ansible-middleware/keycloak

Copying Key Material

Footur opened this issue · 4 comments

Footur commented
SUMMARY

The default directory for certificates in keycloak_quarkus is "{{ keycloak_home }}/certs". This directory is not created by the role. Also, I am missing a task that copies the key material to "{{ keycloak_home }}/certs". This should be done before the first start of Keycloak.

ISSUE TYPE
  • Feature Idea
guidograzioli commented

Correct, at the moment the role expects the certificates to be already in place [1] (ideally, one would install them under /etc/pki/tls/ ). We could have a few tasks that manage to use local files or download them and copy them to target nodes.

[1] https://github.com/ansible-middleware/keycloak/blob/main/molecule/quarkus/prepare.yml#L39

  • 👍1
Footur commented

@guidograzioli What do you think about using the directories

  • /etc/pki/tls/private for the private key and
  • /etc/pki/tls/certs for the certificate
    as default values?

Edit: Fix typo.

guidograzioli commented

Since what you're proposing is the default in Red Hat distributions, I without any doubt second that!

Footur commented

@guidograzioli Can you create a new release please? 🙏