Skip to content

Instantly share code, notes, and snippets.

@guerzon
Created November 5, 2020 09:26
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save guerzon/b43cf3843553d8c41356ec8c6feedf6a to your computer and use it in GitHub Desktop.
Save guerzon/b43cf3843553d8c41356ec8c6feedf6a to your computer and use it in GitHub Desktop.
Wednesday 04 November 2020 12:03:28 +0100 (0:00:00.067) 0:00:14.229 ****
redirecting (type: modules) ansible.builtin.keycloak_client to community.general.keycloak_client
Using module file /Users/workstation/.local/share/virtualenvs/ansible_project-6ES-zTZc/lib/python3.6/site-packages/ansible_collections/community/general/plugins/modules/keycloak_client.py
Pipelining is enabled.
<targetserver> ESTABLISH SSH CONNECTION FOR USER: root
<targetserver> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o 'User="root"' -o ConnectTimeout=10 -o ControlPath=/Users/workstation/.ansible/cp/205f67cdb9 targetserver '/bin/sh -c '"'"'/usr/bin/python && sleep 0'"'"''
<targetserver> (0, b'\n{"proposed": {"publicClient": false, "protocol": "openid-connect", "description": "awesomeapp Desktop Application OpenID client", "directAccessGrantsEnabled": true, "adminUrl": "https://keycloak.localdomain.lcl", "serviceAccountsEnabled": false, "rootUrl": "https://keycloak.localdomain.lcl", "enabled": true, "clientId": "awesome-app", "authorizationServicesEnabled": false, "implicitFlowEnabled": false, "standardFlowEnabled": true, "webOrigins": ["*"], "redirectUris": ["http://localhost:*", "https://keycloak.localdomain.lcl/*"], "consentRequired": false}, "changed": true, "existing": {"publicClient": false, "protocol": "openid-connect", "directAccessGrantsEnabled": true, "authenticationFlowBindingOverrides": {}, "defaultClientScopes": ["web-origins", "role_list", "profile", "roles", "email"], "nodeReRegistrationTimeout": -1, "id": "SOME-LONG-CLIENT-ID", "consentRequired": false, "rootUrl": "https://keycloak.localdomain.lcl", "optionalClientScopes": ["address", "phone", "offline_access", "microprofile-jwt"], "notBefore": 0, "access": {"manage": true, "configure": true, "view": true}, "webOrigins": ["*"], "bearerOnly": false, "description": "awesomeapp Desktop Application OpenID client", "serviceAccountsEnabled": false, "fullScopeAllowed": true, "attributes": {}, "redirectUris": ["http://localhost:*", "https://keycloak.localdomain.lcl/*"], "surrogateAuthRequired": false, "adminUrl": "https://keycloak.localdomain.lcl", "enabled": true, "clientId": "awesome-app", "frontchannelLogout": false, "implicitFlowEnabled": false, "standardFlowEnabled": true, "clientAuthenticatorType": "client-secret"}, "invocation": {"module_args": {"default_roles": null, "protocol": "openid-connect", "auth_client_secret": null, "auth_realm": "master", "authorization_settings": null, "frontchannel_logout": null, "use_template_scope": null, "registration_access_token": null, "authorization_services_enabled": false, "standard_flow_enabled": true, "auth_password": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER", "direct_access_grants_enabled": true, "id": null, "surrogate_auth_required": null, "implicit_flow_enabled": false, "node_re_registration_timeout": null, "auth_keycloak_url": "http://localhost:8080/auth", "root_url": "https://keycloak.localdomain.lcl", "realm": "awesomeapp", "base_url": null, "web_origins": ["*"], "full_scope_allowed": null, "state": "present", "bearer_only": null, "not_before": null, "use_template_config": null, "redirect_uris": ["http://localhost:*", "https://keycloak.localdomain.lcl/*"], "description": "awesomeapp Desktop Application OpenID client", "registered_nodes": null, "service_accounts_enabled": false, "client_id": "awesome-app", "auth_username": "admin", "public_client": false, "auth_client_id": "admin-cli", "name": null, "client_authenticator_type": null, "admin_url": "https://keycloak.localdomain.lcl", "enabled": true, "secret": null, "protocol_mappers": null, "client_template": null, "use_template_mappers": null, "attributes": null, "validate_certs": true, "consent_required": false}}, "end_state": {}, "msg": "", "diff": {"after": {"publicClient": false, "protocol": "openid-connect", "directAccessGrantsEnabled": true, "enabled": true, "defaultClientScopes": ["web-origins", "role_list", "profile", "roles", "email"], "nodeReRegistrationTimeout": -1, "id": "SOME-LONG-CLIENT-ID", "consentRequired": false, "rootUrl": "https://keycloak.localdomain.lcl", "optionalClientScopes": ["address", "phone", "offline_access", "microprofile-jwt"], "notBefore": 0, "authorizationServicesEnabled": false, "access": {"manage": true, "configure": true, "view": true}, "webOrigins": ["*"], "bearerOnly": false, "description": "awesomeapp Desktop Application OpenID client", "serviceAccountsEnabled": false, "fullScopeAllowed": true, "attributes": {}, "redirectUris": ["http://localhost:*", "https://keycloak.localdomain.lcl/*"], "surrogateAuthRequired": false, "adminUrl": "https://keycloak.localdomain.lcl", "authenticationFlowBindingOverrides": {}, "clientId": "awesome-app", "frontchannelLogout": false, "implicitFlowEnabled": false, "standardFlowEnabled": true, "clientAuthenticatorType": "client-secret"}, "before": {"publicClient": false, "protocol": "openid-connect", "directAccessGrantsEnabled": true, "authenticationFlowBindingOverrides": {}, "defaultClientScopes": ["web-origins", "role_list", "profile", "roles", "email"], "nodeReRegistrationTimeout": -1, "id": "SOME-LONG-CLIENT-ID", "consentRequired": false, "rootUrl": "https://keycloak.localdomain.lcl", "optionalClientScopes": ["address", "phone", "offline_access", "microprofile-jwt"], "notBefore": 0, "access": {"manage": true, "configure": true, "view": true}, "webOrigins": ["*"], "bearerOnly": false, "description": "awesomeapp Desktop Application OpenID client", "serviceAccountsEnabled": false, "fullScopeAllowed": true, "attributes": {}, "redirectUris": ["http://localhost:*", "https://keycloak.localdomain.lcl/*"], "surrogateAuthRequired": false, "adminUrl": "https://keycloak.localdomain.lcl", "enabled": true, "clientId": "awesome-app", "frontchannelLogout": false, "implicitFlowEnabled": false, "standardFlowEnabled": true, "clientAuthenticatorType": "client-secret"}}}\n', b'')
--- before
+++ after
@@ -7,6 +7,7 @@
"adminUrl": "https://keycloak.localdomain.lcl",
"attributes": {},
"authenticationFlowBindingOverrides": {},
+ "authorizationServicesEnabled": false,
"bearerOnly": false,
"clientAuthenticatorType": "client-secret",
"clientId": "awesome-app",
changed: [targetserver] => {
"changed": true,
"diff": {
"after": {
"access": {
"configure": true,
"manage": true,
"view": true
},
"adminUrl": "https://keycloak.localdomain.lcl",
"attributes": {},
"authenticationFlowBindingOverrides": {},
"authorizationServicesEnabled": false,
"bearerOnly": false,
"clientAuthenticatorType": "client-secret",
"clientId": "awesome-app",
"consentRequired": false,
"defaultClientScopes": [
"web-origins",
"role_list",
"profile",
"roles",
"email"
],
"description": "awesomeapp Desktop Application OpenID client",
"directAccessGrantsEnabled": true,
"enabled": true,
"frontchannelLogout": false,
"fullScopeAllowed": true,
"id": "SOME-LONG-CLIENT-ID",
"implicitFlowEnabled": false,
"nodeReRegistrationTimeout": -1,
"notBefore": 0,
"optionalClientScopes": [
"address",
"phone",
"offline_access",
"microprofile-jwt"
],
"protocol": "openid-connect",
"publicClient": false,
"redirectUris": [
"http://localhost:*",
"https://keycloak.localdomain.lcl/*"
],
"rootUrl": "https://keycloak.localdomain.lcl",
"serviceAccountsEnabled": false,
"standardFlowEnabled": true,
"surrogateAuthRequired": false,
"webOrigins": [
"*"
]
},
"before": {
"access": {
"configure": true,
"manage": true,
"view": true
},
"adminUrl": "https://keycloak.localdomain.lcl",
"attributes": {},
"authenticationFlowBindingOverrides": {},
"bearerOnly": false,
"clientAuthenticatorType": "client-secret",
"clientId": "awesome-app",
"consentRequired": false,
"defaultClientScopes": [
"web-origins",
"role_list",
"profile",
"roles",
"email"
],
"description": "awesomeapp Desktop Application OpenID client",
"directAccessGrantsEnabled": true,
"enabled": true,
"frontchannelLogout": false,
"fullScopeAllowed": true,
"id": "SOME-LONG-CLIENT-ID",
"implicitFlowEnabled": false,
"nodeReRegistrationTimeout": -1,
"notBefore": 0,
"optionalClientScopes": [
"address",
"phone",
"offline_access",
"microprofile-jwt"
],
"protocol": "openid-connect",
"publicClient": false,
"redirectUris": [
"http://localhost:*",
"https://keycloak.localdomain.lcl/*"
],
"rootUrl": "https://keycloak.localdomain.lcl",
"serviceAccountsEnabled": false,
"standardFlowEnabled": true,
"surrogateAuthRequired": false,
"webOrigins": [
"*"
]
}
},
"end_state": {},
"existing": {
"access": {
"configure": true,
"manage": true,
"view": true
},
"adminUrl": "https://keycloak.localdomain.lcl",
"attributes": {},
"authenticationFlowBindingOverrides": {},
"bearerOnly": false,
"clientAuthenticatorType": "client-secret",
"clientId": "awesome-app",
"consentRequired": false,
"defaultClientScopes": [
"web-origins",
"role_list",
"profile",
"roles",
"email"
],
"description": "awesomeapp Desktop Application OpenID client",
"directAccessGrantsEnabled": true,
"enabled": true,
"frontchannelLogout": false,
"fullScopeAllowed": true,
"id": "SOME-LONG-CLIENT-ID",
"implicitFlowEnabled": false,
"nodeReRegistrationTimeout": -1,
"notBefore": 0,
"optionalClientScopes": [
"address",
"phone",
"offline_access",
"microprofile-jwt"
],
"protocol": "openid-connect",
"publicClient": false,
"redirectUris": [
"http://localhost:*",
"https://keycloak.localdomain.lcl/*"
],
"rootUrl": "https://keycloak.localdomain.lcl",
"serviceAccountsEnabled": false,
"standardFlowEnabled": true,
"surrogateAuthRequired": false,
"webOrigins": [
"*"
]
},
"invocation": {
"module_args": {
"admin_url": "https://keycloak.localdomain.lcl",
"attributes": null,
"auth_client_id": "admin-cli",
"auth_client_secret": null,
"auth_keycloak_url": "http://localhost:8080/auth",
"auth_password": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER",
"auth_realm": "master",
"auth_username": "admin",
"authorization_services_enabled": false,
"authorization_settings": null,
"base_url": null,
"bearer_only": null,
"client_authenticator_type": null,
"client_id": "awesome-app",
"client_template": null,
"consent_required": false,
"default_roles": null,
"description": "awesomeapp Desktop Application OpenID client",
"direct_access_grants_enabled": true,
"enabled": true,
"frontchannel_logout": null,
"full_scope_allowed": null,
"id": null,
"implicit_flow_enabled": false,
"name": null,
"node_re_registration_timeout": null,
"not_before": null,
"protocol": "openid-connect",
"protocol_mappers": null,
"public_client": false,
"realm": "awesomeapp",
"redirect_uris": [
"http://localhost:*",
"https://keycloak.localdomain.lcl/*"
],
"registered_nodes": null,
"registration_access_token": null,
"root_url": "https://keycloak.localdomain.lcl",
"secret": null,
"service_accounts_enabled": false,
"standard_flow_enabled": true,
"state": "present",
"surrogate_auth_required": null,
"use_template_config": null,
"use_template_mappers": null,
"use_template_scope": null,
"validate_certs": true,
"web_origins": [
"*"
]
}
},
"msg": "",
"proposed": {
"adminUrl": "https://keycloak.localdomain.lcl",
"authorizationServicesEnabled": false,
"clientId": "awesome-app",
"consentRequired": false,
"description": "awesomeapp Desktop Application OpenID client",
"directAccessGrantsEnabled": true,
"enabled": true,
"implicitFlowEnabled": false,
"protocol": "openid-connect",
"publicClient": false,
"redirectUris": [
"http://localhost:*",
"https://keycloak.localdomain.lcl/*"
],
"rootUrl": "https://keycloak.localdomain.lcl",
"serviceAccountsEnabled": false,
"standardFlowEnabled": true,
"webOrigins": [
"*"
]
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment