Keycloak
getClientInstallationProvider
This data source can be used to retrieve Installation Provider of a SAML Client.
Example Usage
using System.IO;
using Pulumi;
using Aws = Pulumi.Aws;
using Keycloak = Pulumi.Keycloak;
class MyStack : Stack
{
public MyStack()
{
var realm = new Keycloak.Realm("realm", new Keycloak.RealmArgs
{
Realm = "my-realm",
Enabled = true,
});
var samlClient = new Keycloak.Saml.Client("samlClient", new Keycloak.Saml.ClientArgs
{
RealmId = realm.Id,
ClientId = "test-saml-client",
SignDocuments = false,
SignAssertions = true,
IncludeAuthnStatement = true,
SigningCertificate = File.ReadAllText("saml-cert.pem"),
SigningPrivateKey = File.ReadAllText("saml-key.pem"),
});
var samlIdpDescriptor = Keycloak.Saml.GetClientInstallationProvider.Invoke(new Keycloak.Saml.GetClientInstallationProviderInvokeArgs
{
RealmId = realm.Id,
ClientId = samlClient.Id,
ProviderId = "saml-idp-descriptor",
});
var @default = new Aws.Iam.SamlProvider("default", new Aws.Iam.SamlProviderArgs
{
SamlMetadataDocument = samlIdpDescriptor.Apply(samlIdpDescriptor => samlIdpDescriptor.Value),
});
}
}
package main
import (
"io/ioutil"
"github.com/pulumi/pulumi-aws/sdk/v4/go/aws/iam"
"github.com/pulumi/pulumi-keycloak/sdk/v4/go/keycloak"
"github.com/pulumi/pulumi-keycloak/sdk/v4/go/keycloak/saml"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func readFileOrPanic(path string) pulumi.StringPtrInput {
data, err := ioutil.ReadFile(path)
if err != nil {
panic(err.Error())
}
return pulumi.String(string(data))
}
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
realm, err := keycloak.NewRealm(ctx, "realm", &keycloak.RealmArgs{
Realm: pulumi.String("my-realm"),
Enabled: pulumi.Bool(true),
})
if err != nil {
return err
}
samlClient, err := saml.NewClient(ctx, "samlClient", &saml.ClientArgs{
RealmId: realm.ID(),
ClientId: pulumi.String("test-saml-client"),
SignDocuments: pulumi.Bool(false),
SignAssertions: pulumi.Bool(true),
IncludeAuthnStatement: pulumi.Bool(true),
SigningCertificate: readFileOrPanic("saml-cert.pem"),
SigningPrivateKey: readFileOrPanic("saml-key.pem"),
})
if err != nil {
return err
}
samlIdpDescriptor := saml.GetClientInstallationProviderOutput(ctx, saml.GetClientInstallationProviderOutputArgs{
RealmId: realm.ID(),
ClientId: samlClient.ID(),
ProviderId: pulumi.String("saml-idp-descriptor"),
}, nil)
_, err = iam.NewSamlProvider(ctx, "default", &iam.SamlProviderArgs{
SamlMetadataDocument: samlIdpDescriptor.ApplyT(func(samlIdpDescriptor saml.GetClientInstallationProviderResult) (string, error) {
return samlIdpDescriptor.Value, nil
}).(pulumi.StringOutput),
})
if err != nil {
return err
}
return nil
})
}
Coming soon!
import pulumi
import pulumi_aws as aws
import pulumi_keycloak as keycloak
realm = keycloak.Realm("realm",
realm="my-realm",
enabled=True)
saml_client = keycloak.saml.Client("samlClient",
realm_id=realm.id,
client_id="test-saml-client",
sign_documents=False,
sign_assertions=True,
include_authn_statement=True,
signing_certificate=(lambda path: open(path).read())("saml-cert.pem"),
signing_private_key=(lambda path: open(path).read())("saml-key.pem"))
saml_idp_descriptor = keycloak.saml.get_client_installation_provider_output(realm_id=realm.id,
client_id=saml_client.id,
provider_id="saml-idp-descriptor")
default = aws.iam.SamlProvider("default", saml_metadata_document=saml_idp_descriptor.value)
import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
import * as keycloak from "@pulumi/keycloak";
import * from "fs";
const realm = new keycloak.Realm("realm", {
realm: "my-realm",
enabled: true,
});
const samlClient = new keycloak.saml.Client("samlClient", {
realmId: realm.id,
clientId: "test-saml-client",
signDocuments: false,
signAssertions: true,
includeAuthnStatement: true,
signingCertificate: fs.readFileSync("saml-cert.pem"),
signingPrivateKey: fs.readFileSync("saml-key.pem"),
});
const samlIdpDescriptor = keycloak.saml.getClientInstallationProviderOutput({
realmId: realm.id,
clientId: samlClient.id,
providerId: "saml-idp-descriptor",
});
const _default = new aws.iam.SamlProvider("default", {samlMetadataDocument: samlIdpDescriptor.apply(samlIdpDescriptor => samlIdpDescriptor.value)});
Coming soon!
Using getClientInstallationProvider
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getClientInstallationProvider(args: GetClientInstallationProviderArgs, opts?: InvokeOptions): Promise<GetClientInstallationProviderResult>
function getClientInstallationProviderOutput(args: GetClientInstallationProviderOutputArgs, opts?: InvokeOptions): Output<GetClientInstallationProviderResult>
def get_client_installation_provider(client_id: Optional[str] = None,
provider_id: Optional[str] = None,
realm_id: Optional[str] = None,
opts: Optional[InvokeOptions] = None) -> GetClientInstallationProviderResult
def get_client_installation_provider_output(client_id: Optional[pulumi.Input[str]] = None,
provider_id: Optional[pulumi.Input[str]] = None,
realm_id: Optional[pulumi.Input[str]] = None,
opts: Optional[InvokeOptions] = None) -> Output[GetClientInstallationProviderResult]
func GetClientInstallationProvider(ctx *Context, args *GetClientInstallationProviderArgs, opts ...InvokeOption) (*GetClientInstallationProviderResult, error)
func GetClientInstallationProviderOutput(ctx *Context, args *GetClientInstallationProviderOutputArgs, opts ...InvokeOption) GetClientInstallationProviderResultOutput
> Note: This function is named GetClientInstallationProvider
in the Go SDK.
public static class GetClientInstallationProvider
{
public static Task<GetClientInstallationProviderResult> InvokeAsync(GetClientInstallationProviderArgs args, InvokeOptions? opts = null)
public static Output<GetClientInstallationProviderResult> Invoke(GetClientInstallationProviderInvokeArgs args, InvokeOptions? opts = null)
}
public static CompletableFuture<GetClientInstallationProviderResult> getClientInstallationProvider(GetClientInstallationProviderArgs args, InvokeOptions options)
// Output-based functions aren't available in Java yet
Fn::Invoke:
Function: keycloak:saml/getClientInstallationProvider:getClientInstallationProvider
Arguments:
# Arguments dictionary
The following arguments are supported:
- Client
Id string The ID of the SAML client. The
id
attribute of akeycloak_client
resource should be used here.- Provider
Id string The ID of the SAML installation provider. Could be one of
saml-idp-descriptor
,keycloak-saml
,saml-sp-descriptor
,keycloak-saml-subsystem
,mod-auth-mellon
, etc.- Realm
Id string The realm that the SAML client exists within.
- Client
Id string The ID of the SAML client. The
id
attribute of akeycloak_client
resource should be used here.- Provider
Id string The ID of the SAML installation provider. Could be one of
saml-idp-descriptor
,keycloak-saml
,saml-sp-descriptor
,keycloak-saml-subsystem
,mod-auth-mellon
, etc.- Realm
Id string The realm that the SAML client exists within.
- client
Id String The ID of the SAML client. The
id
attribute of akeycloak_client
resource should be used here.- provider
Id String The ID of the SAML installation provider. Could be one of
saml-idp-descriptor
,keycloak-saml
,saml-sp-descriptor
,keycloak-saml-subsystem
,mod-auth-mellon
, etc.- realm
Id String The realm that the SAML client exists within.
- client
Id string The ID of the SAML client. The
id
attribute of akeycloak_client
resource should be used here.- provider
Id string The ID of the SAML installation provider. Could be one of
saml-idp-descriptor
,keycloak-saml
,saml-sp-descriptor
,keycloak-saml-subsystem
,mod-auth-mellon
, etc.- realm
Id string The realm that the SAML client exists within.
- client_
id str The ID of the SAML client. The
id
attribute of akeycloak_client
resource should be used here.- provider_
id str The ID of the SAML installation provider. Could be one of
saml-idp-descriptor
,keycloak-saml
,saml-sp-descriptor
,keycloak-saml-subsystem
,mod-auth-mellon
, etc.- realm_
id str The realm that the SAML client exists within.
- client
Id String The ID of the SAML client. The
id
attribute of akeycloak_client
resource should be used here.- provider
Id String The ID of the SAML installation provider. Could be one of
saml-idp-descriptor
,keycloak-saml
,saml-sp-descriptor
,keycloak-saml-subsystem
,mod-auth-mellon
, etc.- realm
Id String The realm that the SAML client exists within.
getClientInstallationProvider Result
The following output properties are available:
- Client
Id string - Id string
The provider-assigned unique ID for this managed resource.
- Provider
Id string - Realm
Id string - Value string
(Computed) The returned document needed for SAML installation.
- Client
Id string - Id string
The provider-assigned unique ID for this managed resource.
- Provider
Id string - Realm
Id string - Value string
(Computed) The returned document needed for SAML installation.
- client
Id String - id String
The provider-assigned unique ID for this managed resource.
- provider
Id String - realm
Id String - value String
(Computed) The returned document needed for SAML installation.
- client
Id string - id string
The provider-assigned unique ID for this managed resource.
- provider
Id string - realm
Id string - value string
(Computed) The returned document needed for SAML installation.
- client_
id str - id str
The provider-assigned unique ID for this managed resource.
- provider_
id str - realm_
id str - value str
(Computed) The returned document needed for SAML installation.
- client
Id String - id String
The provider-assigned unique ID for this managed resource.
- provider
Id String - realm
Id String - value String
(Computed) The returned document needed for SAML installation.
Package Details
- Repository
- https://github.com/pulumi/pulumi-keycloak
- License
- Apache-2.0
- Notes
This Pulumi package is based on the
keycloak
Terraform Provider.