feat(compose): Configure Keycloak with OpenTofu

This change replaces the import of master-realm.json during startup of
the keycloak container with execution of an OpenTofu module in a
separate container.

Fixes #20.

Signed-off-by: Haiko Schol <[email protected]>

Author: haikoschol

.gitignore

@@ -14,6 +14,11 @@ out/
 /scripts/helm/ort-server/charts/
 /scripts/helm/*.tgz
 
+# OpenTofu state
+/scripts/docker/keycloak/tofu/.terraform
+/scripts/docker/keycloak/tofu/.terraform.lock.hcl
+/scripts/docker/keycloak/tofu/terraform.tfstate*
+
 # Private environment for IDEA HTTP client
 http-client.private.env.json
 

docker-compose.yml

@@ -61,7 +61,6 @@ services:
   keycloak:
     image: quay.io/keycloak/keycloak:24.0.4
     restart: unless-stopped
-    entrypoint: /opt/keycloak_init/init-keycloak.sh
     command:
     - "start-dev"
     depends_on:
@@ -88,6 +87,18 @@ services:
       source: ./scripts/docker/keycloak/
       target: /opt/keycloak_init/
 
+  config-keycloak:
+    image: ghcr.io/opentofu/opentofu:latest
+    restart: no
+    entrypoint: /srv/workspace/init-keycloak.sh
+    depends_on:
+      keycloak:
+        condition: service_healthy
+    volumes:
+      - type: bind
+        source: ./scripts/docker/keycloak/tofu
+        target: /srv/workspace
+
   graphite:
     image: graphiteapp/graphite-statsd:1.1.10-5
     restart: unless-stopped
@@ -118,6 +129,8 @@ services:
         condition: service_healthy
       keycloak:
         condition: service_healthy
+      config-keycloak:
+        condition: service_completed_successfully
       rabbitmq:
         condition: service_healthy
       graphite: