first commit

2026-10-09 02:35:14 +07:00
commit 4ca7a9a58e
108 changed files with 23035 additions and 0 deletions
@@ -0,0 +1,160 @@
+{
+  "//": "⚠️  File referensi — gunakan bootstrap.sh untuk deployment otomatis.",
+  "//2": "JSON tidak mendukung shell variable expansion. Ubah nilai secara manual jika perlu import via UI.",
+  "realm": "sicabe",
+  "displayName": "eBdesk SiCABE",
+  "enabled": true,
+  "sslRequired": "none",
+  "registrationAllowed": false,
+  "loginWithEmailAllowed": true,
+  "resetPasswordAllowed": true,
+  "accessTokenLifespan": 3600,
+  "ssoSessionMaxLifespan": 86400,
+  "clients": [
+    {
+      "clientId": "trino",
+      "name": "Trino — Query Engine",
+      "description": "OIDC client untuk Trino (Processing Layer)",
+      "enabled": true,
+      "protocol": "openid-connect",
+      "clientAuthenticatorType": "client-secret",
+      "secret": "trino-secret",
+      "standardFlowEnabled": true,
+      "serviceAccountsEnabled": true,
+      "publicClient": false,
+      "redirectUris": ["http://localhost:*", "https://localhost:*"],
+      "webOrigins": ["http://localhost:*", "https://localhost:*"]
+    },
+    {
+      "clientId": "starrocks",
+      "name": "StarRocks — OLAP Engine",
+      "description": "OIDC client untuk StarRocks (Serving Layer)",
+      "enabled": true,
+      "protocol": "openid-connect",
+      "clientAuthenticatorType": "client-secret",
+      "secret": "starrocks-secret",
+      "standardFlowEnabled": true,
+      "serviceAccountsEnabled": true,
+      "publicClient": false,
+      "redirectUris": ["http://localhost:12030/*", "http://starrocks-fe:8030/api/oauth2"],
+      "webOrigins": ["http://localhost:12030"]
+    },
+    {
+      "clientId": "airflow",
+      "name": "Apache Airflow — Orchestrator",
+      "description": "OIDC client untuk Airflow (Ingestion Layer)",
+      "enabled": true,
+      "protocol": "openid-connect",
+      "clientAuthenticatorType": "client-secret",
+      "secret": "airflow-secret",
+      "standardFlowEnabled": true,
+      "serviceAccountsEnabled": true,
+      "publicClient": false,
+      "redirectUris": ["http://localhost:12082/*"],
+      "webOrigins": ["http://localhost:12082"]
+    },
+    {
+      "clientId": "openmetadata",
+      "name": "OpenMetadata — Metadata Platform",
+      "description": "OIDC client untuk OpenMetadata (Governance Layer)",
+      "enabled": true,
+      "protocol": "openid-connect",
+      "clientAuthenticatorType": "client-secret",
+      "secret": "om-secret",
+      "standardFlowEnabled": true,
+      "serviceAccountsEnabled": true,
+      "publicClient": false,
+      "redirectUris": ["http://localhost:12085/*"],
+      "webOrigins": ["http://localhost:12085"]
+    },
+    {
+      "clientId": "grafana",
+      "name": "Grafana — Observability",
+      "description": "OIDC client untuk Grafana (Governance Layer)",
+      "enabled": true,
+      "protocol": "openid-connect",
+      "clientAuthenticatorType": "client-secret",
+      "secret": "grafana-secret",
+      "standardFlowEnabled": true,
+      "serviceAccountsEnabled": true,
+      "publicClient": false,
+      "redirectUris": ["http://localhost:12300/*"],
+      "webOrigins": ["http://localhost:12300"]
+    }
+  ],
+  "roles": {
+    "realm": [
+      {
+        "name": "admin",
+        "description": "Administrator — akses penuh ke seluruh komponen"
+      },
+      {
+        "name": "engineer",
+        "description": "Data Engineer — akses ke Ingestion, Processing, Storage"
+      },
+      {
+        "name": "analyst",
+        "description": "Data Analyst — akses baca ke Serving dan Governance"
+      },
+      {
+        "name": "viewer",
+        "description": "Viewer — akses baca terbatas ke dashboard dan metadata"
+      }
+    ]
+  },
+  "users": [
+    {
+      "username": "admin",
+      "enabled": true,
+      "email": "admin@sicabe.local",
+      "firstName": "Administrator",
+      "lastName": "SiCABE",
+      "credentials": [{ "type": "password", "value": "admin123", "temporary": false }],
+      "realmRoles": ["admin"],
+      "clientRoles": {
+        "trino": ["admin"],
+        "starrocks": ["admin"],
+        "airflow": ["admin"],
+        "openmetadata": ["admin"],
+        "grafana": ["Admin"]
+      }
+    },
+    {
+      "username": "engineer",
+      "enabled": true,
+      "email": "engineer@sicabe.local",
+      "firstName": "Data",
+      "lastName": "Engineer",
+      "credentials": [{ "type": "password", "value": "engineer123", "temporary": false }],
+      "realmRoles": ["engineer"]
+    },
+    {
+      "username": "analyst",
+      "enabled": true,
+      "email": "analyst@sicabe.local",
+      "firstName": "Data",
+      "lastName": "Analyst",
+      "credentials": [{ "type": "password", "value": "analyst123", "temporary": false }],
+      "realmRoles": ["analyst"]
+    },
+    {
+      "username": "viewer",
+      "enabled": true,
+      "email": "viewer@sicabe.local",
+      "firstName": "Viewer",
+      "lastName": "SiCABE",
+      "credentials": [{ "type": "password", "value": "viewer123", "temporary": false }],
+      "realmRoles": ["viewer"]
+    }
+  ],
+  "scopeMappings": [
+    {
+      "client": "trino",
+      "roles": ["admin", "engineer"]
+    },
+    {
+      "client": "airflow",
+      "roles": ["admin", "engineer"]
+    }
+  ]
+}