Plan:
- Install existing users into keycloak
- Deploy configuration change
- Ensure integration test is still happy
- further checks (service document access with auth, refuse access, ...)
- Deploy memcached
- Checks
Description
Description
Revisions and Commits
Revisions and Commits
| rSPSITE puppet-swh-site | |||
| D5374 | rSPSITEd5518771c1b4 deposit: Configure deposit to use keycloak in production | ||
| D5372 | rSPSITE7f5f78792f15 keycloak: Add swh-deposit client in production realm | ||
Related Objects
Related Objects
- Mentioned Here
- D5372: keycloak: Add swh-deposit client in production realm
Event Timeline
Comment Actions
- D5372: Install keycloak deposit client into the production realm.
- Install existing deposit users into keycloak:
$ cd snippets/ardumont/keycloak $ python -m migrate_users_to_keycloak --server-url https://auth.softwareheritage.org/auth/ --realm-name SoftwareHeritage --admin-user ardumont --admin-pass "$(pass ls ardumont/swh/keycloak | head -1)" --credentials-path /tmp/production-users.yml INFO:__main__:keycloak server: https://auth.softwareheritage.org/auth/ ; realm: SoftwareHeritage INFO:__main__:Client: swh-deposit ; client role: swh.deposit.api INFO:__main__:User 'hal' installed. INFO:__main__:User 'swh' installed. INFO:__main__:User 'intel' installed. INFO:__main__:User 'hal-preprod' installed. INFO:__main__:User 'hal-test' installed. INFO:__main__:User 'ipol' installed.