Access token lifespan terrfaform configuration

[palagdan]

Resolve #301

[palagdan]

/kbss-bot summarize

[kbss-bot]

SummarizePRAgent Report 🤖

🔍 PR Overview

This Pull Request aims to enhance the Terraform configuration for Access Token lifespan settings within the Keycloak authentication server setup. It adds flexibility by allowing the lifespan to be configured through environment variables.

🧐 Diff Summary

• docker-compose.yml

  • Modified the entrypoint to include ${KC_REALM}.
  • Replaced hardcoded kc_realm variable with a dynamic one via the $KC_REALM environment variable, defaulting to "record-manager".
  • Introduced a new environment variable, kc_access_token_lifespan, which defaults to "5m".

• main.tf

  • Added a keycloak_realm resource definition to set the access_token_lifespan property based on the variable kc_access_token_lifespan.

• run.sh

  • Adjusted the script to accept the realm name as a third argument (KC_REALM).
  • Included a command to import the Keycloak realm using the provided realm name.

• variables.tf

  • Introduced a new variable for kc_access_token_lifespan, allowing configurable management of access token duration.

⚡️ Change Impact

• Benefits:

  • Enhances configurability of the Keycloak setup, which can now adapt to different environments without altering the code.
  • Supports better security practices by allowing customized access token lifespans based on specific application requirements.

• Risks:

  • Introducing additional environment variables could lead to configuration errors if not properly documented or managed.
  • The effectiveness of the access_token_lifespan setting depends on the operator's understanding of how Keycloak manages tokens and potential implications of shorter token lifespans.

✅ Final Verdict (Experimental)

This PR is considered ready to merge as it introduces useful configuration improvements that align with flexible infrastructure management practices. However, it is advisable to conduct thorough testing in a staging environment to confirm the correct behavior of the access_token_lifespan setting before deployment in production. Proper documentation of the new environment variables should also be provided to minimize configuration errors.

📋 Click to see available commands

🤖 PR Command List

Command	Description
/kbss-bot label	Label the current PR
/kbss-bot summarize	Generates a concise summary of the current PR changes