keycloak_realm_key: handle missing config fields for default keys (#11470)

* fix(keycloak_realm_key): handle missing config fields for default keys

Keycloak API may not return 'active', 'enabled', or 'algorithm' fields
in the config response for default/auto-generated realm keys. This caused
a KeyError when the module tried to compare these fields during state
detection.

Use .get() with the expected value as default to handle missing fields
gracefully, treating them as unchanged if not present in the API response.

Fixes: #11459

* add PR link to changelog entry per review feedback

changelogs/fragments/keycloak-realm-key-keyerror-bugfix.yml

@@ -0,0 +1,5 @@
+bugfixes:
+  - keycloak_realm_key - fix ``KeyError`` crash when managing realm keys where Keycloak
+    does not return ``active``, ``enabled``, or ``algorithm`` fields in the config
+    response (https://github.com/ansible-collections/community.general/issues/11459,
+    https://github.com/ansible-collections/community.general/pull/11470).

plugins/modules/keycloak_realm_key.py

@@ -402,10 +402,17 @@ def main():
                     result["changed"] = True
 
             # Compare parameters under the "config" key
+            # Note: Keycloak API may not return all config fields for default keys
+            # (e.g., 'active', 'enabled', 'algorithm' may be missing). Handle this
+            # gracefully by using .get() with defaults.
             for p, v in changeset_copy["config"].items():
-                before_realm_key["config"][p] = key["config"][p]
+                # Get the current value, defaulting to our expected value if not present
-                if v != key["config"][p]:
+                # This handles the case where Keycloak does not return certain fields
-                    changes += f"config.{p}: {key['config'][p]} -> {v}, "
+                # for default/generated keys
+                current_value = key["config"].get(p, v)
+                before_realm_key["config"][p] = current_value
+                if v != current_value:
+                    changes += f"config.{p}: {current_value} -> {v}, "
                     result["changed"] = True
 
     # Sanitize linefeeds for the privateKey. Without this the JSON payload