crossplane-contrib/provider-keycloak v2.12.0 on GitHub

New Features

Executions

In Keycloak, authentication executions can be nested within subflows. However, the provider's Execution resource could only reference Flow resources, not Subflow resources before:

problem:

# This worked ✅
apiVersion: authenticationflow.keycloak.crossplane.io/v1alpha1
kind: Execution
spec:
  forProvider:
    parentFlowAliasRef:
      name: my-flow  # References a Flow

# This failed ❌
apiVersion: authenticationflow.keycloak.crossplane.io/v1alpha1
kind: Execution
spec:
  forProvider:
    parentFlowAliasRef:
      name: my-subflow  # References a Subflow - selector couldn't resolve

Now this works ✅:

apiVersion: authenticationflow.keycloak.crossplane.io/v1alpha1
kind: Execution
metadata:
  name: execution-in-subflow
spec:
  forProvider:
    authenticator: auth-username-password-form
    # NEW: Can now reference Subflow resources
    parentSubflowAliasRef:
      name: my-subflow
    priority: 10
    realmIdRef:
      name: my-realm
    requirement: REQUIRED
  providerConfigRef:
    name: keycloak-provider-config

Using selectors also works ✅:

apiVersion: authenticationflow.keycloak.crossplane.io/v1alpha1
kind: Execution
metadata:
  name: execution-with-selector
spec:
  forProvider:
    authenticator: auth-otp-form
    # NEW: Selector for Subflow resources
    parentSubflowAliasSelector:
      matchLabels:
        flow-type: authentication
    priority: 20
    realmIdRef:
      name: my-realm
    requirement: REQUIRED
  providerConfigRef:
    name: keycloak-provider-config

What's Changed

fix(credentials): correct parsing of client_timeout and tls_insecure_… by @yoelpadronglez in #444
feat(executions): Enable Execution resources to reference Subflow resources by @Breee in #448

New Contributors

@yoelpadronglez made their first contribution in #444

Full Changelog: v2.11.0...v2.12.0