feat: add keycloak saml client for github enterprise cloud (#537)

liatrio · Oct 22, 2021 · 1e2aa2d · 1e2aa2d
1 parent 490cc66
commit 1e2aa2d
Show file tree

Hide file tree

Showing 11 changed files with 36 additions and 10 deletions.
diff --git a/modules/config/harbor/versions.tf b/modules/config/harbor/versions.tf
@@ -7,7 +7,7 @@ terraform {
  }
  keycloak = {
  source = "mrparkers/keycloak"
- version = "3.3.0"
+ version = "3.5.1"
  }
  helm = {
  source = "hashicorp/helm"

diff --git a/modules/config/keycloak/versions.tf b/modules/config/keycloak/versions.tf
@@ -9,7 +9,7 @@ terraform {
  }
  keycloak = {
  source = "mrparkers/keycloak"
- version = "= 3.3.0"
+ version = "3.5.1"
  }
  kubernetes = {
  source = "hashicorp/kubernetes"

diff --git a/modules/lead/product-jenkins/versions.tf b/modules/lead/product-jenkins/versions.tf
@@ -11,7 +11,7 @@ terraform {
  }
  keycloak = {
  source = "mrparkers/keycloak"
- version = "3.3.0"
+ version = "3.5.1"
  }
  kubernetes = {
  source = "hashicorp/kubernetes"

diff --git a/modules/lead/toolchain/versions.tf b/modules/lead/toolchain/versions.tf
@@ -13,7 +13,7 @@ terraform {
  }
  keycloak = {
  source = "mrparkers/keycloak"
- version = "3.3.0"
+ version = "3.5.1"
  }
  kubernetes = {
  source = "hashicorp/kubernetes"

diff --git a/stacks/product-jenkins/versions.tf b/stacks/product-jenkins/versions.tf
@@ -18,7 +18,7 @@ terraform {
 
  keycloak = {
  source = "mrparkers/keycloak"
- version = "3.3.0"
+ version = "3.5.1"
  }
 
  template = {

diff --git a/stages/apps/lead/versions.tf b/stages/apps/lead/versions.tf
@@ -15,7 +15,7 @@ terraform {
  }
  keycloak = {
  source = "mrparkers/keycloak"
- version = "3.3.0"
+ version = "3.5.1"
  }
  kubernetes = {
  source = "hashicorp/kubernetes"

diff --git a/stages/config/lead/versions.tf b/stages/config/lead/versions.tf
@@ -23,7 +23,7 @@ terraform {
  }
  keycloak = {
  source = "mrparkers/keycloak"
- version = "3.3.0"
+ version = "3.5.1"
  }
  template = {
  source = "hashicorp/template"

diff --git a/stages/config/sharedsvc/keycloak.tf b/stages/config/sharedsvc/keycloak.tf
@@ -51,3 +51,29 @@ resource "keycloak_openid_client" "sonarqube" {
  "https://${var.sonarqube_hostname}/oauth2/callback/oidc"
  ]
 }
+
+resource "keycloak_saml_client" "github_enterprise_cloud" {
+ realm_id = keycloak_realm.sharedsvc.id
+ client_id = "https://github.com/orgs/liatrio-cloud"
+
+ name = "github enterprise cloud"
+ enabled = true
+
+ include_authn_statement = true
+ sign_documents = true
+ sign_assertions = true
+ client_signature_required = false
+
+ signature_algorithm = "RSA_SHA256"
+ signature_key_name = "KEY_ID"
+
+ force_post_binding = true
+ front_channel_logout = true
+
+ name_id_format = "username"
+
+ valid_redirect_uris = [
+ "https://github.com/orgs/liatrio-cloud/*"
+ ]
+ master_saml_processing_url = "https://github.com/orgs/liatrio-cloud/saml/consume"
+}
diff --git a/stages/config/sharedsvc/versions.tf b/stages/config/sharedsvc/versions.tf
@@ -3,7 +3,7 @@ terraform {
  required_providers {
  keycloak = {
  source = "mrparkers/keycloak"
- version = "3.3.0"
+ version = "3.5.1"
  }
  sonarqube = {
  source = "jdamata/sonarqube"

diff --git a/stages/vault/sharedsvc/versions.tf b/stages/vault/sharedsvc/versions.tf
@@ -3,7 +3,7 @@ terraform {
  required_providers {
  keycloak = {
  source = "mrparkers/keycloak"
- version = "= 3.3.0"
+ version = "3.5.1"
  }
  vault = {
  source = "hashicorp/vault"

diff --git a/tests/testdata/config/harbor/versions.tf b/tests/testdata/config/harbor/versions.tf
@@ -7,7 +7,7 @@ terraform {
  }
  keycloak = {
  source = "mrparkers/keycloak"
- version = "3.3.0"
+ version = "3.5.1"
  }
  helm = {
  source = "hashicorp/helm"