Client Default Scopes
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as keycloak from "@pulumi/keycloak";
const realm = new keycloak.Realm("realm", {
realm: "my-realm",
enabled: true,
});
const client = new keycloak.openid.Client("client", {
realmId: realm.id,
clientId: "test-client",
accessType: "CONFIDENTIAL",
});
const clientScope = new keycloak.openid.ClientScope("client_scope", {
realmId: realm.id,
name: "test-client-scope",
});
const clientDefaultScopes = new keycloak.openid.ClientDefaultScopes("client_default_scopes", {
realmId: realm.id,
clientId: client.id,
defaultScopes: [
"profile",
"email",
"roles",
"web-origins",
clientScope.name,
],
});
Content copied to clipboard
import pulumi
import pulumi_keycloak as keycloak
realm = keycloak.Realm("realm",
realm="my-realm",
enabled=True)
client = keycloak.openid.Client("client",
realm_id=realm.id,
client_id="test-client",
access_type="CONFIDENTIAL")
client_scope = keycloak.openid.ClientScope("client_scope",
realm_id=realm.id,
name="test-client-scope")
client_default_scopes = keycloak.openid.ClientDefaultScopes("client_default_scopes",
realm_id=realm.id,
client_id=client.id,
default_scopes=[
"profile",
"email",
"roles",
"web-origins",
client_scope.name,
])
Content copied to clipboard
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Keycloak = Pulumi.Keycloak;
return await Deployment.RunAsync(() =>
{
var realm = new Keycloak.Realm("realm", new()
{
RealmName = "my-realm",
Enabled = true,
});
var client = new Keycloak.OpenId.Client("client", new()
{
RealmId = realm.Id,
ClientId = "test-client",
AccessType = "CONFIDENTIAL",
});
var clientScope = new Keycloak.OpenId.ClientScope("client_scope", new()
{
RealmId = realm.Id,
Name = "test-client-scope",
});
var clientDefaultScopes = new Keycloak.OpenId.ClientDefaultScopes("client_default_scopes", new()
{
RealmId = realm.Id,
ClientId = client.Id,
DefaultScopes = new[]
{
"profile",
"email",
"roles",
"web-origins",
clientScope.Name,
},
});
});
Content copied to clipboard
package main
import (
"github.com/pulumi/pulumi-keycloak/sdk/v6/go/keycloak"
"github.com/pulumi/pulumi-keycloak/sdk/v6/go/keycloak/openid"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
realm, err := keycloak.NewRealm(ctx, "realm", &keycloak.RealmArgs{
Realm: pulumi.String("my-realm"),
Enabled: pulumi.Bool(true),
})
if err != nil {
return err
}
client, err := openid.NewClient(ctx, "client", &openid.ClientArgs{
RealmId: realm.ID(),
ClientId: pulumi.String("test-client"),
AccessType: pulumi.String("CONFIDENTIAL"),
})
if err != nil {
return err
}
clientScope, err := openid.NewClientScope(ctx, "client_scope", &openid.ClientScopeArgs{
RealmId: realm.ID(),
Name: pulumi.String("test-client-scope"),
})
if err != nil {
return err
}
_, err = openid.NewClientDefaultScopes(ctx, "client_default_scopes", &openid.ClientDefaultScopesArgs{
RealmId: realm.ID(),
ClientId: client.ID(),
DefaultScopes: pulumi.StringArray{
pulumi.String("profile"),
pulumi.String("email"),
pulumi.String("roles"),
pulumi.String("web-origins"),
clientScope.Name,
},
})
if err != nil {
return err
}
return nil
})
}
Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.keycloak.Realm;
import com.pulumi.keycloak.RealmArgs;
import com.pulumi.keycloak.openid.Client;
import com.pulumi.keycloak.openid.ClientArgs;
import com.pulumi.keycloak.openid.ClientScope;
import com.pulumi.keycloak.openid.ClientScopeArgs;
import com.pulumi.keycloak.openid.ClientDefaultScopes;
import com.pulumi.keycloak.openid.ClientDefaultScopesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var realm = new Realm("realm", RealmArgs.builder()
.realm("my-realm")
.enabled(true)
.build());
var client = new Client("client", ClientArgs.builder()
.realmId(realm.id())
.clientId("test-client")
.accessType("CONFIDENTIAL")
.build());
var clientScope = new ClientScope("clientScope", ClientScopeArgs.builder()
.realmId(realm.id())
.name("test-client-scope")
.build());
var clientDefaultScopes = new ClientDefaultScopes("clientDefaultScopes", ClientDefaultScopesArgs.builder()
.realmId(realm.id())
.clientId(client.id())
.defaultScopes(
"profile",
"email",
"roles",
"web-origins",
clientScope.name())
.build());
}
}
Content copied to clipboard
resources:
realm:
type: keycloak:Realm
properties:
realm: my-realm
enabled: true
client:
type: keycloak:openid:Client
properties:
realmId: ${realm.id}
clientId: test-client
accessType: CONFIDENTIAL
clientScope:
type: keycloak:openid:ClientScope
name: client_scope
properties:
realmId: ${realm.id}
name: test-client-scope
clientDefaultScopes:
type: keycloak:openid:ClientDefaultScopes
name: client_default_scopes
properties:
realmId: ${realm.id}
clientId: ${client.id}
defaultScopes:
- profile
- email
- roles
- web-origins
- ${clientScope.name}
Content copied to clipboard
Import
This resource does not support import. Instead of importing, feel free to create this resource as if it did not already exist on the server.