production: OIN -> SWH deposit client

production:

• client: needs to create their production account
• client: asavory
• Domain and provider url from client [3]
• Add swh.deposit.api role to user in keycloak in production realm
• deposit db: Create deposit api collection & client [2] (same as staging)
• Ask client whether the deposit access is ok

[1] https://docs.softwareheritage.org/devel/swh-deposit/api/register-account.html#as-a-sysadm

[2] Output sample cli

swhdeposit@deposit:~$ swh deposit admin \
  --config-file $SWH_CONFIG_FILENAME \
  --platform production \
  user create \
    --collection "<collection>" \
    --username "<username>" \
    --provider-url <url-tbd> \
    --domain "<domain>"
Collection '<collection>' exists, skipping.
Create user '<username>'.
User '<username>' created.

[3] Using the same configuration as staging user

2024-05-14 09:45:51 swh-deposit@db1:5432 λ select * from deposit_client where user_ptr_id=13;
+-------------+-------------+-----------------------------------+--------------------------+
| user_ptr_id | collections |           provider_url            |          domain          |
+-------------+-------------+-----------------------------------+--------------------------+
|          13 | {12}        | https://openinventionnetwork.com/ | openinventionnetwork.com |
+-------------+-------------+-----------------------------------+--------------------------+
(1 row)

added activity::MRO label

Just in case, I double checked keycloak (realm production) and no OIN (Open Invention Network) related users there so far.

Note: Versus the one account amurphy97 in staging.

Reply from the email, user account: asavory

changed the description

[x] deposit db: Create deposit api collection & client [2] (same as staging)

done [1]

[1] From one of the deposit server pod:

swh@deposit-568cff6c58-jfdj6:~$ swh deposit admin \
  --config-file $SWH_CONFIG_FILENAME \
  --platform production \
  user create \
    --collection "oin" \
    --username "asavory" \
    --provider-url "https://openinventionnetwork.com/" \
    --domain "openinventionnetwork.com"
Create collection 'oin'.
Collection 'oin' created.
Create user 'asavory'.
User 'asavory' created.

marked the checklist item deposit db: Create deposit api collection & client [2] (same as staging) as completed

@bchauvet Done on our side.

thanks ! I'll close the issue as soon as I get confirmation from OIN that all is ok on their side :)