computer-playbook

mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2025-08-15 08:30:46 +02:00

History

keycloak: robust LDAP bind and connectionUrl update via kcadm (argv + JSON); strict ldap.*; idempotent

Switch to command:argv to avoid shell quoting and argument splitting issues.

Pass -s config values as JSON arrays via to_json, fixing previous errors: Cannot parse the JSON / failed at splitting arguments.

Also reconcile config.connectionUrl from ldap.server.uri.

Source desired values strictly from ldap.* (no computed defaults) and assert their presence.

Keep operation idempotent by reading current values and updating only on change.

Minor refactor: build reusable kcadm_argv_base and expand client state extraction.

Touch: roles/web-app-keycloak/tasks/03_update-ldap-bind.yml

https://chatgpt.com/share/689bea84-7188-800f-ba51-830a0735f24c

2025-08-13 03:30:14 +02:00

01_import.yml

ansible: quote file modes; keycloak: robust LDAP bind update + config cleanup

2025-08-13 02:20:38 +02:00

02_update_client_redirects.yml

ansible: quote file modes; keycloak: robust LDAP bind update + config cleanup

2025-08-13 02:20:38 +02:00

03_update-ldap-bind.yml

keycloak: robust LDAP bind and connectionUrl update via kcadm (argv + JSON); strict ldap.*; idempotent

2025-08-13 03:30:14 +02:00

04_ssh_public_key.yml

ansible: quote file modes; keycloak: robust LDAP bind update + config cleanup