automatic realm import on startup

deployments/examples/ocis_keycloak/.env

@@ -23,7 +23,7 @@ OCIS_OIDC_CLIENT_ID=
 ### Keycloak ###
 # Domain of Keycloak, where you can find the managment and authentication frontend. Defaults to "keycloak.owncloud.test"
 KEYCLOAK_DOMAIN=
-# Realm which to be used with oCIS. Defaults to "master"
+# Realm which to be used with oCIS. Defaults to "oCIS"
 KEYCLOAK_REALM=
 # Admin user login name. Defaults to "admin"
 KEYCLOAK_ADMIN_USER=

deployments/examples/ocis_keycloak/docker-compose.yml

@@ -50,10 +50,10 @@ services:
     environment:
       # Keycloak IDP specific configuration
       PROXY_AUTOPROVISION_ACCOUNTS: "true"
-      PROXY_OIDC_ISSUER: https://${KEYCLOAK_DOMAIN:-keycloak.owncloud.test}/auth/realms/${KEYCLOAK_REALM:-master}
-      WEB_OIDC_AUTHORITY: https://${KEYCLOAK_DOMAIN:-keycloak.owncloud.test}/auth/realms/${KEYCLOAK_REALM:-master}
+      PROXY_OIDC_ISSUER: https://${KEYCLOAK_DOMAIN:-keycloak.owncloud.test}/auth/realms/${KEYCLOAK_REALM:-oCIS}
+      WEB_OIDC_AUTHORITY: https://${KEYCLOAK_DOMAIN:-keycloak.owncloud.test}/auth/realms/${KEYCLOAK_REALM:-oCIS}
       WEB_OIDC_CLIENT_ID: ${OCIS_OIDC_CLIENT_ID:-web}
-      WEB_OIDC_METADATA_URL: https://${KEYCLOAK_DOMAIN:-keycloak.owncloud.test}/auth/realms/${KEYCLOAK_REALM:-master}/.well-known/openid-configuration
+      WEB_OIDC_METADATA_URL: https://${KEYCLOAK_DOMAIN:-keycloak.owncloud.test}/auth/realms/${KEYCLOAK_REALM:-oCIS}/.well-known/openid-configuration
       STORAGE_OIDC_ISSUER: https://${KEYCLOAK_DOMAIN:-keycloak.owncloud.test}
       STORAGE_LDAP_IDP: https://${KEYCLOAK_DOMAIN:-keycloak.owncloud.test}
       # general config
@@ -98,7 +98,7 @@ services:
     networks:
       ocis-net:
     volumes:
-      - ./config/keycloak/keycloak-import.json:/opt/jboss/keycloak/keycloak-import.json
+      - ./config/keycloak/ocis-realm.json:/opt/jboss/keycloak/ocis-realm.json
     environment:
       DB_VENDOR: POSTGRES
       DB_ADDR: postgres
@@ -109,7 +109,7 @@ services:
       KEYCLOAK_USER: ${KEYCLOAK_ADMIN_USER:-admin}
       KEYCLOAK_PASSWORD: ${KEYCLOAK_ADMIN_PASSWORD:-admin}
       PROXY_ADDRESS_FORWARDING: "true"
-      KEYCLOAK_IMPORT: /opt/jboss/keycloak/keycloak-import.json
+      KEYCLOAK_IMPORT: /opt/jboss/keycloak/ocis-realm.json
     labels:
       - "traefik.enable=true"
       - "traefik.http.routers.keycloak.entrypoints=http"
@@ -129,7 +129,7 @@ services:
       - "traefik.http.routers.idp-wellknown-secure.tls.certresolver=http"
       - "traefik.http.routers.idp-wellknown-secure.rule=Host(`${OCIS_DOMAIN:-ocis.owncloud.test}`) && Path(`/.well-known/openid-configuration`)"
       - "traefik.http.middlewares.idp-headers.headers.customrequestheaders.X-Forwarded-Host=${KEYCLOAK_DOMAIN:-keycloak.owncloud.test}"
-      - "traefik.http.middlewares.idp-prefix.addprefix.prefix=/auth/realms/${KEYCLOAK_REALM:-master}"
+      - "traefik.http.middlewares.idp-prefix.addprefix.prefix=/auth/realms/${KEYCLOAK_REALM:-oCIS}"
       - "traefik.http.middlewares.idp-override.chain.middlewares=idp-headers,idp-prefix"
       - "traefik.http.routers.idp-wellknown-secure.middlewares=idp-override"
       - "traefik.http.routers.idp-wellknown-secure.service=keycloak"

deployments/examples/ocis_keycloak/keycloak-export.sh

@@ -2,12 +2,9 @@
 docker-compose exec keycloak \
     sh -c "cd /opt/jboss/keycloak && \
     timeout 60 bin/standalone.sh \
+    -Djboss.httin/standalone.sh \
     -Djboss.socket.binding.port-offset=100 \
     -Dkeycloak.migration.action=export \
     -Dkeycloak.migration.provider=singleFile \
-    -Dkeycloak.migration.file=keycloak-export.json \
-    -Djboss.httin/standalone.sh -Dkeycloak.migration.action=export \
-    -Dkeycloak.migration.provider=singleFile \
-    -Dkeycloak.migration.file=keycloak-export.json"
-
-docker-compose exec keycloak cat /opt/jboss/keycloak/keycloak-export.json > keycloak-export.json
+    -Dkeycloak.migration.realmName=oCIS \
+    -Dkeycloak.migration.file=ocis-realm.json"