Michael Bolot

This also appears to affect rancher/rancher#39033. It would be best to have this fixed before we attempt to handle the ghost cluster issue from the backend side any further.

## Validation Template ## Root Cause During the split between 2.6 and 2.7, there was a version of the webhook merged which is only available for 2.6 at the moment....

Hey @curlup . Thank you for submitting a PR to fix this issue. To answer your questions: > which brach / tag I should base this from, please let me...

@curlup Thank you for the PR. Unfortunately, it currently appears that this change will result in Rancher only supporting newer versions of keycloak (correct me if you disagree). We can't...

@curlup Apologies for the delay. I think we have a path forward here. @cmurphy please feel free to disagree with me if I have said anything that you disagree with....

Hey @tsrats, thanks for the input. This was actually a preferred option that we discussed and would have preferred going with. However, we discarded it because the discovery document did...

> is there the option to instruct the user to provide their discovery URL to Rancher, and then derive all the information from that? My objection to this idea is...

Had a discussion with @Sean-McQ on the non-filtering/pagination/sorting goals which can be associated with this ticket. A good bit of the data provided on issue above has various issues with...

> I think when we fetch schemas, we get more info back than what we need. Of course the number of schemas varies based on how many Helm chart apps...

In addition to validation in the webhook, there also needs to be a stop-gap implemented in rancher to ensure that the [gatherRolesRecurse](https://github.com/rancher/rancher/blob/3517d0b2ff5daabe124b6c96b1e2cde40ccb44ba/pkg/controllers/managementuser/rbac/handler_base.go#L355) function does not infinitely recurse. This should involve...