Kevin Veen-Birkenbach 6fcf6a1ab6 feat(keycloak): add automation service account client support ...

Introduce a confidential service-account client (Option A) to replace user-based
kcadm sessions. The client is created automatically, granted realm-admin role,
and used for all subsequent Keycloak updates. Includes improved error handling
for HTTP 401 responses.

Discussion: https://chatgpt.com/share/68e01da3-39fc-800f-81be-2d0c8efd81a1

2025-10-03 21:02:16 +02:00

..

_update.yml

keycloak(role): add realm support to generic updater

2025-08-28 08:57:29 +02:00

01_meta.yml

feat(ai): introduce dedicated AI roles and wiring; clean up legacy AI stack

2025-09-22 18:40:20 +02:00

02_cleanup.yml

Fix RBAC groups handling and refactor Keycloak role

2025-08-17 23:27:01 +02:00

03_init.yml

Fix RBAC groups handling and refactor Keycloak role

2025-08-17 23:27:01 +02:00

04_dependencies.yml

Refactor: migrate cmp/* and srv/* roles into sys-stk/* and sys-svc/* namespaces

2025-08-28 22:23:09 +02:00

05_rbac_client_scope.yml

feat(keycloak): add automation service account client support

2025-10-03 21:02:16 +02:00

05a_service_account.yml

feat(keycloak): add automation service account client support

2025-10-03 21:02:16 +02:00

06_ldap.yml

refactor: improve service handling and introduce MODE_ASSERT

2025-08-19 19:02:52 +02:00

main.yml

feat(keycloak): add automation service account client support

2025-10-03 21:02:16 +02:00

TODO.md

Enforce uppercase README.md and TODO.md filenames

2025-08-29 18:11:53 +02:00