Keycloak Command Line Interface¶
Provider CLI has been integrated with Apache Airflow CLI airflow command.
Usage: airflow [-h] GROUP_OR_COMMAND ...
Positional Arguments¶
- GROUP_OR_COMMAND
Possible choices: keycloak-auth-manager
Sub-commands¶
keycloak-auth-manager¶
Manage resources used by Keycloak auth manager
airflow keycloak-auth-manager [-h] COMMAND ...
Positional Arguments¶
- COMMAND
Possible choices: add-user-to-team, create-all, create-permissions, create-resources, create-scopes, create-team
Sub-commands¶
add-user-to-team¶
Add a Keycloak user to a team group
airflow keycloak-auth-manager add-user-to-team [-h] [--client-id CLIENT_ID] [--password [PASSWORD]] [--user-realm USER_REALM] [--username USERNAME] target_username team
Positional Arguments¶
- target_username
Username to add to the team
- team
Team name
Named Arguments¶
- --client-id
ID of the client used to create resources
Default:
'admin-cli'- --password
Password associated to the user used to create resources. If not provided, you will be prompted to enter it.
- --user-realm
Realm name where the user used to create resources is
Default:
'master'- --username
Username associated to the user used to create resources
create-all¶
Create all entities (scopes, resources and permissions) in Keycloak
airflow keycloak-auth-manager create-all [-h] [--client-id CLIENT_ID] [--dry-run] [--password [PASSWORD]] [--teams TEAMS] [--user-realm USER_REALM] [--username USERNAME]
Named Arguments¶
- --client-id
ID of the client used to create resources
Default:
'admin-cli'- --dry-run
Perform a dry run without creating any resources
Default:
False- --password
Password associated to the user used to create resources. If not provided, you will be prompted to enter it.
- --teams
Comma-separated list of team names
- --user-realm
Realm name where the user used to create resources is
Default:
'master'- --username
Username associated to the user used to create resources
create-permissions¶
Create permissions in Keycloak
airflow keycloak-auth-manager create-permissions [-h] [--client-id CLIENT_ID] [--dry-run] [--password [PASSWORD]] [--teams TEAMS] [--user-realm USER_REALM] [--username USERNAME]
Named Arguments¶
- --client-id
ID of the client used to create resources
Default:
'admin-cli'- --dry-run
Perform a dry run without creating any resources
Default:
False- --password
Password associated to the user used to create resources. If not provided, you will be prompted to enter it.
- --teams
Comma-separated list of team names
- --user-realm
Realm name where the user used to create resources is
Default:
'master'- --username
Username associated to the user used to create resources
create-resources¶
Create resources in Keycloak
airflow keycloak-auth-manager create-resources [-h] [--client-id CLIENT_ID] [--dry-run] [--password [PASSWORD]] [--teams TEAMS] [--user-realm USER_REALM] [--username USERNAME]
Named Arguments¶
- --client-id
ID of the client used to create resources
Default:
'admin-cli'- --dry-run
Perform a dry run without creating any resources
Default:
False- --password
Password associated to the user used to create resources. If not provided, you will be prompted to enter it.
- --teams
Comma-separated list of team names
- --user-realm
Realm name where the user used to create resources is
Default:
'master'- --username
Username associated to the user used to create resources
create-scopes¶
Create scopes in Keycloak
airflow keycloak-auth-manager create-scopes [-h] [--client-id CLIENT_ID] [--dry-run] [--password [PASSWORD]] [--user-realm USER_REALM] [--username USERNAME]
Named Arguments¶
- --client-id
ID of the client used to create resources
Default:
'admin-cli'- --dry-run
Perform a dry run without creating any resources
Default:
False- --password
Password associated to the user used to create resources. If not provided, you will be prompted to enter it.
- --user-realm
Realm name where the user used to create resources is
Default:
'master'- --username
Username associated to the user used to create resources
create-team¶
Create Keycloak team group, resources, and permissions
airflow keycloak-auth-manager create-team [-h] [--client-id CLIENT_ID] [--dry-run] [--password [PASSWORD]] [--user-realm USER_REALM] [--username USERNAME] team
Positional Arguments¶
- team
Team name
Named Arguments¶
- --client-id
ID of the client used to create resources
Default:
'admin-cli'- --dry-run
Perform a dry run without creating any resources
Default:
False- --password
Password associated to the user used to create resources. If not provided, you will be prompted to enter it.
- --user-realm
Realm name where the user used to create resources is
Default:
'master'- --username
Username associated to the user used to create resources