From 781152332d96f405950cdd56ae7076c6ddb14a5a Mon Sep 17 00:00:00 2001
From: "James E. Blair" <jim@acmegating.com>
Date: Tue, 7 Dec 2021 14:19:37 -0800
Subject: [PATCH] Add keycloak auth config to Zuul

This adds a keycloak realm to the Zuul auth config, so that we can
log into the zuul web ui with our test realm in keycloak.

Change-Id: Iec3777a6ea1cba0e108c7e44067d69b61cbb34a7
---
 playbooks/roles/zuul/templates/zuul.conf.j2 | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/playbooks/roles/zuul/templates/zuul.conf.j2 b/playbooks/roles/zuul/templates/zuul.conf.j2
index f2b7b8940e..e88a0cbe84 100644
--- a/playbooks/roles/zuul/templates/zuul.conf.j2
+++ b/playbooks/roles/zuul/templates/zuul.conf.j2
@@ -77,6 +77,13 @@ client_id=zuul.opendev.org
 issuer_id=zuul.opendev.org
 secret={{ zuul_local_auth_secret }}
 
+[auth keycloak]
+default=true
+driver=OpenIDConnect
+realm=zuul
+issuer_id=https://keycloak.opendev.org/auth/realms/zuul
+client_id=zuul
+
 {% for connection in zuul_connections -%}
 [connection "{{ connection['name'] }}"]
 {% for key, value in connection.items() -%}