OIDC env vars.

defaults/main.yml

@@ -32,4 +32,17 @@ open_asfa_pgadmin_email: 'noreply@example.com'
 open_asfa_pgadmin_inactivity_timeout: '1200'
 
 open_asfa_psql_db_data: 
-  - { db_host: '{{ open_asfa_db_host }}', pgsql_version: '{{ open_asfa_db_pg_version }}', name: '{{ open_asfa_db_name }}', encoding: 'UTF8', user: '{{ open_asfa_db_user }}', roles: 'CREATEDB,NOSUPERUSER', pwd: '{{ open_asfa_db_pwd }}', allowed_hosts: '{{ open_asfa_db_allowed_hosts }}' }
+  - db_host: '{{ open_asfa_db_host }}'
+    pgsql_version: '{{ open_asfa_db_pg_version }}'
+    name: '{{ open_asfa_db_name }}'
+    encoding: 'UTF8'
+    user: '{{ open_asfa_db_user }}'
+    roles: 'CREATEDB,NOSUPERUSER'
+    pwd: '{{ open_asfa_db_pwd }}'
+    allowed_hosts: '{{ open_asfa_db_allowed_hosts }}'
+
+open_asfa_keylocak_auth_url: http://localhost:8080/auth/
+open_asfa_keycloak_client_secret: 'use a vault'
+open_asfa_keycloak_realm: 'realm'
+open_asfa_keycloak_client_name: 'asfa_client_name'
+open_asfa_keycloak_client_id: 'asfa_client_id'

templates/open-asfa-docker-compose.yml.j2

@@ -26,6 +26,11 @@ services:
       SCHEMA: {{ open_asfa_db_name }}
       DB_USER: {{ open_asfa_db_user }}
       DB_PASSWORD: {{ open_asfa_db_pwd }}
+      AUTH_URL: {{ open_asfa_keylocak_auth_url }}
+      SECRET: {{ open_asfa_keycloak_client_secret }}
+      REALM: {{ open_asfa_keycloak_realm }}
+      CLIENT: {{ open_asfa_keycloak_client_name }}
+      CLIENT_ID: {{ open_asfa_keycloak_client_id }}
     deploy:
       mode: replicated
       replicas: 1