keycloak.openid.ClientServiceAccountRole

using System.Collections.Generic;
using Pulumi;
using Keycloak = Pulumi.Keycloak;

return await Deployment.RunAsync(() => 
{
    var realm = new Keycloak.Realm("realm", new()
    {
        RealmName = "my-realm",
        Enabled = true,
    });

    // client1 provides a role to other clients
    var client1 = new Keycloak.OpenId.Client("client1", new()
    {
        RealmId = realm.Id,
    });

    var client1Role = new Keycloak.Role("client1Role", new()
    {
        RealmId = realm.Id,
        ClientId = client1.Id,
        Description = "A role that client1 provides",
    });

    // client2 is assigned the role of client1
    var client2 = new Keycloak.OpenId.Client("client2", new()
    {
        RealmId = realm.Id,
        ServiceAccountsEnabled = true,
    });

    var client2ServiceAccountRole = new Keycloak.OpenId.ClientServiceAccountRole("client2ServiceAccountRole", new()
    {
        RealmId = realm.Id,
        ServiceAccountUserId = client2.ServiceAccountUserId,
        ClientId = client1.Id,
        Role = client1Role.Name,
    });

});

package main

import (
	"github.com/pulumi/pulumi-keycloak/sdk/v5/go/keycloak"
	"github.com/pulumi/pulumi-keycloak/sdk/v5/go/keycloak/openid"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		realm, err := keycloak.NewRealm(ctx, "realm", &keycloak.RealmArgs{
			Realm:   pulumi.String("my-realm"),
			Enabled: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		client1, err := openid.NewClient(ctx, "client1", &openid.ClientArgs{
			RealmId: realm.ID(),
		})
		if err != nil {
			return err
		}
		client1Role, err := keycloak.NewRole(ctx, "client1Role", &keycloak.RoleArgs{
			RealmId:     realm.ID(),
			ClientId:    client1.ID(),
			Description: pulumi.String("A role that client1 provides"),
		})
		if err != nil {
			return err
		}
		client2, err := openid.NewClient(ctx, "client2", &openid.ClientArgs{
			RealmId:                realm.ID(),
			ServiceAccountsEnabled: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		_, err = openid.NewClientServiceAccountRole(ctx, "client2ServiceAccountRole", &openid.ClientServiceAccountRoleArgs{
			RealmId:              realm.ID(),
			ServiceAccountUserId: client2.ServiceAccountUserId,
			ClientId:             client1.ID(),
			Role:                 client1Role.Name,
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.keycloak.Realm;
import com.pulumi.keycloak.RealmArgs;
import com.pulumi.keycloak.openid.Client;
import com.pulumi.keycloak.openid.ClientArgs;
import com.pulumi.keycloak.Role;
import com.pulumi.keycloak.RoleArgs;
import com.pulumi.keycloak.openid.ClientServiceAccountRole;
import com.pulumi.keycloak.openid.ClientServiceAccountRoleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var realm = new Realm("realm", RealmArgs.builder()        
            .realm("my-realm")
            .enabled(true)
            .build());

        var client1 = new Client("client1", ClientArgs.builder()        
            .realmId(realm.id())
            .build());

        var client1Role = new Role("client1Role", RoleArgs.builder()        
            .realmId(realm.id())
            .clientId(client1.id())
            .description("A role that client1 provides")
            .build());

        var client2 = new Client("client2", ClientArgs.builder()        
            .realmId(realm.id())
            .serviceAccountsEnabled(true)
            .build());

        var client2ServiceAccountRole = new ClientServiceAccountRole("client2ServiceAccountRole", ClientServiceAccountRoleArgs.builder()        
            .realmId(realm.id())
            .serviceAccountUserId(client2.serviceAccountUserId())
            .clientId(client1.id())
            .role(client1Role.name())
            .build());

    }
}

import pulumi
import pulumi_keycloak as keycloak

realm = keycloak.Realm("realm",
    realm="my-realm",
    enabled=True)
# client1 provides a role to other clients
client1 = keycloak.openid.Client("client1", realm_id=realm.id)
client1_role = keycloak.Role("client1Role",
    realm_id=realm.id,
    client_id=client1.id,
    description="A role that client1 provides")
# client2 is assigned the role of client1
client2 = keycloak.openid.Client("client2",
    realm_id=realm.id,
    service_accounts_enabled=True)
client2_service_account_role = keycloak.openid.ClientServiceAccountRole("client2ServiceAccountRole",
    realm_id=realm.id,
    service_account_user_id=client2.service_account_user_id,
    client_id=client1.id,
    role=client1_role.name)

import * as pulumi from "@pulumi/pulumi";
import * as keycloak from "@pulumi/keycloak";

const realm = new keycloak.Realm("realm", {
    realm: "my-realm",
    enabled: true,
});
// client1 provides a role to other clients
const client1 = new keycloak.openid.Client("client1", {realmId: realm.id});
const client1Role = new keycloak.Role("client1Role", {
    realmId: realm.id,
    clientId: client1.id,
    description: "A role that client1 provides",
});
// client2 is assigned the role of client1
const client2 = new keycloak.openid.Client("client2", {
    realmId: realm.id,
    serviceAccountsEnabled: true,
});
const client2ServiceAccountRole = new keycloak.openid.ClientServiceAccountRole("client2ServiceAccountRole", {
    realmId: realm.id,
    serviceAccountUserId: client2.serviceAccountUserId,
    clientId: client1.id,
    role: client1Role.name,
});

resources:
  realm:
    type: keycloak:Realm
    properties:
      realm: my-realm
      enabled: true
  # client1 provides a role to other clients
  client1:
    type: keycloak:openid:Client
    properties:
      realmId: ${realm.id}
  client1Role:
    type: keycloak:Role
    properties:
      realmId: ${realm.id}
      clientId: ${client1.id}
      description: A role that client1 provides
  # client2 is assigned the role of client1
  client2:
    type: keycloak:openid:Client
    properties:
      realmId: ${realm.id}
      serviceAccountsEnabled: true
  client2ServiceAccountRole:
    type: keycloak:openid:ClientServiceAccountRole
    properties:
      realmId: ${realm.id}
      serviceAccountUserId: ${client2.serviceAccountUserId}
      clientId: ${client1.id}
      role: ${client1Role.name}