snix/ops/keycloak/identity_providers.tf
Florian Klink 7b36b8e285 chore(ops/keycloak): move oauth application to snix-project org
This was a personal application before, now it's at the `snix-project`
org.

Change-Id: I6df9393f23593f58739f331e73103022301b4f11
Reviewed-on: https://cl.snix.dev/c/snix/+/30101
Autosubmit: Florian Klink <flokli@flokli.de>
Tested-by: besadii
Reviewed-by: Ryan Lahfa <masterancpp@gmail.com>
2025-03-18 15:28:54 +00:00

41 lines
1.2 KiB
HCL

variable "github_client_secret" {
type = string
}
variable "gitlab_client_secret" {
type = string
}
resource "keycloak_oidc_identity_provider" "github" {
alias = "github"
provider_id = "github"
client_id = "Ov23liKpXqs0aPaVgDpg"
client_secret = var.github_client_secret
realm = keycloak_realm.snix.id
backchannel_supported = false
gui_order = "1"
store_token = false
sync_mode = "IMPORT"
trust_email = true
default_scopes = "openid user:email"
authorization_url = ""
token_url = ""
}
resource "keycloak_oidc_identity_provider" "gitlab" {
alias = "gitlab"
provider_id = "gitlab"
client_id = "aa15f85b418bde7549216c8d4ecf23849f667a9be496eebaed4b9cbafe17a176"
client_secret = var.gitlab_client_secret
realm = keycloak_realm.snix.id
backchannel_supported = false
gui_order = "2"
store_token = false
sync_mode = "IMPORT"
trust_email = true
default_scopes = "openid read_user"
authorization_url = ""
token_url = ""
}