ci: Configure keycloak using python script

pyproject.toml

@@ -101,7 +101,7 @@ reportMissingImports = false  # Ignore missing stubs in imported modules
 
 [tool.pytest.ini_options]
 # Run pytest with all our checkers, and don't spam us with massive tracebacks on error
-addopts = '--tb=native -vv --doctest-modules --doctest-glob="*.rst"'
+addopts = '--tb=native -vv --doctest-modules --doctest-glob="*.rst" --ignore=tests/system_tests/services'
 # https://iscinumpy.gitlab.io/post/bound-version-constraints/#watch-for-warnings
 filterwarnings = ["error", "ignore::DeprecationWarning"]
 # Doctest python code in docs, python code in src docstrings, test functions in tests

tests/system_tests/compose.yaml

@@ -35,10 +35,6 @@ services:
       - KC_BOOTSTRAP_ADMIN_USERNAME=admin
       - KC_HOSTNAME=http://localhost:8081
     command: ["start-dev"]
-    volumes:
-      - ./services/keycloak_config/:/tmp/config/
-    post_start:
-      - command: bash /tmp/config/startup.sh
     ports:
       - 8081:8080
     healthcheck:
@@ -50,6 +46,23 @@ services:
     security_opt:
       - label=disable
 
+  configure-services:
+    image: ghcr.io/astral-sh/uv:python3.13-alpine
+    network_mode: host
+    volumes:
+      - ./services/startup.py:/startup.py:ro
+    environment:
+      - KEYCLOAK_SERVER=http://localhost:8081
+      - KC_BOOTSTRAP_ADMIN_PASSWORD=admin
+      - KC_BOOTSTRAP_ADMIN_USERNAME=admin
+      - KEYCLOAK_REALM=master
+    command: ["uv", "run", "/startup.py"]
+    depends_on:
+      keycloak:
+        condition: service_healthy
+    security_opt:
+      - label=disable
+
   tiled:
     image: ghcr.io/bluesky/tiled:0.2.12
     network_mode: host # Port 8407