将组添加到 Keycloak 操作员用户时，我收到用户未找到错误

Posted 2023-02-19

【中文标题】将组添加到 Keycloak 操作员用户时，我收到用户未找到错误

【英文标题】：When adding a group to a Keycloak operator user, I get a user not found error

【发布时间】：2021-12-14 00:24:29

【问题描述】：

我使用这个 github https://github.com/keycloak/keycloak-operator/tree/master/deploy/examples 中的示例使用清单，例如 realm.yaml 和 user.yaml。 我们的用户清单看起来像这样。将组添加到此文件时，我们会从 helm 收到此错误：

来自服务器的错误 (NotFound): keycloakusers.keycloak.org "example-user" not found

使用 keycloak 清单创建组的正确方法是什么？

apiVersion: keycloak.org/v1alpha1
kind: KeycloakUser
metadata:
  name: example-user
spec:
  user:
    username: "example-user"
    email: "[e-mail]"
    enabled: True
    emailVerified: True
    # credentials:
    #   - type: "password"
    #     value: "password"
    realmRoles:
      - "offline_access"
      - "uma_authorization"
      - "user"
    clientRoles:
      account:
        - "manage-account"
      realm-management:
        - "manage-users"
  realmSelector:
    matchLabels:
      app: sso

【参考方案1】：

keycloak-user 使用 crd 时，请查看下面的 yaml。但是，您应该记住该组（您要放置..）必须已经存在。

apiVersion: keycloak.org/v1alpha1
kind: KeycloakUser
metadata:
  name: example-user
spec:
  user:
    username: "example-user"
    email: "[e-mail]"
    enabled: True
    emailVerified: True
    # credentials:
    #   - type: "password"
    #     value: "password"
    realmRoles:
      - "offline_access"
      - "uma_authorization"
      - "user"
    groups:
      - "your group"
    clientRoles:
      account:
        - "manage-account"
      realm-management:
        - "manage-users"
  realmSelector:
    matchLabels:
      app: sso