Merge branch 'keycloak-misc' into 'master'

keycoak: Make last name optional and enable v3 of the account console

See merge request archlinux/infrastructure!730

roles/keycloak/templates/keycloak.conf.j2

@@ -16,4 +16,4 @@ db-url=jdbc:postgresql://localhost/{{ keycloak_db_name }}
 # https://www.keycloak.org/2022/04/keycloak-1800-released#_openid_connect_logout
 spi-login-protocol-openid-connect-legacy-logout-redirect-uri=true
 
-features=declarative-user-profile
+features=declarative-user-profile,account3

tf-stage2/keycloak.tf

@@ -213,8 +213,6 @@ resource "keycloak_realm_user_profile" "archlinux" {
     name         = "lastName"
     display_name = "$${lastName}"
 
-    required_for_roles = ["user"]
-
     permissions {
       view = ["admin", "user"]
       edit = ["admin", "user"]