Vht.ddlmZmZmZeZdZdZdZddl m Z m Z m Z m Z mZddlmZddlmZddlmZd Zed k(rey y ) )absolute_importdivisionprint_functionu module: keycloak_component short_description: Allows administration of Keycloak components using Keycloak API version_added: 10.0.0 description: - This module allows the administration of Keycloak components using the Keycloak REST API. It requires access to the REST API using OpenID Connect; the user connecting and the realm being used must have the requisite access rights. In a default Keycloak installation, C(admin-cli) and an C(admin) user would work, as would a separate realm definition with the scope tailored to your needs and a user having the expected roles. - The names of module options are snake_cased versions of the camelCase ones found in the Keycloak API and its documentation at U(https://www.keycloak.org/docs-api/latest/rest-api/index.html). Aliases are provided so camelCased versions can be used as well. attributes: check_mode: support: full diff_mode: support: full action_group: version_added: 10.2.0 options: state: description: - State of the Keycloak component. - On V(present), the component will be created (or updated if it exists already). - On V(absent), the component will be removed if it exists. choices: ['present', 'absent'] default: 'present' type: str name: description: - Name of the component to create. type: str required: true parent_id: description: - The parent_id of the component. In practice the ID (name) of the realm. type: str required: true provider_id: description: - The name of the "provider ID" for the key. type: str required: true provider_type: description: - The name of the "provider type" for the key. That is, V(org.keycloak.storage.UserStorageProvider), V(org.keycloak.userprofile.UserProfileProvider), ... - See U(https://www.keycloak.org/docs/latest/server_development/index.html#_providers). type: str required: true config: description: - Configuration properties for the provider. - Contents vary depending on the provider type. type: dict extends_documentation_fragment: - community.general.keycloak - community.general.keycloak.actiongroup_keycloak - community.general.attributes author: - Björn Bösel (@fivetide) a - name: Manage Keycloak User Storage Provider community.general.keycloak_component: auth_keycloak_url: http://localhost:8080/auth auth_username: keycloak auth_password: keycloak auth_realm: master name: my storage provider state: present parent_id: some_realm provider_id: my storage provider_type: "org.keycloak.storage.UserStorageProvider" config: myCustomKey: "my_custom_key" cachePolicy: "NO_CACHE" enabled: true av end_state: description: Representation of the keycloak_component after module execution. returned: on success type: dict contains: id: description: ID of the component. type: str returned: when O(state=present) sample: 5b7ec13f-99da-46ad-8326-ab4c73cf4ce4 name: description: Name of the component. type: str returned: when O(state=present) sample: mykey parentId: description: ID of the realm this key belongs to. type: str returned: when O(state=present) sample: myrealm providerId: description: The ID of the key provider. type: str returned: when O(state=present) sample: rsa providerType: description: The type of provider. type: str returned: when O(state=present) config: description: Component configuration. type: dict ) KeycloakAPIcamelkeycloak_argument_spec get_token KeycloakError) AnsibleModule) urlencode)deepcopyc ^ t}ttddddgtddtddtddtddtd }|j|t|dgd ggd gd d i}tdditii}i}i|d< t |j }t|}ttjddgz}|j D cgc]#} | |vr|j j| | %} } |j jd} i} i| d<| D]} | dk(r|j jdD]}g| dt|<|j jd|}t|trt|j!}n t|}| dt|j#||j j| }|| t| <t%| }|j jd}|j jd}|j jd}|j jd}|j jd}|j jd} |j jd}|j't)t| |}d}d}d|d<|D]}|d|k(s |d}|| d<||d<| j+D]8\}}||||<||||k7s|dk7s ||d||d||d z }d|d<:|dj+D]J\}} |d|xsg|d|<|d||d|k7s+|d!|d|d|d|d|d z }d|d<L|r|dk(r|drp|j.rt|||d"<|j0rd#|d$|j3d |d%<n5|j5| |d#|d&|j3d |d%<nd'|z|d%<||d(<n|r`|dk(r[|j.rt|i|d"<|j0rd|d<d)|z|d%<n|j7||d|d<d*|z|d%<i|d(<n{|s`|dk(r[|j.rti||d"<|j0rd|d<d+|z|d%<n|j9| |d|d<d,|z|d%<||d(<n|s|dk(rd|d<d-|z|d%<i|d(<|j:d.i|y#t $r&}|jt|Yd}~d}~wwxYwcc} w#t,$r g|d|<YwxYw)/Nstrpresentabsent)typedefaultchoicesT)rrequireddict)r)statename parent_id provider_id provider_typeconfig)token auth_realm auth_username auth_password)rrr refresh_tokenr) argument_specsupports_check_moderequired_one_ofrequired_together required_byF)beforeafter)changedmsg end_statediffr)r+rrrrforceenabledrr*idz: z -> z, zconfig.r-z Component z would be changed: r+z changed: zComponent %s was in syncr,zComponent %s would be deletedzComponent %s deletedzComponent %s would be createdzComponent %s createdzComponent %s not present)rrupdater r paramsr fail_jsonrrlistkeysgetr isinstanceboollowerappendr get_componentsr itemsKeyError_diff check_modestripupdate_componentdelete_componentcreate_component exit_json) r" meta_argsmoduleresultbefore_componentconnection_headerekcparams_to_ignorexcomponent_paramsr changesetcomponent_param config_param raw_valuevaluenew_param_valuechangeset_copyrr.rr/rrcurrent_components component_idchanges componentparampvs x/home/dcms/DCMS/lib/python3.12/site-packages/ansible_collections/community/general/plugins/modules/keycloak_component.pymainr_sK*,My9h:OP ut ,ED1ed35 I# /3-f,g/_.`(7'F F%R2DRTBGMMRVDW Xu 6$?F5M,{ %8+ <<!)9DF6N    $F9 ;tDF5M    i 8 $F9 2d;F5M { ey0 <<!>BF6N    $F9 ;tDF5M    9 5 $F9 2d;F5M,{ ex/!y2d;u  {Fvg %SV$$%:j 746$X.q17s0+U (VV V)V  VV,+V,__main__N) __future__rrrr __metaclass__ DOCUMENTATIONEXAMPLESRETURNUansible_collections.community.general.plugins.module_utils.identity.keycloak.keycloakrrrr r ansible.module_utils.basicr +ansible.module_utils.six.moves.urllib.parser copyr r___name__r1r^rlsYA@ C J $! F554Atn zFrk