<!--If the issue is concerning a bug, please use dedicated template--> ### Summary Temporary `e2e-*` Keycloak users that are created and captured into the cm are gone by the time of comparison made by the `mgmt-check-keycloak-cm`. The job is regenerating the `keycloak/keycloak-user-resources` by running the `keycloak-users-configmap` cronjob, the checks with `.gitlab/ci/scripts/check_keycloak_cm.py` The job `mgmt-sso` is running in the same stage and starts almost at the same time. The `test_neuvector_keycloak_group_role` creates an `e2e-` user directly through the Keycloak API and deletes it when the test is finished. When the reading of the Keycloak is inside the lifetime of that user, the configmap contains it and the test is passing. When the comparison is running after the delete, `check_keycloak_refs` gets a **404** on its **UUID** and the job fails with `MISSING USER`. The failure is purely intermittent because it depends entirely on when the cronjob run is triggered relative to the two short job test windows. Can be observed on: [Pipeline #2894770222 · Sylva-projects / sylva-core · GitLab](https://gitlab.com/sylva-projects/sylva-core/-/pipelines/2894770222) Suspected also on: [Pipeline #2881888220 · Sylva-projects / sylva-core · GitLab](https://gitlab.com/sylva-projects/sylva-core/-/pipelines/2881888220) [Pipeline #2881888216 · Sylva-projects / sylva-core · GitLab](https://gitlab.com/sylva-projects/sylva-core/-/pipelines/2881888216) [Pipeline #2886629953 · Sylva-projects / sylva-core · GitLab](https://gitlab.com/sylva-projects/sylva-core/-/pipelines/2886629953) [Pipeline #2881888185 · Sylva-projects / sylva-core · GitLab](https://gitlab.com/sylva-projects/sylva-core/-/pipelines/2881888185) Observed in ``` WARNING check_keycloak_cm: MISSING USER: 'e2e-9296e7f23a57' (externalName=0119979f-30a1-4f6c-8c6d-47176d32ab96) /usr/lib/python3.12/site-packages/urllib3/connectionpool.py:1129: InsecureRequestWarning: Unverified HTTPS request is being made to host 'keycloak.sylva'. Adding certificate verification is strongly advised ``` From `mgmt-sso` ``` tools/login-test/test_sso_playwright.py::test_neuvector_keycloak_group_role[firefox-neuvector-readers-reader] PASSED [ 45%] tools/login-test/test_sso_playwright.py::test_harbor_sso[firefox] PASSED [ 54%] ``` **Also found on `upgrade-from-release-1.8`** [mgmt-check-keycloak-cm (#17163989125) · Jobs · Sylva-projects / sylva-core · GitLab](https://gitlab.com/sylva-projects/sylva-core/-/jobs/17163989125) ``` WARNING check_keycloak_cm: USER IN KEYCLOAK BUT NOT IN CONFIGMAP: 'e2e-c91187f6406b' (id=d68a0238-c344-4519-bc91-a465c9ee070d) ERROR check_keycloak_cm: Found 1 Keycloak resource(s) missing from ConfigMap. The ConfigMap may be out of sync with Keycloak. ``` [mgmt-check-keycloak-cm (#17193732734) · Jobs · Sylva-projects / sylva-core · GitLab](https://gitlab.com/sylva-projects/sylva-core/-/jobs/17193732734) ``` WARNING check_keycloak_cm: USER IN KEYCLOAK BUT NOT IN CONFIGMAP: 'e2e-3fec34538511' (id=fee53ae0-4b82-48fb-81b2-adf7d5f358b1) ERROR check_keycloak_cm: Found 1 Keycloak resource(s) missing from ConfigMap. The ConfigMap may be out of sync with Keycloak. ``` #### related references <!--Put here any RFE, issue, MR reference which could be related to this issue to have a better picture of the context--> ### Details <!--Explain what is the purpose of this issue-->