commit 2e4ec5fcccc369b7c918fe372ec78e4fff75f155
author Mohammed Naser <mnaser@vexxhost.com> Wed Jan 29 16:39:41 2025 -0500
committer Mohammed Naser <mnaser@vexxhost.com> Mon Mar 17 16:28:05 2025 +0000
tree 045724f9462745afea07462ca2fcc5c58212bef9
parent 6f66b070aaef39741bb15dc84204bbfcbaf12c61

Add support for exchanging tokens in Keycloak

Change-Id: Ie5d5bee36ece52aefd035013e8f946b1160e8c58
(cherry picked from commit c0ba66642718e492979b43bad2b2fc1ba9d7a217)

roles/keycloak/vars/main.yml

diff --git a/roles/keycloak/vars/main.yml b/roles/keycloak/vars/main.yml
index 41ee1ee..ead80fb 100644
--- a/roles/keycloak/vars/main.yml
+++ b/roles/keycloak/vars/main.yml
@@ -26,6 +26,8 @@
   #                        we have to define jdbc connection string explicitly along side
   #                        `externalDatabase` helm values.
   extraEnvVars:
+    - name: KC_FEATURES
+      value: "token-exchange,admin-fine-grained-authz"
     - name: KC_PROXY
       value: edge
     - name: KC_DB