FEATURES:
- new resource:
keycloak_ldap_hardcoded_group_mapper
(#264) - new data source:
keycloak_saml_client_installation_provider
(#263) - new resource:
keycloak_ldap_role_mapper
(#265)
IMPROVEMENTS:
- add
tls_insecure_skip_verify
provider attribute (#237) - add
client_scope_id
attribute tokeycloak_generic_client_role_mapper
resource (#253) - add
email_verified
attribute tokeycloak_user
resource (#256) - add
JSON
as a validclaim_value_type
for openid protocol mapper resources (#260) - add
force_name_id_format
attribute tokeycloak_saml_client
resource (#261) - add
consent_required
andauthentication_flow_binding_overrides
attributes forkeycloak_openid_client
resource (#262) - add
root_url
attribute tokeycloak_openid_client
resource (#248) - add federated identity support for
keycloak_user
resource (#274)
BUG FIXES:
- correctly handle manually deleted clients when refreshing a
keycloak_openid_client_default_scopes
resource (#252) - correctly handle manually deleted clients when refreshing a
keycloak_openid_client_optional_scopes
resource
BUG FIXES:
- fix: allow
defaultScope
andacceptsPromptNoneForwardFromClient
attributes to be set forkeycloak_oidc_identity_provider
. Previously, these attributes could only be set viaextra_config
, which stopped working as of v1.17.0. This release introduces these attributes as top-level attributes for thekeycloak_oidc_identity_provider
resource.
FEATURES:
- new resources:
keycloak_authentication_flow
,keycloak_authentication_subflow
,keycloak_authentication_execution
(#215) - new resource:
keycloak_authentication_execution_config
(#241) - new resource:
keycloak_oidc_google_identity_provider
(#240) - new resource:
keycloak_ldap_msad_user_account_control_mapper
(#244) - new resources:
keycloak_openid_client_group_policy
,keycloak_openid_client_role_policy
,keycloak_openid_client_aggregate_policy
,keycloak_openid_client_js_policy
,keycloak_openid_client_time_policy
,keycloak_openid_client_user_policy
,keycloak_openid_client_client_policy
(#246) - new resource:
keycloak_generic_client_role_mapper
(#242)
IMPROVEMENTS:
- add
client_scope_id
attribute tokeycloak_generic_client_protocol_mapper
resource (#229) - add
root_ca_certificate
attribute to provider config (#227) - add
scopes
attribute tokeycloak_openid_client_authorization_permission
resource (#220) - add
access_token_lifespan
attribute tokeycloak_openid_client
resource (#233)
FEATURES:
- new resource:
keycloak_realm_events
(#211) - new resource:
resource_keycloak_openid_client_service_account_role
(#202)
IMPROVEMENTS:
- add base_url attribute to
keycloak_openid_client
resource (#201) - allow configuration of the client timeout by an environment variable (#206)
- adds consent_required attribute to
keycloak_openid_client
resource (#207) - adds admin_url attribute to
keycloak_openid_client
resource (#203) - adds display_name_html attribute to
keycloak_realm
resource and data source (#209) - switch to terraform-plugin-sdk (#214)
BUG FIXES:
- URL encode role names to allow for special characters (#213)
FEATURES:
- new resource:
keycloak_ldap_hardcoded_role_mapper
(#195)
IMPROVEMENTS:
- add
full_scope_allowed
attribute tokeycloak_openid_client
resource (#193) - add
exclude_session_state_from_auth_response
attribute tokeycloak_openid_client
resource (#191) - allow empty value for
pkce_code_challenge_method
attribute onkeycloak_openid_client
resource (#198) - support attributes for
keycloak_group
resource (#199)
FEATURES:
- add
keycloak_openid_client_service_account_user
data source (#181) - add
keycloak_group
data source (#185)
IMPROVEMENTS:
- support Keycloak v8.0.0 (#183)
- new functionality for
keycloak_realm
: brute_force_detection, ssl_required, and custom attributes (#183) - allow you to prevent refresh token reuse with a new
revoke_refresh_token
attribute for thekeycloak_realm
resource (#183)- note: please refer to the docs for the new configuration values if you currently use
refresh_token_max_reuse
- note: please refer to the docs for the new configuration values if you currently use
BUG FIXES:
- fix: update Keycloak API call to handle groups with more than 100 members (#179)
BUG FIXES:
- correctly handle Keycloak role names that contain a forward slash (#175)
IMPROVEMENTS:
- use cookiejar for Keycloak API requests (#173)
IMPROVEMENTS:
- add
pkce_code_challenge_method
attribute forkeycloak_openid_client
resource (#170)
BUG FIXES:
- always use valid client secret for
keycloak_oidc_identity_provider
resource (#171) - fix state issues for
keycloak_openid_client_service_account_role
resource (#171)
BUG FIXES:
- fix required attribute for
keycloak_realm
data source (#166) - automatically retry role deletion if the first attempt fails (#168)
FEATURES:
- new resource:
keycloak_openid_user_realm_role_protocol_mapper
(#159) - new data source:
keycloak_realm
(#160)
IMPROVEMENTS:
- added
timeout
provider attribute (#155) - always export
serviceAccountId
forkeycloak_openid_client
resource (#162)
BUG FIXES:
- fix default value for
reset_credentials_flow
attribute inkeycloak_realm
resource (#158)
note: this release contains a bug in the keycloak_realm
resource that incorrectly sets the default attribute for reset_credentials_flow
to "registration"
. Please ensure that you set this attribute manually to override the incorrect default until a future release fixes this issue.
FEATURES:
- new resource:
keycloak_required_action
(#131) - new resource:
keycloak_default_groups
(#146) - new resources:
keycloak_role
,keycloak_group_roles
,keycloak_openid_hardcoded_role_protocol_mapper
(#143) - new data source:
keycloak_role
(#143)
IMPROVEMENTS:
- add
security_defences
attribute tokeycloak_realm
resource (#130) - support custom config for
keycloak_custom_user_federation
resource (#134) - add
initial_login
provider attribute to optionally avoid requests during provider setup (#136) - support custom config for
keycloak_oidc_identity_provider
resource (#137) - add
password_policy
attribute forkeycloak_realm
resource (#139) - add flow binding attributes for
keycloak_realm
resource (#140)
BUG FIXES:
- fix user attributes to handle attributes longer than 255 characters (#132)
- fix import for
keycloak_oidc_identity_provider
(#142)
FEATURES:
- add
full_scope_allowed
attribute tokeycloak_saml_client
resource (#118) - add
internationalization
attribute tokeycloak_realm
resource (#124) - add
smtp_server
attribute tokeycloak_realm
resource (#122)
IMPROVEMENTS:
- allow the provider to use a confidential client with the password grant (#114)
- update Terraform SDK to 0.12.1 (#120)
- bump dependency versions for custom user federation example (#121)
- add static binary to release for use within Alpine Docker iamges (#129)
FEATURES:
- new resources:
keycloak_openid_client_authorization_resource
,keycloak_openid_client_authorization_scope
,keycloak_openid_client_authorization_permission
,keycloak_openid_client_service_account_role
(#104)- note: docs for these resources will be released at a later date. for now, please refer to the source files.
- new data sources: keycloak_openid_client, keycloak_openid_client_authorization_policy (#104)
- note: docs for these data sources will be released at a later date. for now, please refer to the source files.
IMPROVEMENTS:
- chore: update provider SDK to 0.12 (#107)
- chore: support Keycloak v6.0.1 (#106)
- chore: renames provider resource/data files (#105)
FEATURES:
- new resources:
keycloak_identity_provider
and mappers (#92)- note: docs for these resources will be released at a later date. for now, please refer to the source files.
IMPROVEMENTS:
- new attributes added for
keycloak_saml_client
resource (#103)
FEATURES:
- new resource:
keycloak_openid_client_optional_scopes
(#96) - new resource:
keycloak_openid_audience_protocol_mapper
(#97)
FEATURES:
- adds support for non-master realms and resource owner password grant for Keycloak authentication (#88)
IMPROVEMENTS:
- support Keycloak v4.8.3.Final and Terraform v0.11.11 (#93)
BUG FIXES:
- handle 404 errors when reading a group for group memberships (#95)
FEATURES:
- new resource:
keycloak_saml_user_property_protocol_mapper
(#85)
FEATURES:
- new resource:
keycloak_saml_user_attribute_protocol_mapper
(#84)
FEATURES:
- new resource:
keycloak_saml_client
(#82)
IMPROVEMENTS:
- add validation for usernames to ensure they are always lowercase (#83)
IMPROVEMENTS:
BUG FIXES:
- ldap mappers: don't assume component fields are returned by Keycloak API (#80)
Initial Release!
Docs: https://mrparkers.github.io/terraform-provider-keycloak