*Creation*
The KeycloakUser resource will specify a user name and a realm name. It may become more advanced in the future but for now this is enough to get started.
- When the operator sees this resource it should mark its status as accepted - It should look up the realm resource referenced and look up the keycloak that the realm resource is owned by https://kubernetes.io/docs/concepts/workloads/controllers/garbage-collection/ - It should set the finalizer as org.aerogear.keycloakoperator - it should authenticate using the credentials in the secret referenced by the keycloak resource - it should generate a password and create a user in the realm and put the details into a secret in the same namespace that the custom resource was created in.
*Deletion*
When the resource is deleted, we should delete the user in the keycloak realm and the associated secret then remove the finalizer reference |
|