From 4823460eb711f8e01d90145ee28a768442a9ed05 Mon Sep 17 00:00:00 2001
From: Andrea Dell'Amico <andrea.dellamico@isti.cnr.it>
Date: Fri, 12 Dec 2025 16:47:53 +0100
Subject: [PATCH] Add a task that optionally gets the OIDC secret from
 keycloak.

---
 tasks/main.yml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/tasks/main.yml b/tasks/main.yml
index 0efc211..e607ac7 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -1,4 +1,14 @@
 ---
+- name: Get a Keycloak client secret, authentication with credentials
+  community.general.keycloak_clientsecret_info:
+    realm: "{{ kcc_realm }}"
+    auth_keycloak_url: "{{ kcc_auth_keycloak_url }}"
+    auth_realm: "{{ kcc_auth_realm }}"
+    auth_username: "{{ kcc_auth_username }}"
+    auth_password: "{{ kcc_auth_password }}"
+    client_id: "{{client_id}}"
+  register: shinyproxy_keycloak_secret
+  when: kcc_clientid is defined
 - name: Shinyproxy as a standalone service
   ansible.builtin.import_tasks: shinyproxy_vm.yml
   when: not shinyproxy_as_docker_service