2022-04-07 12:07:08 +00:00
|
|
|
argument_specs:
|
|
|
|
main:
|
|
|
|
options:
|
|
|
|
keycloak_quarkus_version:
|
|
|
|
# line 3 of defaults/main.yml
|
|
|
|
default: "17.0.1"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "keycloak.org package version"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_archive:
|
|
|
|
# line 4 of defaults/main.yml
|
|
|
|
default: "keycloak-{{ keycloak_quarkus_version }}.zip"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "keycloak install archive filename"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_download_url:
|
|
|
|
# line 5 of defaults/main.yml
|
|
|
|
default: "https://github.com/keycloak/keycloak/releases/download/{{ keycloak_quarkus_version }}/{{ keycloak_quarkus_archive }}"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Download URL for keycloak"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_installdir:
|
|
|
|
# line 6 of defaults/main.yml
|
|
|
|
default: "{{ keycloak_quarkus_dest }}/keycloak-{{ keycloak_quarkus_version }}"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Installation path"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_offline_install:
|
|
|
|
# line 9 of defaults/main.yml
|
|
|
|
default: false
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Perform an offline install"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "bool"
|
|
|
|
keycloak_quarkus_jvm_package:
|
|
|
|
# line 12 of defaults/main.yml
|
|
|
|
default: "java-11-openjdk-headless"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "RHEL java package runtime"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
2022-05-18 07:29:28 +00:00
|
|
|
keycloak_quarkus_java_home:
|
|
|
|
description: "JAVA_HOME of installed JRE, leave empty for using specified keycloak_jvm_package RPM path"
|
|
|
|
type: "str"
|
2022-04-07 12:07:08 +00:00
|
|
|
keycloak_quarkus_dest:
|
|
|
|
# line 13 of defaults/main.yml
|
|
|
|
default: "/opt/keycloak"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Installation root path"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_home:
|
|
|
|
# line 14 of defaults/main.yml
|
|
|
|
default: "{{ keycloak_quarkus_installdir }}"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Installation work directory"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_config_dir:
|
|
|
|
# line 15 of defaults/main.yml
|
|
|
|
default: "{{ keycloak_quarkus_home }}/conf"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Path for configuration"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_service_user:
|
|
|
|
# line 16 of defaults/main.yml
|
|
|
|
default: "keycloak"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Posix account username"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_service_group:
|
|
|
|
# line 17 of defaults/main.yml
|
|
|
|
default: "keycloak"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Posix account group"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_service_pidfile:
|
|
|
|
# line 18 of defaults/main.yml
|
|
|
|
default: "/run/keycloak.pid"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Pid file path for service"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_configure_firewalld:
|
|
|
|
# line 19 of defaults/main.yml
|
|
|
|
default: false
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Ensure firewalld is running and configure keycloak ports"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "bool"
|
|
|
|
keycloak_quarkus_admin_user:
|
|
|
|
# line 22 of defaults/main.yml
|
|
|
|
default: "admin"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Administration console user account"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_admin_pass:
|
|
|
|
# line 23 of defaults/main.yml
|
|
|
|
default: ""
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Password of console admin account"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_master_realm:
|
|
|
|
# line 24 of defaults/main.yml
|
|
|
|
default: "master"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Name for rest authentication realm"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_bind_address:
|
|
|
|
# line 27 of defaults/main.yml
|
|
|
|
default: "0.0.0.0"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Address for binding service ports"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_host:
|
|
|
|
# line 28 of defaults/main.yml
|
|
|
|
default: "localhost"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "hostname"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
2022-05-17 16:59:10 +00:00
|
|
|
keycloak_quarkus_http_enabled:
|
|
|
|
default: true
|
|
|
|
description: "Enable listener on HTTP port"
|
|
|
|
type: "bool"
|
2022-04-07 12:07:08 +00:00
|
|
|
keycloak_quarkus_http_port:
|
|
|
|
# line 29 of defaults/main.yml
|
|
|
|
default: 8080
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "HTTP port"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "int"
|
2022-05-17 16:59:10 +00:00
|
|
|
keycloak_quarkus_https_enabled:
|
|
|
|
default: false
|
|
|
|
description: "Enable listener on HTTPS port"
|
|
|
|
type: "bool"
|
|
|
|
keycloak_quarkus_key_file:
|
2022-06-30 14:22:58 +00:00
|
|
|
default: "{{ keycloak.home }}/conf/server.key.pem"
|
2022-05-17 16:59:10 +00:00
|
|
|
description: "The file path to a private key in PEM format"
|
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_cert_file:
|
2022-06-30 14:22:58 +00:00
|
|
|
default: "{{ keycloak.home }}/conf/server.crt.pem"
|
2022-05-17 16:59:10 +00:00
|
|
|
description: "The file path to a server certificate or certificate chain in PEM format"
|
|
|
|
type: "str"
|
2022-04-07 12:07:08 +00:00
|
|
|
keycloak_quarkus_https_port:
|
|
|
|
# line 30 of defaults/main.yml
|
|
|
|
default: 8443
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "HTTPS port"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "int"
|
|
|
|
keycloak_quarkus_ajp_port:
|
|
|
|
# line 31 of defaults/main.yml
|
|
|
|
default: 8009
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "AJP port"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "int"
|
|
|
|
keycloak_quarkus_jgroups_port:
|
|
|
|
# line 32 of defaults/main.yml
|
|
|
|
default: 7600
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "jgroups cluster tcp port"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "int"
|
|
|
|
keycloak_quarkus_java_opts:
|
|
|
|
# line 33 of defaults/main.yml
|
|
|
|
default: "-Xms1024m -Xmx2048m"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Additional JVM options"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_ha_enabled:
|
|
|
|
# line 36 of defaults/main.yml
|
|
|
|
default: false
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Enable auto configuration for database backend, clustering and remote caches on infinispan"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "bool"
|
|
|
|
keycloak_quarkus_db_enabled:
|
|
|
|
# line 38 of defaults/main.yml
|
|
|
|
default: "{{ True if keycloak_quarkus_ha_enabled else False }}"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Enable auto configuration for database backend"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_http_relative_path:
|
|
|
|
# line 41 of defaults/main.yml
|
|
|
|
default: "auth"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Service context path"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_frontend_url:
|
|
|
|
# line 41 of defaults/main.yml
|
|
|
|
default: "http://localhost:8080/auth"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Service public URL"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_metrics_enabled:
|
|
|
|
# line 43 of defaults/main.yml
|
|
|
|
default: false
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Whether to enable metrics"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "bool"
|
2022-05-17 16:59:10 +00:00
|
|
|
keycloak_quarkus_health_enabled:
|
|
|
|
default: true
|
|
|
|
description: "If the server should expose health check endpoints"
|
|
|
|
type: "bool"
|
2022-04-07 12:07:08 +00:00
|
|
|
keycloak_quarkus_ispn_user:
|
|
|
|
# line 46 of defaults/main.yml
|
|
|
|
default: "supervisor"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Username for connecting to infinispan"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_ispn_pass:
|
|
|
|
# line 47 of defaults/main.yml
|
|
|
|
default: "supervisor"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Password for connecting to infinispan"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_ispn_url:
|
|
|
|
# line 48 of defaults/main.yml
|
|
|
|
default: "localhost"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "URL for connecting to infinispan"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_ispn_sasl_mechanism:
|
|
|
|
# line 49 of defaults/main.yml
|
|
|
|
default: "SCRAM-SHA-512"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Infinispan auth mechanism"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_ispn_use_ssl:
|
|
|
|
# line 50 of defaults/main.yml
|
|
|
|
default: false
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Whether infinispan uses TLS connection"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "bool"
|
|
|
|
keycloak_quarkus_ispn_trust_store_path:
|
|
|
|
# line 52 of defaults/main.yml
|
|
|
|
default: "/etc/pki/java/cacerts"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Path to infinispan server trust certificate"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_ispn_trust_store_password:
|
|
|
|
# line 53 of defaults/main.yml
|
|
|
|
default: "changeit"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Password for infinispan certificate keystore"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_jdbc_engine:
|
|
|
|
# line 56 of defaults/main.yml
|
|
|
|
default: "postgres"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Database engine [mariadb,postres]"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_db_user:
|
|
|
|
# line 58 of defaults/main.yml
|
|
|
|
default: "keycloak-user"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "User for database connection"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_db_pass:
|
|
|
|
# line 59 of defaults/main.yml
|
|
|
|
default: "keycloak-pass"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Password for database connection"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_jdbc_url:
|
|
|
|
# line 60 of defaults/main.yml
|
|
|
|
default: "{{ keycloak_quarkus_default_jdbc[keycloak_quarkus_jdbc_engine].url }}"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "JDBC URL for connecting to database"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
|
|
|
keycloak_quarkus_jdbc_driver_version:
|
|
|
|
# line 61 of defaults/main.yml
|
|
|
|
default: "{{ keycloak_quarkus_default_jdbc[keycloak_quarkus_jdbc_engine].version }}"
|
2022-04-11 11:48:59 +00:00
|
|
|
description: "Version for JDBC driver"
|
2022-04-07 12:07:08 +00:00
|
|
|
type: "str"
|
2022-05-17 16:59:10 +00:00
|
|
|
keycloak_quarkus_log:
|
|
|
|
default: "file"
|
|
|
|
type: "str"
|
|
|
|
description: "Enable one or more log handlers in a comma-separated list"
|
|
|
|
keycloak_quarkus_log_level:
|
|
|
|
default: "info"
|
|
|
|
type: "str"
|
|
|
|
description: "The log level of the root category or a comma-separated list of individual categories and their levels"
|
|
|
|
keycloak_quarkus_log_file:
|
|
|
|
default: "data/log/keycloak.log"
|
|
|
|
type: "str"
|
|
|
|
description: "Set the log file path and filename relative to keycloak home"
|
|
|
|
keycloak_quarkus_log_format:
|
|
|
|
default: '%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n'
|
|
|
|
type: "str"
|
|
|
|
description: "Set a format specific to file log entries"
|
2022-05-18 08:05:34 +00:00
|
|
|
keycloak_quarkus_proxy_mode:
|
|
|
|
default: 'edge'
|
|
|
|
type: "str"
|
|
|
|
description: "The proxy address forwarding mode if the server is behind a reverse proxy"
|