Skip to content

Latest commit

 

History

History
1042 lines (693 loc) · 60.8 KB

CHANGELOG.md

File metadata and controls

1042 lines (693 loc) · 60.8 KB
Raw

4.4.0 (January 8, 2024)

FEATURES:

  • new resource: keycloak_ldap_custom_mapper (#863)

IMPROVEMENTS:

  • add provider_id attribute to keycloak_realm_keystore_rsa resource (#858)
  • compute extra_config for client data sources (#885)
  • support updated RedHat SSO version strings (#903)
  • add required_actions attribute to keycloak_user resource (#867)
  • allow use of custom client authenticator types (#845)
  • allow users to set referrer_policy header within security_defenses for keycloak_realm resource (#879)

BUG FIXES:

  • set the correct value for identityProviderMapper when using keycloak-oidc identity provider (#850)

Huge thanks to all the individuals who have contributed towards this release:

4.3.1 (June 8, 2023)

BUG FIXES:

  • avoid validation errors during plan for missing realm and openid client resources (#841)

Huge thanks to all the individuals who have contributed towards this release:

v4.3.0 (June 5, 2023)

IMPROVEMENTS:

  • update supported Keycloak versions (#828)
  • update to go 1.19 (#848)
  • add new login_hint attribute for keycloak_saml_identity_provider resource (#830)

BUG FIXES:

  • avoid inserting authenticator execution configs with empty strings as ID (#840)

Huge thanks to all the individuals who have contributed towards this release:

v4.2.0 (March 6, 2023)

IMPROVEMENTS:

  • allow the internal_id attribute for the keycloak_realm resource to be set during apply instead of read-only (#807)
  • allow for multivalue attributes in extra_config attribute for keycloak_custom_user_federation resource (#761)

BUG FIXES:

  • allow users with backslashes in their name to be assigned to groups via keycloak_group_memberships resource (#778)
  • correctly set nameIDPolicyFormat when updating value in extra_config in keycloak_saml_identity_provider resource (#793)
  • treat empty attributes as nil values when importing keycloak_ldap_user_federation resource (#784)
  • treat empty attributes as nil values when importing keycloak_custom_user_federation resource (#809)

Huge thanks to all the individuals who have contributed towards this release:

v4.1.0 (December 4, 2022)

IMPROVEMENTS:

  • add IMPORT mode to keycloak_ldap_role_mapper resource (#768)
  • add RSA_SHA256_MGF1 and RSA_SHA512_MGF1 signature algorithms to keycloak_saml_client resource (#757)
  • add valid_post_logout_redirect_uris attribute to keycloak_openid_client resource (#777)

BUG FIXES:

  • fix incorrect import ID for keycloak_openid_client_authorization_* resources (#763)
  • fix payload used during deletion of keycloak_generic_role_mapper resource to prevent more mappers from unintentionally being removed (#772)

v4.0.1 (October 13, 2022)

BUG FIXES:

  • restored the default value for the client_authenticator_type attribute within the keycloak_openid_client resource (#755)

v4.0.0 (October 10, 2022)

BREAKING CHANGES:

  • updated the default value of the base_path provider attribute, it is now an empty string (#733)
    • this change was made due to the Quarkus distribution of Keycloak removing the /auth context from API urls. if you are currently using the Quarkus version of Keycloak, you no longer need to specify the base_path provider attribute as an empty string. if you are currently using the legacy version of Keycloak, you will need to add the base_path provider attribute and set it to /auth.
  • renamed resources:
    • keycloak_generic_client_protocol_mapper has been renamed to keycloak_generic_protocol_mapper (#742)
    • keycloak_generic_client_role_mapper has been renamed to keycloak_generic_role_mapper. (#748)
    • the old versions of these resources will remain functional until the next major release, but they will display a deprecation warning whenever they are used.
    • to migrate to these new resources, you can follow these steps:
      • use terraform state rm to remove each of the old resources from state.
      • use terraform import to import the new resources into state. you can refer to the documentation for each of these resources to see how they should be imported.

FEATURES:

  • new resource: keycloak_ldap_hardcoded_attribute_mapper (#725)
  • new data source: keycloak_openid_client_scope (#743)

IMPROVEMENTS:

  • add red_hat_sso provider attribute which can be set to true if you're using RedHat SSO. this helps the provider understand which version of Keycloak is being used (#721)
  • support json encoded validation config for keycloak_realm_user_profile resource (#705)
  • update go version to 1.18, update several dependencies, update supported Keycloak versions to include v19 (#733)
  • add attribute_default_value and is_binary_attribute attributes to keycloak_ldap_user_attribute_mapper resource (#735)
  • update keycloak_ldap_user_federation resource to add support for deleting default mappers that are normally created by Keycloak (#744)
  • add issuer attribute to keycloak_oidc_identity_provider resource (#746)
  • update keycloak_openid_client resource to add support for importing Keycloak-created clients without needing to run terraform import (#747)

Huge thanks to all the individuals who have contributed towards this release:

v3.10.0 (July 28, 2022)

IMPROVEMENTS:

  • add authn context attributes for keycloak_saml_identity_provider resource (#703)
  • add resource_type attribute for keycloak_openid_client_authorization_permission resource (#702)

Huge thanks to all the individuals who have contributed towards this release:

v3.9.1 (July 11, 2022)

BUG FIXES:

  • update usage of component API for keycloak_ldap_user_federation and keycloak_custom_user_federation resources (#707)
    • this fixes an issue that prevented these resources from being used within the master realm.

v3.9.0 (June 23, 2022)

IMPROVEMENTS:

  • improve import error messages for several resources (#691)
  • allow usage of environment variable to configure base API path (#695)

BUG FIXES:

  • use realm name instead of internal ID for authentication bindings (#687)

Huge thanks to all the individuals who have contributed towards this release:

v3.8.1 (May 9, 2022)

BUG FIXES:

  • fix a potential problem with the keycloak_custom_user_federation resource incorrectly assuming some Keycloak API fields are numbers.

v3.8.0 (May 4, 2022)

FEATURES:

  • new resource: keycloak_realm_user_profile (#658)
  • new resource: keycloak_authentication_bindings (#668)

IMPROVEMENTS:

  • support custom provider ID in keycloak_saml_identity_provider resource (#656)
  • support sync settings in keycloak_custom_user_federation resource (#663)
  • support Transient NameID format for keycloak_saml_identity_provider resource (#661)
  • update all resources to use new terraform lifecycles with context support (#675)
  • support use-refresh-tokens for client credentials in keycloak_openid_client resource (#678)
  • support client_session_idle_timeout and client_session_max_lifespan arguments in keycloak_realm resource (#653)

Huge thanks to all the individuals who have contributed towards this release:

v3.7.0 (February 2, 2022)

IMPROVEMENTS:

  • add support for the oauth2 device authorization grant (#578)
  • add client_authenticator_type attribute to keycloak_openid_client resource (#627)
  • add missing documentation for keycloak_user_template_importer_identity_provider_mapper resource (#635)
  • add attributes for customizing consent screen for keycloak_openid_client resource (#646)
  • upgrade to the latest version of the terraform-plugin-sdk (#644)
  • add attributes for configuring frontchannel logout on keycloak_openid_client resource (#644)
  • bump supported keycloak versions (#650)

BUG FIXES:

  • fix keycloak version check for keycloak_default_roles resource (#637)

Huge thanks to all the individuals who have contributed towards this release:

v3.6.0 (November 9, 2021)

FEATURES:

  • new resource: keycloak_group_permissions (#617)

BUG FIXES:

  • xml_sign_key_info_key_name_transformer attribute for keycloak_saml_identity_provider resource used incorrect spelling, causing it to not be set correctly (#614)
  • when querying protocol mappers from the Keycloak API, treat quoted boolean attributes as false when receiving an empty string. this should fix issues when importing protocol mappers that were created by Keycloak (#622)

Huge thanks to all the individuals who have contributed towards this release:

v3.5.1 (October 14, 2021)

BUG FIXES:

  • remove defaultRole from realm JSON before sending requests to Keycloak to fix compatibility with Keycloak versions older than v13 (#612)

v3.5.0 (October 13, 2021)

FEATURES:

  • new resource: keycloak_default_roles (#599)
  • new resources: keycloak_realm_keystore_aes_generated, keycloak_realm_keystore_ecdsa_generated, keycloak_realm_keystore_hmac_generated, keycloak_realm_keystore_java_keystore, keycloak_realm_keystore_rsa, and keycloak_realm_keystore_rsa_generated (#582)
  • new resource: keycloak_openid_audience_resolve_protocol_mapper (#606)

IMPROVEMENTS:

  • add start_tls and use_password_modify_extended_op attributes to keycloak_ldap_user_federation resource (#601)
  • keycloak_openid_client_default_scopes and keycloak_openid_client_optional_scopes resources will now completely reconcile assigned scopes on create (#594)
    • this means that creating these resources will now remove default / optional scopes that are not specified within the resource configuration. see #498 for more context.

BUG FIXES:

  • allow all extra_config attributes for keycloak_custom_identity_provider_mapper resource (#607)
  • backchannel_logout_session_required and backchannel_logout_revoke_offline_sessions attributes for keycloak_openid_client resource were swapped (#600)

Huge thanks to all the individuals who have contributed towards this release:

v3.4.0 (September 16, 2021)

FEATURES:

  • add backchannel support for keycloak_openid_client resource (#583)
  • add support for extra_config for keycloak_openid_client resource (#579)
  • add support for extra_config for keycloak_saml_client resource (#589)
  • add signature_key_name attribute to keycloak_saml_client resource (#588)
  • add login_theme attribute to keycloak_saml_client resource (#590)
  • new data source: keycloak_user_realm_roles (#596)
  • add OTP policy attributes to keycloak_realm resource (#585)
  • add computed attributes encryption_certificate_sha1, signing_certificate_sha1, and signing_private_key_sha1 for keycloak_saml_client resource (#589)

IMPROVEMENTS:

  • the behavior of the extra_config attribute among all resources that support it has been standardized (#584) (#589)
    • validation has been added to ensure that extra_config can't be used to override values that are supported by that particular resource's top level schema
    • extra_config will no longer contain "computed" attributes, meaning that attributes not supplied by the user will not be written back to extra_config
    • attributes that have been removed from extra_config will be sent back to the Keycloak API as an empty string. this appears to be the only way to "unset" these on the Keycloak server
    • REMINDER: extra_config should only be used to support custom attributes, or attributes that are not yet officially supported by this provider. future releases of this provider could cause breaking changes for users using extra_config. please use this attribute carefully, especially when upgrading to newer versions of the provider.
  • request / response bodies to / from the Keycloak API will be properly formatted when TF_LOG is set to DEBUG (#589)
  • the list of officially supported Keycloak versions has been updated to 13.x, 14.x, and 15.x (#589). older versions may still work, but they will no longer be tested against in CI.
  • the behavior of the keycloak_saml_client attributes encryption_certificate, signing_certificate, and signing_private_key has been changed.
    • previously, it was meant to be possible to unset these attributes by setting them to an empty string. this was meant to remove the certs / keys on the Keycloak server. however, this never really worked correctly, so this behavior has been removed.
    • these values will now be autogenerated by Keycloak when omitted.

BUG FIXES:

  • fix possible crash when using keycloak_users_permissions resource (#591)

Huge thanks to all the individuals who have contributed towards this release:

v3.3.0 (August 9, 2021)

IMPROVEMENTS:

  • add use_refresh_tokens attribute to keycloak_openid_client resource (#573)

Huge thanks to all the individuals who have contributed towards this release:

v3.2.1 (July 23, 2021)

BUG FIXES:

  • re-add previously removed LOAD_ROLES_BY_MEMBER_ATTRIBUTE_RECURSIVELY role retrieval strategy for the keycloak_ldap_role_mapper resource (#560)
  • perform initial login during version check if needed. this fixes a potential panic within the keycloak_ldap_group_mapper resource (#564)

Huge thanks to all the individuals who have contributed towards this release:

v3.2.0 (July 14, 2021)

IMPROVEMENTS:

  • stopped throwing an error for missing provider credentials when initial_login is set to false. this should help with scenarios where Keycloak itself is being created by Terraform (such as with the helm_release resource) (#552)
  • upgrade to go v1.16, bump terraform plugin SDK (#551)
    • this enables builds for previously unsupported platforms, such as darwin_arm64
    • this should fix any potential issues with using this provider with Terraform v1.0.1

BUG FIXES:

  • fix possible panic when creating identity provider mappers (#556)

Huge thanks to all the individuals who have contributed towards this release:

v3.1.1 (June 8, 2021)

There was an internal problem with the v3.1.0 release, causing a checksum error when running terraform init. Please use this release instead.

v3.1.0 (June 8, 2021)

An internal error during the release process caused this release to fail when running terraform init. Please use v3.1.1 instead.

FEATURES:

  • new resource: keycloak_custom_identity_provider_mapper (#515)
  • new data source: keycloak_client_description_converter (#518)

IMPROVEMENTS:

  • use pagination for keycloak_group_memberships resource (#527)

BUG FIXES:

  • handle deleted role when removing role assignment from keycloak_group_roles resource (#538)

Huge thanks to all the individuals who have contributed towards this release:

v3.0.1 (May 5, 2021)

BUG FIXES:

  • add validation for extra_config attribute for identity providers to prevent conflicts with the top-level identity provider schema (#523)
    • note: this may cause errors with existing provider configuration that uses this attribute. however, any provider configuration that breaks here was most likely not working in the first place.
  • fix definition of roles in keycloak_openid_client_role_policy resource to use a set instead of a list (#524)

v3.0.0 (April 12, 2021)

BREAKING CHANGES:

  • add a new required entity_id attribute for keycloak_saml_identity_provider resource (#512)
  • removed attributes that were deprecated in v2.0.0 (#514)
    • keycloak_openid_user_session_note_protocol_mapper resource: remove session_note_label attribute
    • keycloak_user data source: remove federated_identities attribute
    • keycloak_ldap_user_federation resource: remove cache_policy attribute

FEATURES:

  • new data source: keycloak_authentication_flow (#486)
  • new resource: keycloak_user_groups (#505)

IMPROVEMENTS:

  • support multivalue attributes for users, groups and roles (#499)
  • add trust_email attribute to keycloak_ldap_user_federation resource (#267)
  • add principal_type, principal_attribute, gui_order, and sync_mode attributes to keycloak_saml_identity_provider resource (#508)
  • allows non-authoritative usage of keycloak_group_roles resource via exhaustive attribute (#501)
  • allows non-authoritative usage of keycloak_user_roles resource via exhaustive attribute (#513)
  • add ability to set additional request headers as provider config (#507)

BUG FIXES:

  • fixed marshalling of false value in Keycloak API attributes that use quoted booleans (#495)
  • handle group not found for keycloak_group_roles resource (#497)
  • fix keycloak_attribute_importer_identity_provider_mapper and keycloak_user_template_importer_identity_provider_mapper resources for usage with Facebook/Google (#482)

Huge thanks to all the individuals who have contributed towards this release:

v2.3.0 (March 1, 2021)

FEATURES:

  • new resource: keycloak_saml_script_protocol_mapper (#473)

IMPROVEMENTS:

  • support custom attributes in keycloak_role resource (#475)

BUG FIXES:

  • remove mutex usage in keycloak client, which in some cases resulted in deadlock when retrieving tokens from Keycloak (#489)

Huge thanks to all the individuals who have contributed towards this release:

v2.2.0 (January 23, 2021)

FEATURES:

  • add new keycloak_realm attributes for handling default client scopes (#464)
  • new data source: keycloak_saml_client (#468)

IMPROVEMENTS:

  • revised the configuration for the custom user federation example (#425)
  • increased the default http client timeout to 15 seconds (#469)

BUG FIXES:

  • fix panic when using keycloak_user data source with invalid username (#460)
  • fix version handling with RedHat SSO (#462)

Huge thanks to all the individuals who have contributed towards this release:

v2.1.0 (January 10, 2021)

FEATURES:

  • new resource: keycloak_openid_client_permissions (#364)
  • new resource: keycloak_users_permissions (#400)
  • new resource: keycloak_openid_client_script_protocol_mapper (#453)

IMPROVEMENTS:

  • add authorization.decision_strategy attribute to keycloak_openid_client resource (#392)
  • support IMPORT mode for keycloak_ldap_group_mapper resource (#397)
  • add client session length attributes to keycloak_openid_client resource (#415)
  • update to go 1.5 (#445)
  • add groups_path attribute to keycloak_ldap_group_mapper resource (#436)
  • add authentication_flow_binding_overrides attribute to keycloak_saml_client resource (#448)

BUG FIXES:

  • fix inconsistent plan when enabling service account in keycloak_openid_client resource (#437)
  • fix import for keycloak_openid_client_service_account_realm_role resource (#441)
  • remove unneeded validation checks for registration attributes for keycloak_realm resource (#438)
  • allow commas in config attribute for keycloak_custom_user_federation resource (#455)

Huge thanks to all the individuals who have contributed towards this release:

v2.0.0 (September 20, 2020)

BREAKING CHANGES:

DEPRECATIONS:

  • the cache_policy attribute within the keycloak_ldap_user_federation resource has been deprecated in favor of a new cache attribute (#376)
  • the federated_identities computed attribute within the keycloak_user data source has been deprecated in favor of a new federated_identity computed attribute (1b6284c)
  • the session_note_label attribute within the keycloak_openid_user_session_note_protocol_mapper resource has been deprecated in favor of a new session_note attribute (#365)

FEATURES:

IMPROVEMENTS:

  • add remember me timeout attributes to keycloak_realm resource (#374)
  • add offline_session_max_lifespan_enabled attribute to keycloak_realm resource (#377)
  • add web_authn_policy and web_authn_passwordless_policy attributes to keycloak_realm resource (#356)

BUG FIXES:

  • fix keycloak_group data source to support more than one returned group (#351)
  • fix import syntax for keycloak_openid_client_*_policy resources (#367)
  • fix parent_id attribute not being set when importing keycloak_group resource (#372)
  • automatically register an unregistered required action when using the keycloak_required_action resource (#385)
  • fix keycloak_openid_user_session_note_protocol_mapper resource API call to correctly set the session note (#365)
  • add missing attributes for keycloak_group data source (#369)
  • add missing attributes for keycloak_openid_client_service_account_user data source (#369)
  • add missing attributes for keycloak_realm data source (#369)
  • fix config attribute for keycloak_custom_user_federation resource (#369)
  • fix kerberos attribute for keycloak_ldap_user_federation resource (#369)
  • add missing disable_user_info attribute for keycloak_oidc_identity_provider resource (#369)
  • fix empty path sub-attribute under groups attribute within keycloak_openid_client_authorization_group_policy resource (#369)
  • fix role attribute for keycloak_openid_client_authorization_role_policy resource (#369)

Huge thanks to all the individuals who have contributed towards this release:

1.20.0 (July 20, 2020)

FEATURES:

  • new resource: keycloak_user_roles (#315)
  • new resource: keycloak_identity_provider_token_exchange_scope_permission (#318)
  • new resources: keycloak_saml_client_scope, keycloak_saml_client_default_scopes (#320)

IMPROVEMENTS:

  • add default_signature_algorithm attribute for keycloak_realm resource (#282)
  • add parent_id attribute to keycloak_custom_user_federation resource (#325)
  • add extra_config attribute to identity provider mapper resources (#316)
  • add include_in_token_scope and gui_order attributes to keycloak_openid_client_scope resource (#320)
  • add base_path provider attribute, improve login error messages (#332)
  • add encryption attributes to keycloak_saml_client resource (#342)
  • add signature_algorithm attribute to keycloak_saml_client resource (#345)

BUG FIXES:

  • fix import for keycloak_openid_client_service_account_role resource (#314)
  • fix realm role support for keycloak_generic_client_role_mapper resource (#316)
  • fix keycloak_group data source to support nested groups (#334)
  • fix keycloak_group data source / resource to support group names with backslash character (#337)

Huge thanks to all the individuals who have contributed towards this release:

1.19.0 (June 5, 2020)

FEATURES:

  • new resource: keycloak_openid_user_client_role_protocol_mapper (#299)
  • new resource: keycloak_openid_user_session_note_protocol_mapper (#309)

IMPROVEMENTS:

  • add login_theme attribute to keycloak_openid_client resource (#278)
  • add aggregate_attributes attribute to keycloak_openid_user_attribute_protocol_mapper resource (#272)
  • add user_managed_access attribute to keycloak_realm resource (#275)
  • support deployed JavaScript policies for keycloak_openid_client_js_policy resource (#275)
  • add internal_id computed attribute to keycloak_realm resource and data source (#270)
  • surface Keycloak API errors to users during terraform plan and terraform apply (#304)
  • add kerberos configuration for keycloak_ldap_user_federation resource (#290)
  • test all major versions of Keycloak in CI (#294)
  • add import support for keycloak_generic_client_role_mapper resource (#310)
  • use terraform-plugin-sdk user agent string in http client (#311)

BUG FIXES:

  • fix: mark group_id attribute as required for keycloak_group_roles resource (#292)

Huge thanks to all the individuals who have contributed towards this release:

1.18.0 (April 17, 2020)

FEATURES:

  • new resource: keycloak_ldap_hardcoded_group_mapper (#264)
  • new data source: keycloak_saml_client_installation_provider (#263)
  • new resource: keycloak_ldap_role_mapper (#265)

IMPROVEMENTS:

  • add tls_insecure_skip_verify provider attribute (#237)
  • add client_scope_id attribute to keycloak_generic_client_role_mapper resource (#253)
  • add email_verified attribute to keycloak_user resource (#256)
  • add JSON as a valid claim_value_type for openid protocol mapper resources (#260)
  • add force_name_id_format attribute to keycloak_saml_client resource (#261)
  • add consent_required and authentication_flow_binding_overrides attributes for keycloak_openid_client resource (#262)
  • add root_url attribute to keycloak_openid_client resource (#248)
  • add federated identity support for keycloak_user resource (#274)

BUG FIXES:

  • correctly handle manually deleted clients when refreshing a keycloak_openid_client_default_scopes resource (#252)
  • correctly handle manually deleted clients when refreshing a keycloak_openid_client_optional_scopes resource

Huge thanks to all the individuals who have contributed towards this release:

1.17.1 (March 12, 2020)

BUG FIXES:

  • fix: allow defaultScope and acceptsPromptNoneForwardFromClient attributes to be set for keycloak_oidc_identity_provider. Previously, these attributes could only be set via extra_config, which stopped working as of v1.17.0. This release introduces these attributes as top-level attributes for the keycloak_oidc_identity_provider resource.

Huge thanks to all the individuals who have contributed towards this release:

1.17.0 (March 10, 2020)

FEATURES:

  • new resources: keycloak_authentication_flow, keycloak_authentication_subflow, keycloak_authentication_execution (#215)
  • new resource: keycloak_authentication_execution_config (#241)
  • new resource: keycloak_oidc_google_identity_provider (#240)
  • new resource: keycloak_ldap_msad_user_account_control_mapper (#244)
  • new resources: keycloak_openid_client_group_policy, keycloak_openid_client_role_policy, keycloak_openid_client_aggregate_policy, keycloak_openid_client_js_policy, keycloak_openid_client_time_policy, keycloak_openid_client_user_policy, keycloak_openid_client_client_policy (#246)
  • new resource: keycloak_generic_client_role_mapper (#242)

IMPROVEMENTS:

  • add client_scope_id attribute to keycloak_generic_client_protocol_mapper resource (#229)
  • add root_ca_certificate attribute to provider config (#227)
  • add scopes attribute to keycloak_openid_client_authorization_permission resource (#220)
  • add access_token_lifespan attribute to keycloak_openid_client resource (#233)

Huge thanks to all the individuals who have contributed towards this release:

1.16.0 (February 13, 2020)

FEATURES:

  • new resource: keycloak_realm_events (#211)
  • new resource: resource_keycloak_openid_client_service_account_role (#202)

IMPROVEMENTS:

  • add base_url attribute to keycloak_openid_client resource (#201)
  • allow configuration of the client timeout by an environment variable (#206)
  • add consent_required attribute to keycloak_openid_client resource (#207)
  • add admin_url attribute to keycloak_openid_client resource (#203)
  • add display_name_html attribute to keycloak_realm resource and data source (#209)
  • switch to terraform-plugin-sdk (#214)

BUG FIXES:

  • URL encode role names to allow for special characters (#213)

Huge thanks to all the individuals who have contributed towards this release:

1.15.0 (January 20, 2020)

FEATURES:

  • new resource: keycloak_ldap_hardcoded_role_mapper (#195)

IMPROVEMENTS:

  • add full_scope_allowed attribute to keycloak_openid_client resource (#193)
  • add exclude_session_state_from_auth_response attribute to keycloak_openid_client resource (#191)
  • allow empty value for pkce_code_challenge_method attribute on keycloak_openid_client resource (#198)
  • support attributes for keycloak_group resource (#199)

Huge thanks to all the individuals who have contributed towards this release:

1.14.0 (December 18, 2019)

FEATURES:

  • add keycloak_openid_client_service_account_user data source (#181)
  • add keycloak_group data source (#185)

IMPROVEMENTS:

  • support Keycloak v8.0.0 (#183)
  • new functionality for keycloak_realm: brute_force_detection, ssl_required, and custom attributes (#183)
  • allow you to prevent refresh token reuse with a new revoke_refresh_token attribute for the keycloak_realm resource (#183)
    • note: please refer to the docs for the new configuration values if you currently use refresh_token_max_reuse

Huge thanks to all the individuals who have contributed towards this release:

1.13.2 (November 27, 2019)

BUG FIXES:

  • fix: update Keycloak API call to handle groups with more than 100 members (#179)

Huge thanks to all the individuals who have contributed towards this release:

1.13.1 (November 19, 2019)

BUG FIXES:

  • correctly handle Keycloak role names that contain a forward slash (#175)

Huge thanks to all the individuals who have contributed towards this release:

1.13.0 (November 8, 2019)

IMPROVEMENTS:

  • use cookiejar for Keycloak API requests (#173)

Huge thanks to all the individuals who have contributed towards this release:

1.12.0 (November 4, 2019)

IMPROVEMENTS:

  • add pkce_code_challenge_method attribute for keycloak_openid_client resource (#170)

BUG FIXES:

  • always use valid client secret for keycloak_oidc_identity_provider resource (#171)
  • fix state issues for keycloak_openid_client_service_account_role resource (#171)

Huge thanks to all the individuals who have contributed towards this release:

1.11.1 (October 17, 2019)

BUG FIXES:

  • fix required attribute for keycloak_realm data source (#166)
  • automatically retry role deletion if the first attempt fails (#168)

Huge thanks to all the individuals who have contributed towards this release:

1.11.0 (October 14, 2019)

FEATURES:

  • new resource: keycloak_openid_user_realm_role_protocol_mapper (#159)
  • new data source: keycloak_realm (#160)

IMPROVEMENTS:

  • added timeout provider attribute (#155)
  • always export serviceAccountId for keycloak_openid_client resource (#162)

BUG FIXES:

  • fix default value for reset_credentials_flow attribute in keycloak_realm resource (#158)

Huge thanks to all the individuals who have contributed towards this release:

1.10.0 (September 6, 2019)

note: this release contains a bug in the keycloak_realm resource that incorrectly sets the default attribute for reset_credentials_flow to "registration". Please ensure that you set this attribute manually to override the incorrect default until a future release fixes this issue.

FEATURES:

  • new resource: keycloak_required_action (#131)
  • new resource: keycloak_default_groups (#146)
  • new resources: keycloak_role, keycloak_group_roles, keycloak_openid_hardcoded_role_protocol_mapper (#143)
  • new data source: keycloak_role (#143)

IMPROVEMENTS:

  • add security_defences attribute to keycloak_realm resource (#130)
  • support custom config for keycloak_custom_user_federation resource (#134)
  • add initial_login provider attribute to optionally avoid requests during provider setup (#136)
  • support custom config for keycloak_oidc_identity_provider resource (#137)
  • add password_policy attribute for keycloak_realm resource (#139)
  • add flow binding attributes for keycloak_realm resource (#140)

BUG FIXES:

  • fix user attributes to handle attributes longer than 255 characters (#132)
  • fix import for keycloak_oidc_identity_provider (#142)

Huge thanks to all the individuals who have contributed towards this release:

1.9.0 (June 20, 2019)

FEATURES:

  • add full_scope_allowed attribute to keycloak_saml_client resource (#118)
  • add internationalization attribute to keycloak_realm resource (#124)
  • add smtp_server attribute to keycloak_realm resource (#122)

IMPROVEMENTS:

  • allow the provider to use a confidential client with the password grant (#114)
  • update Terraform SDK to 0.12.1 (#120)
  • bump dependency versions for custom user federation example (#121)
  • add static binary to release for use within Alpine Docker iamges (#129)

Huge thanks to all the individuals who have contributed towards this release:

1.8.0 (May 14, 2019)

FEATURES:

  • new resources: keycloak_openid_client_authorization_resource, keycloak_openid_client_authorization_scope, keycloak_openid_client_authorization_permission, keycloak_openid_client_service_account_role (#104)
    • note: docs for these resources will be released at a later date. for now, please refer to the source files.
  • new data sources: keycloak_openid_client, keycloak_openid_client_authorization_policy (#104)
    • note: docs for these data sources will be released at a later date. for now, please refer to the source files.

IMPROVEMENTS:

  • chore: update provider SDK to 0.12 (#107)
  • chore: support Keycloak v6.0.1 (#106)
  • chore: renames provider resource/data files (#105)

Huge thanks to all the individuals who have contributed towards this release:

1.7.0 (April 18, 2019)

FEATURES:

  • new resources: keycloak_identity_provider and mappers (#92)
    • note: docs for these resources will be released at a later date. for now, please refer to the source files.

IMPROVEMENTS:

  • new attributes added for keycloak_saml_client resource (#103)

Huge thanks to all the individuals who have contributed towards this release:

1.6.0 (March 6, 2019)

FEATURES:

  • new resource: keycloak_openid_client_optional_scopes (#96)
  • new resource: keycloak_openid_audience_protocol_mapper (#97)

1.5.0 (February 22, 2019)

FEATURES:

  • add support for non-master realms and resource owner password grant for Keycloak authentication (#88)

IMPROVEMENTS:

  • support Keycloak v4.8.3.Final and Terraform v0.11.11 (#93)

BUG FIXES:

  • handle 404 errors when reading a group for group memberships (#95)

Huge thanks to all the individuals who have contributed towards this release:

1.4.0 (January 28, 2019)

FEATURES:

  • new resource: keycloak_saml_user_property_protocol_mapper (#85)

1.3.0 (January 25, 2019)

FEATURES:

  • new resource: keycloak_saml_user_attribute_protocol_mapper (#84)

1.2.0 (January 24, 2019)

FEATURES:

  • new resource: keycloak_saml_client (#82)

IMPROVEMENTS:

  • add validation for usernames to ensure they are always lowercase (#83)

1.1.0 (January 7, 2019)

IMPROVEMENTS:

  • openid_client: add web_origins attribute (#81)
  • user: add initial_password attribute (#77)

BUG FIXES:

  • ldap mappers: don't assume component fields are returned by Keycloak API (#80)

Huge thanks to all the individuals who have contributed towards this release:

1.0.0 (December 16, 2018)

Initial Release!

Docs: https://mrparkers.github.io/terraform-provider-keycloak