...
Upgrade Sequencing
Process applications in dependency order or via one entitlement request
Allow time for event processing between upgrades
Monitoring
Watch for warnings and errors in mod-roles-keycloak during and after the upgrade.
Monitor Kafka lags
Verify permission assignments post-upgrade (smoke tests?)
Rollback Planning
Have rollback scripts ready
Test rollback procedures in non-production environments
Future Improvements
...
Jira Legacy server System Jira serverId 01505d01-b853-3c2e-90f1-ee9b165564fc key UXPROD-5435
Conclusion
Permission replacement during upgrades is a complex but essential feature that ensures continuity of access rights. While the current implementation handles most scenarios effectively, careful planning and monitoring are necessary for successful upgrades, particularly in complex application dependency scenarios.
...