keycloak-vault-cloud: forward only zone roles to KC cloud (!579) · Merge requests · caascad / terraform / lib

Ghost User requested to merge kc-cloud-scope into master Sep 01, 2021

When authenticating on infra realm all realm roles of the user were returned to KC cloud (full scope).

This change disable full scope on KC cloud clients and put only the related zone roles in the scope.

keycloak-vault-cloud: forward only zone roles to KC cloud