{
  "//": "⚠️  File referensi — gunakan bootstrap.sh untuk deployment otomatis.",
  "//2": "JSON tidak mendukung shell variable expansion. Ubah nilai secara manual jika perlu import via UI.",
  "realm": "sicabe",
  "displayName": "eBdesk SiCABE",
  "enabled": true,
  "sslRequired": "none",
  "registrationAllowed": false,
  "loginWithEmailAllowed": true,
  "resetPasswordAllowed": true,
  "accessTokenLifespan": 3600,
  "ssoSessionMaxLifespan": 86400,
  "clients": [
    {
      "clientId": "trino",
      "name": "Trino — Query Engine",
      "description": "OIDC client untuk Trino (Processing Layer)",
      "enabled": true,
      "protocol": "openid-connect",
      "clientAuthenticatorType": "client-secret",
      "secret": "trino-secret",
      "standardFlowEnabled": true,
      "serviceAccountsEnabled": true,
      "publicClient": false,
      "redirectUris": ["http://localhost:*", "https://localhost:*"],
      "webOrigins": ["http://localhost:*", "https://localhost:*"]
    },
    {
      "clientId": "starrocks",
      "name": "StarRocks — OLAP Engine",
      "description": "OIDC client untuk StarRocks (Serving Layer)",
      "enabled": true,
      "protocol": "openid-connect",
      "clientAuthenticatorType": "client-secret",
      "secret": "starrocks-secret",
      "standardFlowEnabled": true,
      "serviceAccountsEnabled": true,
      "publicClient": false,
      "redirectUris": ["http://localhost:12030/*", "http://starrocks-fe:8030/api/oauth2"],
      "webOrigins": ["http://localhost:12030"]
    },
    {
      "clientId": "airflow",
      "name": "Apache Airflow — Orchestrator",
      "description": "OIDC client untuk Airflow (Ingestion Layer)",
      "enabled": true,
      "protocol": "openid-connect",
      "clientAuthenticatorType": "client-secret",
      "secret": "airflow-secret",
      "standardFlowEnabled": true,
      "serviceAccountsEnabled": true,
      "publicClient": false,
      "redirectUris": ["http://localhost:12082/*"],
      "webOrigins": ["http://localhost:12082"]
    },
    {
      "clientId": "openmetadata",
      "name": "OpenMetadata — Metadata Platform",
      "description": "OIDC client untuk OpenMetadata (Governance Layer)",
      "enabled": true,
      "protocol": "openid-connect",
      "clientAuthenticatorType": "client-secret",
      "secret": "om-secret",
      "standardFlowEnabled": true,
      "serviceAccountsEnabled": true,
      "publicClient": false,
      "redirectUris": ["http://localhost:12085/*"],
      "webOrigins": ["http://localhost:12085"]
    },
    {
      "clientId": "grafana",
      "name": "Grafana — Observability",
      "description": "OIDC client untuk Grafana (Governance Layer)",
      "enabled": true,
      "protocol": "openid-connect",
      "clientAuthenticatorType": "client-secret",
      "secret": "grafana-secret",
      "standardFlowEnabled": true,
      "serviceAccountsEnabled": true,
      "publicClient": false,
      "redirectUris": ["http://localhost:12300/*"],
      "webOrigins": ["http://localhost:12300"]
    }
  ],
  "roles": {
    "realm": [
      {
        "name": "admin",
        "description": "Administrator — akses penuh ke seluruh komponen"
      },
      {
        "name": "engineer",
        "description": "Data Engineer — akses ke Ingestion, Processing, Storage"
      },
      {
        "name": "analyst",
        "description": "Data Analyst — akses baca ke Serving dan Governance"
      },
      {
        "name": "viewer",
        "description": "Viewer — akses baca terbatas ke dashboard dan metadata"
      }
    ]
  },
  "users": [
    {
      "username": "admin",
      "enabled": true,
      "email": "admin@sicabe.local",
      "firstName": "Administrator",
      "lastName": "SiCABE",
      "credentials": [{ "type": "password", "value": "admin123", "temporary": false }],
      "realmRoles": ["admin"],
      "clientRoles": {
        "trino": ["admin"],
        "starrocks": ["admin"],
        "airflow": ["admin"],
        "openmetadata": ["admin"],
        "grafana": ["Admin"]
      }
    },
    {
      "username": "engineer",
      "enabled": true,
      "email": "engineer@sicabe.local",
      "firstName": "Data",
      "lastName": "Engineer",
      "credentials": [{ "type": "password", "value": "engineer123", "temporary": false }],
      "realmRoles": ["engineer"]
    },
    {
      "username": "analyst",
      "enabled": true,
      "email": "analyst@sicabe.local",
      "firstName": "Data",
      "lastName": "Analyst",
      "credentials": [{ "type": "password", "value": "analyst123", "temporary": false }],
      "realmRoles": ["analyst"]
    },
    {
      "username": "viewer",
      "enabled": true,
      "email": "viewer@sicabe.local",
      "firstName": "Viewer",
      "lastName": "SiCABE",
      "credentials": [{ "type": "password", "value": "viewer123", "temporary": false }],
      "realmRoles": ["viewer"]
    }
  ],
  "scopeMappings": [
    {
      "client": "trino",
      "roles": ["admin", "engineer"]
    },
    {
      "client": "airflow",
      "roles": ["admin", "engineer"]
    }
  ]
}