Skip to content
Documentation
Using
Resources
Default Configuration

Default Configuration

Use these resources when every new user in a realm should start with the same baseline access. DefaultGroups adds new users to groups automatically, and Roles assigns the realm roles that should always be present.

API Reference

KindAPI GroupTerraform ResourceCRD Explorer
DefaultGroupsdefaults.keycloak.crossplane.io/v1alpha1keycloak_default_groupsView CRD Schema
Rolesdefaults.keycloak.crossplane.io/v1alpha1keycloak_default_rolesView CRD Schema

Working YAML Examples

DefaultGroups 

apiVersion: defaults.keycloak.crossplane.io/v1alpha1
kind: DefaultGroups
metadata:
  name: my-default-groups
spec:
  deletionPolicy: Delete
  forProvider:
    groupIdsRefs:
      - name: test
        policy:
          resolve: Always
    realmIdRef:
      name: "dev"
      policy:
        resolve: Always
  providerConfigRef:
    name: "keycloak-provider-config"

Roles 

apiVersion: defaults.keycloak.crossplane.io/v1alpha1
kind: Roles
metadata:
  name: default-roles
spec:
  deletionPolicy: Delete
  forProvider:
    defaultRolesRefs:
      - name: test
        policy:
          resolve: Always
    realmIdRef:
      name: "dev"
      policy:
        resolve: Always
  providerConfigRef:
    name: "keycloak-provider-config"

Related Resources

ClientsGroups