From e0ed1f011c0b9496c982cff4abb94a169d96eb5c Mon Sep 17 00:00:00 2001
From: Kostis Trantzas <ktrantzas@ece.upatras.gr>
Date: Wed, 8 Oct 2025 17:09:04 +0300
Subject: [PATCH] Adding the OSL_AUTOACK_ORDER role at OpenSlice realm in
 Keycloak

---
 compose/keycloak-init/realm-export.json           | 15 +++++++++++++++
 .../files/keycloak-init/realm-export.json         | 15 +++++++++++++++
 2 files changed, 30 insertions(+)

diff --git a/compose/keycloak-init/realm-export.json b/compose/keycloak-init/realm-export.json
index f74761a..5134737 100644
--- a/compose/keycloak-init/realm-export.json
+++ b/compose/keycloak-init/realm-export.json
@@ -39,6 +39,20 @@
   "failureFactor": 30,
   "roles": {
     "realm": [
+      {
+        "id": "4f485a21-80c6-466e-8241-b3942aadf93a",
+        "name": "OSL_AUTOACK_ORDER",
+        "description": "This OSL role is used to allow issuing Service Orders, which are auto-acknowledged, without the need for approval",
+        "composite": true,
+        "composites": {
+          "realm": [
+            "USER"
+          ]
+        },
+        "clientRole": false,
+        "containerId": "openslice",
+        "attributes": {}
+      },
       {
         "id": "1741dd77-ee50-4fd7-bec6-1a6d3d9d778a",
         "name": "MENTOR",
@@ -77,6 +91,7 @@
       {
         "id": "a2685809-e874-4009-8435-92ded0c7180d",
         "name": "ADMIN",
+        "description": "This OSL role is used to access the admin views and perform administrative tasks (you need at least one user at this role to setup the system)",
         "composite": true,
         "composites": {
           "realm": [
diff --git a/kubernetes/helm/openslice/files/keycloak-init/realm-export.json b/kubernetes/helm/openslice/files/keycloak-init/realm-export.json
index 0be17ce..16043a4 100644
--- a/kubernetes/helm/openslice/files/keycloak-init/realm-export.json
+++ b/kubernetes/helm/openslice/files/keycloak-init/realm-export.json
@@ -39,6 +39,20 @@
   "failureFactor": 30,
   "roles": {
     "realm": [
+      {
+        "id": "4f485a21-80c6-466e-8241-b3942aadf93a",
+        "name": "OSL_AUTOACK_ORDER",
+        "description": "This OSL role is used to allow issuing Service Orders, which are auto-acknowledged, without the need for approval",
+        "composite": true,
+        "composites": {
+          "realm": [
+            "USER"
+          ]
+        },
+        "clientRole": false,
+        "containerId": "openslice",
+        "attributes": {}
+      },      
       {
         "id": "1741dd77-ee50-4fd7-bec6-1a6d3d9d778a",
         "name": "MENTOR",
@@ -77,6 +91,7 @@
       {
         "id": "a2685809-e874-4009-8435-92ded0c7180d",
         "name": "ADMIN",
+        "description": "This OSL role is used to access the admin views and perform administrative tasks (you need at least one user at this role to setup the system)",
         "composite": true,
         "composites": {
           "realm": [
-- 
GitLab