Those were removed in rSPSITE27b02fb65f2d77eba46efdff42c522056982ce6a
as puppet explicitely managed all roles for a realm or a client.
```
15:52 $ bin/octocatalog-diff --octocatalog-diff-args --no-truncate-details -t staging kelvingrove.internal.softwareheritage.org
Found host kelvingrove.internal.softwareheritage.org
Cloning into '/tmp/swh-ocd.pkNJllct/environments/production/data/private'...
done.
Cloning into '/tmp/swh-ocd.pkNJllct/environments/staging/data/private'...
done.
*** Running octocatalog-diff on host kelvingrove.internal.softwareheritage.org
I, [2021-04-28T15:53:48.828197 #874063] INFO -- : Catalogs compiled for kelvingrove.internal.softwareheritage.org
I, [2021-04-28T15:53:49.055742 #874063] INFO -- : Diffs computed for kelvingrove.internal.softwareheritage.org
diff origin/production/kelvingrove.internal.softwareheritage.org current/kelvingrove.internal.softwareheritage.org
*******************************************
Keycloak_realm[SoftwareHeritageStaging] =>
parameters =>
roles =>
- ["swh.ambassador"]
+ ["offline_access", "uma_authorization", "swh.ambassador"]
*******************************************
Keycloak_realm[SoftwareHeritage] =>
parameters =>
roles =>
- ["swh.ambassador"]
+ ["offline_access", "uma_authorization", "swh.ambassador"]
*******************************************
*** End octocatalog-diff on kelvingrove.internal.softwareheritage.org
```