is this correct?
  • If so, what would it take to support this?

Relevant parts of REST API:

JSON fragment from export realm:

  "clientPolicies": {
    "policies": [
      {
        "name": "Client secret rotation",
        "enabled": true,
        "conditions": [
          {
            "condition": "client-roles",
            "configuration": {
              "is-negative-logic": "true",
              "roles": [
                "no-rotation"
              ]
            }
          }
        ],
        "profiles": [
          "Client secret rotation"
        ]
      }
    ]
  }
image
@TBeijen
Copy link
Author

TBeijen commented Dec 27, 2023

We found out the current provider actively removes any profile and policy that might exist.

Even though the fields are 'optional', as stated in the RealmRepresentation, and dedicated endpoints exist (see OP), including the profile and policy seems mandatory.

So the impact of this issue changes from 'not implemented by provider' to 'cannot use client profiles and policies'.

@yaron yaron linked a pull request Dec 28, 2023 that will close this issue
Open
@FWest98 FWest98 mentioned this issue Jan 5, 2024
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Add support for client policy and client profile on realms yaron/terraform-provider-keycloak
1 participant
@TBeijen