Make admin account creation idempotent

molecule/default/molecule.yml

@@ -42,7 +42,7 @@ scenario:
     - create
     - prepare
     - converge
-#    - idempotence
+    - idempotence
     - side_effect
     - verify
     - cleanup

roles/keycloak/tasks/main.yml

@@ -8,7 +8,20 @@
 
 - include_tasks: tasks/install.yml
 
-## FIXME not idempotent (keyclock removes the file when it restarts)
+- include_tasks: tasks/systemd.yml
+
+- block:
+    - name: Check admin credentials by generating a token
+      uri:
+        url: "{{ keycloak_url }}/auth/realms/master/protocol/openid-connect/token"
+        method: POST
+        body: "client_id={{ keycloak_auth_client }}&username={{ keycloak_admin_user }}&password={{ keycloak_admin_password }}&grant_type=password"
+        validate_certs: no
+      register: keycloak_auth_response
+      until: keycloak_auth_response.status == 200
+      retries: 2
+      delay: 2
+  rescue:
     - name: create Keycloak admin user
       command:
       args:
@@ -17,7 +30,6 @@
           - -rmaster
           - -u{{ keycloak_admin_user }}
           - -p{{ keycloak_admin_password }}
-    creates: "{{ keycloak_config_dir }}/keycloak-add-user.json"
       become: yes
-
-- include_tasks: tasks/systemd.yml
+    - name: restart keycloak
+      include_tasks: tasks/restart_keycloak.yml