KeyCloak SAML 연동

포털 설치 가이드 참조
https://github.com/PaaS-TA/paas-ta-container-platform/blob/master/install-guide/container-platform-portal/paas-ta-container-platform-portal-deployment-service-guide.md#4

# Deployment 파일 다운로드 경로 생성
$ mkdir -p ~/workspace/container-platform
$ cd ~/workspace/container-platform

# Deployment 파일 다운로드 및 파일 경로 확인
$ wget --content-disposition https://nextcloud.paas-ta.org/index.php/s/MajerbG3ZHQZQJ8/download

$ ls ~/workspace/container-platform
  cp-saml-deployment-v1.4.0.tar.gz

# Deployment 파일 압축 해제
$ tar -xvf cp-saml-deployment-v1.4.0.tar.gz

cp-saml-vars.sh

# COMMON VARIABLE (Please change the values of the four variables below.)
PAASTA_SYSTEM_DOMAIN="115.68.198.203.nip.io"                       # PaaS-TA System Domain
K8S_MASTER_NODE_IP="115.68.198.183"                                # Kubernetes Master Node Public IP
UAA_CLIENT_ADMIN_ID="admin"                                       # UAA Admin Client ID (e.g. admin)
UAA_CLIENT_ADMIN_SECRET="admin-secret"                            # UAA Admin Client Secret (e.g. admin-secret)



# The belows are the default values.
# If you change the values below, there will be a problem with the install. Please keep the values.
# KEYCLOAK
KEYCLOAK_URL="http://115.68.198.183:30190"                 # keycloak url (include http://, if apply TLS, https://)
KEYCLOAK_ADMIN_USERNAME="admin"                                   # keycloak admin username (e.g. admin)
KEYCLOAK_ADMIN_PASSWORD="admin"                                   # keycloak admin password (e.g. admin)
KEYCLOAK_ADMIN_REALM="master"                                     # keycloak admin realm
KEYCLOAK_ADMIN_CLIENT_ID="admin-cli"                              # keycloak admin client id
KEYCLOAK_CP_REALM="cp"                                      # keycloak realm for container platform portal
KEYCLOAK_CP_CLIENT_FILE="keycloak-saml-idp.json"                  # keycloak client file for container platform portal
KEYCLOAK_CP_BROKER_ALIAS="cp-saml-idp"                            # keycloak identity providers id for container platform portal

create-service-provider.sh실행

Keycloak에 대한 Access Token 값을 생성 후
json으로 정의된 데이터를 KeyCloak Identity Provider 생성
keycloak-descriptor.xml

KeyCloak REST API

https://www.keycloak.org/docs-api/18.0/rest-api/#_identity_providers_resource