Ort-server core and Keycloak is not getting synced

[AnishaM7]

Hi Team,

We are running ort-server, we see that new users we create in keyclock are not getting synced to ort-server core.
Also ort-server superuser groups are not getting gerenarted in keyclock.

can you please help us resolve this

[sschuberth]

can you please help us resolve this

In order to do so, please at least share the version details of you instance. Also note that as of version 0.44.0, role management from was migrated from Keycloak to the ORT Server database.

[AnishaM7]

Hi @sschuberth , we are using this version of ort-server-core eclipse-apoapsis/ort-server-core:sha256:ef964eefdf52c4fa4ed66f3d58caafd2933c079537cbde6bb5305eb6a8db0060

[sschuberth]

@AnishaM7, please don't just share the SHA1 of the image, but the source code release it maps to. I.e. a version from the releases page.

[AnishaM7]

In the past we were assisted by Guenther Patrick and Heger Oliver from your team to deploy the ORT Server in our environment. The deployment was performed using the Helm command below, with all images configured to use the latest version:
helm upgrade --install ort-server ./ort-server --namespace ort-server -f values.yaml --set imageTag=latest

Version details from ort-ui

[mnonnenmacher]

@AnishaM7 I would recommend against using latest for the deployment and instead use a specific version, that gives you more control for managing breaking changes. As @sschuberth pointed out before, permissions are now not managed in Keycloak anymore, so instead you should now manage permissions via the API or UI.
The original migration missed to add a way to manage superusers, this was added in 0.47.0.

The reason for the change was that the new implementation performs significantly better when there is a large number of repositories on the server. I will close this as not planned as we are not going to move role management back to Keycloak and the required code was recently removed (#4129, #4140).