feat(realm-seeding-job): configure selective seeding (#234)

Refs: eclipse-tractusx/portal-backend#1172 --------- Co-authored-by: Evelyn Gurschler <[email protected]> Reviewed-By: Evelyn Gurschler <[email protected]> Reviewed-By: Norbert Truchsess <[email protected]>
eclipse-tractusx · Nov 28, 2024 · 9326090 · 9326090
1 parent 01d2911
commit 9326090
Show file tree

Hide file tree

Showing 2 changed files with 82 additions and 6 deletions.
diff --git a/charts/centralidp/templates/job-seeding.yaml b/charts/centralidp/templates/job-seeding.yaml
@@ -61,6 +61,12 @@ spec:
             value: "true"
           - name: "KEYCLOAKSEEDING__REALMS__0__DATAPATHS__0"
             value: "realms/CX-Central-realm.json"
+          - name: "KEYCLOAKSEEDING__REALMS__0__CREATE"
+            value: "true"
+          - name: "KEYCLOAKSEEDING__REALMS__0__UPDATE"
+            value: "true"
+          - name: "KEYCLOAKSEEDING__REALMS__0__DELETE"
+            value: "true"
           - name: "KEYCLOAKSEEDING__REALMS__0__INSTANCENAME"
             value: "central"
           - name: "KEYCLOAKSEEDING__REALMS__0__REALM"

diff --git a/charts/sharedidp/templates/job-seeding.yaml b/charts/sharedidp/templates/job-seeding.yaml
@@ -59,18 +59,23 @@ spec:
             value: "master"
           - name: "KEYCLOAK__SHARED__USEAUTHTRAIL"
             value: "true"
+
+          #############################
+          ## CX-OPERATOR
+          #############################
+
           - name: "KEYCLOAKSEEDING__REALMS__0__DATAPATHS__0"
             value: "realms/CX-Operator-realm.json"
-          - name: "KEYCLOAKSEEDING__REALMS__1__DATAPATHS__0"
-            value: "realms/master-realm.json"
+          - name: "KEYCLOAKSEEDING__REALMS__0__CREATE"
+            value: "true"
+          - name: "KEYCLOAKSEEDING__REALMS__0__UPDATE"
+            value: "true"
+          - name: "KEYCLOAKSEEDING__REALMS__0__DELETE"
+            value: "true"
           - name: "KEYCLOAKSEEDING__REALMS__0__INSTANCENAME"
             value: "shared"
-          - name: "KEYCLOAKSEEDING__REALMS__1__INSTANCENAME"
-            value: "shared"
           - name: "KEYCLOAKSEEDING__REALMS__0__REALM"
             value: "CX-Operator"
-          - name: "KEYCLOAKSEEDING__REALMS__1__REALM"
-            value: "master"
           - name: "KEYCLOAKSEEDING__REALMS__0__SSLREQUIRED"
             value: "{{ .Values.realmSeeding.realms.cxOperator.sslRequired }}"
 
@@ -164,10 +169,75 @@ spec:
                 name: "{{ template "sharedidp.secret.realmSeeding.cxOperator" . }}"
                 key: "mailing-password"
 
+          #############################
+          ## MASTER
+          #############################
+
+          - name: "KEYCLOAKSEEDING__REALMS__1__DATAPATHS__0"
+            value: "realms/master-realm.json"
+          - name: "KEYCLOAKSEEDING__REALMS__1__INSTANCENAME"
+            value: "shared"
+          - name: "KEYCLOAKSEEDING__REALMS__1__REALM"
+            value: "master"
+          - name: "KEYCLOAKSEEDING__REALMS__1__CREATE"
+            value: "false"
+          - name: "KEYCLOAKSEEDING__REALMS__1__UPDATE"
+            value: "false"
+          - name: "KEYCLOAKSEEDING__REALMS__1__DELETE"
+            value: "false"
+
           #############################
           ## MASTER SERVICE ACCOUNTS
           #############################
 
+          - name: "KEYCLOAKSEEDING__REALMS__1__SEEDERCONFIGURATIONS__0__KEY"
+            value: "Clients"
+          - name: "KEYCLOAKSEEDING__REALMS__1__SEEDERCONFIGURATIONS__0__CREATE"
+            value: "false"
+          - name: "KEYCLOAKSEEDING__REALMS__1__SEEDERCONFIGURATIONS__0__UPDATE"
+            value: "false"
+          - name: "KEYCLOAKSEEDING__REALMS__1__SEEDERCONFIGURATIONS__0__DELETE"
+            value: "false"
+          - name: "KEYCLOAKSEEDING__REALMS__1__SEEDERCONFIGURATIONS__0__SEEDERCONFIGURATIONS__0__KEY"
+            value: "sa-cl1-reg-1"
+          - name: "KEYCLOAKSEEDING__REALMS__1__SEEDERCONFIGURATIONS__0__SEEDERCONFIGURATIONS__0__CREATE"
+            value: "true"
+          - name: "KEYCLOAKSEEDING__REALMS__1__SEEDERCONFIGURATIONS__0__SEEDERCONFIGURATIONS__0__UPDATE"
+            value: "true"
+          - name: "KEYCLOAKSEEDING__REALMS__1__SEEDERCONFIGURATIONS__0__SEEDERCONFIGURATIONS__0__DELETE"
+            value: "true"
+          - name: "KEYCLOAKSEEDING__REALMS__1__SEEDERCONFIGURATIONS__0__SEEDERCONFIGURATIONS__1__KEY"
+            value: "saCX-Operator"
+          - name: "KEYCLOAKSEEDING__REALMS__1__SEEDERCONFIGURATIONS__0__SEEDERCONFIGURATIONS__1__CREATE"
+            value: "true"
+          - name: "KEYCLOAKSEEDING__REALMS__1__SEEDERCONFIGURATIONS__0__SEEDERCONFIGURATIONS__1__UPDATE"
+            value: "true"
+          - name: "KEYCLOAKSEEDING__REALMS__1__SEEDERCONFIGURATIONS__0__SEEDERCONFIGURATIONS__1__DELETE"
+            value: "true"
+          - name: "KEYCLOAKSEEDING__REALMS__1__SEEDERCONFIGURATIONS__1__KEY"
+            value: "Users"
+          - name: "KEYCLOAKSEEDING__REALMS__1__SEEDERCONFIGURATIONS__1__CREATE"
+            value: "true"
+          - name: "KEYCLOAKSEEDING__REALMS__1__SEEDERCONFIGURATIONS__1__UPDATE"
+            value: "true"
+          - name: "KEYCLOAKSEEDING__REALMS__1__SEEDERCONFIGURATIONS__1__DELETE"
+            value: "true"
+          - name: "KEYCLOAKSEEDING__REALMS__1__SEEDERCONFIGURATIONS__2__KEY"
+            value: "Roles"
+          - name: "KEYCLOAKSEEDING__REALMS__1__SEEDERCONFIGURATIONS__2__CREATE"
+            value: "false"
+          - name: "KEYCLOAKSEEDING__REALMS__1__SEEDERCONFIGURATIONS__2__UPDATE"
+            value: "false"
+          - name: "KEYCLOAKSEEDING__REALMS__1__SEEDERCONFIGURATIONS__2__DELETE"
+            value: "false"
+          - name: "KEYCLOAKSEEDING__REALMS__1__SEEDERCONFIGURATIONS__2__SEEDERCONFIGURATIONS__0__KEY"
+            value: "cx-admin"
+          - name: "KEYCLOAKSEEDING__REALMS__1__SEEDERCONFIGURATIONS__2__SEEDERCONFIGURATIONS__0__CREATE"
+            value: "true"
+          - name: "KEYCLOAKSEEDING__REALMS__1__SEEDERCONFIGURATIONS__2__SEEDERCONFIGURATIONS__0__UPDATE"
+            value: "true"
+          - name: "KEYCLOAKSEEDING__REALMS__1__SEEDERCONFIGURATIONS__2__SEEDERCONFIGURATIONS__0__DELETE"
+            value: "true"
           - name: "KEYCLOAKSEEDING__REALMS__1__CLIENTS__0__CLIENTID"
             value: "sa-cl1-reg-1"
           - name: "KEYCLOAKSEEDING__REALMS__1__CLIENTS__0__SECRET"