<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On 18 December 2015 at 09:20, Hristo Stoyanov <span dir="ltr"><<a href="mailto:hr.stoyanov@peruncs.com" target="_blank">hr.stoyanov@peruncs.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p dir="ltr">Stian,<br>
I have no affiliation with Ansible, but you do ... since recently :-)</p></blockquote><div>That's true - I forgot about that <br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<p dir="ltr">What I do is:<br>
1. I configured KC with passwords, URLs for the apps, certificates, Facebook tokens, etc.<br>
2 I exported it into json dump files.<br>
3. I repeated 1-2 until I had enough data for DEV, QA and PROD - all different environments . Note that some parts of the exports remain the same - roles, groups.<br>
4. I templetized the exported json files so that Ansible can substitute the environment sensitive bits and deploy to DEV, QA and PROD.</p>
<p dir="ltr">Same applies to the wildfly's standalone.xml - parametrize different versions for DEV, QA, PROD.</p>
<p dir="ltr">It is royal pain to create the J2 templates, initially, but not as much as trying to do it with jboss-cli (which I tried too, the Infinispan KC jboss cli script killed me!). <br></p>
<p dir="ltr">None of this is ideal , but expecting devops to click around HTML UIs or manually hack xml/json these days is not OK.</p></blockquote><div>The plan in the long run is to move everything in keycloak-server.json to standalone.xml so it all server config can be done in one place. Doesn't sound like you're a big fan of JBoss CLI though. With JBoss CLI offline mode I would think it's still a better way to modify standalone.xml than templating. I full appreciate that it's not the easiest tool to master (I've never been able to achieve anything with it without Googling for a recipe first).<br></div><div><br></div><div>WDYM about Infinispan KC jboss cli script? Are you installing KC into an existing WF with the overlay?</div><div><br></div><div>For realm config, clients, etc.. we are also planning on adding an Admin CLI that lets you create those from the CLI without touching the HTML UI. It would require a running server though as it would be calling admin rest endpoints rather than DB directly.</div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<p dir="ltr">Docker by itself is too weak for this sort of deep configurations. 1.9 adds parameters, one can use env variables, but otherwise you are left with shell scripting/perl, regex in your Dockerfile ...</p>
<p dir="ltr">This still might sounds like an overkill, but when you add jgroups, cluster, network interfaces ,databases , firewall.... You start to realize why Red Hat acquired Ansible :-)</p></blockquote><div>Yup, I think it's easy for us developers to forget how difficult it can be to configure and install to a real environment.</div><div><br></div><div>Any suggestions on improvements we can make are more than welcome :)</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p dir="ltr"><span class="HOEnZb"><font color="#888888"><br><br></font></span></p><span class="HOEnZb"><font color="#888888">
<p dir="ltr">/Hristo Stoyanov</p></font></span><div class="HOEnZb"><div class="h5">
<div class="gmail_quote">On Dec 17, 2015 11:32 PM, "Stian Thorgersen" <<a href="mailto:sthorger@redhat.com" target="_blank">sthorger@redhat.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On 17 December 2015 at 20:42, Hristo Stoyanov <span dir="ltr"><<a href="mailto:hr.stoyanov@peruncs.com" target="_blank">hr.stoyanov@peruncs.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p dir="ltr">Dong,<br>
I struggled with the same issues... The only way to crush the complexity of Wildfly and Keycloak is Ansible. I use Ansible templates and Keycloak imports to consistently rebuild my setup. Works with Docker pretty darn well too. But the key is Ansible.</p></blockquote><div>Only way? Sounds like you work for Ansible ;)</div><div><br></div><div>What exact things were you struggling with? We really do want to give users a good experience with Keycloak and would like to make it easier to install and configure if we can.</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span><font color="#888888">
<p dir="ltr">/Hristo Stoyanov</p>
</font></span><div class="gmail_quote"><div><div>On Dec 17, 2015 11:26 AM, "Dong Xie" <<a href="mailto:xied75@gmail.com" target="_blank">xied75@gmail.com</a>> wrote:<br type="attribution"></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div><div lang="EN-GB" link="blue" vlink="#954F72"><div><p class="MsoNormal">Dear all,</p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">I wonder how do I work around needing to browse the web page and login with admin + admin to change the password? We are deploying keycloak in an automated flow thus no human interaction is expected.</p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">Thanks very much for your help!</p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">Best,</p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">Dong<u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">Sent from <a href="http://go.microsoft.com/fwlink/?LinkId=550986" target="_blank">Mail</a> for Windows 10</p></div></div><br></div></div><span>_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br></span></blockquote></div>
<br>_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br></blockquote></div><br></div></div>
</blockquote></div>
</div></div></blockquote></div><br></div></div>