Add Keycloak realm import and LDAP role groups

- Auto-import the clustercockpit realm on Keycloak start
- Rewrite the generated LDAP directory with cc-* role groups and dev users
- Move config.json to the main/nats/auth schema; cc-backend now on :8088
- Add resetDev.sh to tear down containers, volumes and generated data
- Bump cc-metric-store build image to golang 1.26.4
- Ignore all of data/ (generated by dataGenerationScript.sh)

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

misc/config.json

@@ -1,78 +1,84 @@
 {
-  "addr": "127.0.0.1:8080",
-  "short-running-jobs-duration": 300,
+  "main": {
+    "addr": "0.0.0.0:8088",
+    "short-running-jobs-duration": 300,
+    "emission-constant": 317,
+    "resampling": {
+      "minimum-points": 600,
+      "trigger": 30,
+      "resolutions": [
+        600,
+        300,
+        120,
+        60
+      ]
+    },
+    "api-subjects": {
+      "subject-job-event": "cc.job.event",
+      "subject-node-state": "cc.node.state"
+    }
+  },
+  "nats": {
+    "address": "nats://0.0.0.0:4222",
+    "username": "root",
+    "password": "root"
+  },
+  "auth": {
+    "jwts": {
+      "max-age": "2000h",
+      "public-key": "kzfYrYy+TzpanWZHJ5qSdMj5uKUWgq74BWhQG6copP0=",
+      "private-key": "dtPC/6dWJFKZK7KZ78CvWuynylOmjBFyMsUWArwmodOTN9itjL5POlqdZkcnmpJ0yPm4pRaCrvgFaFAbpyik/Q=="
+    },
+    "oidc": {
+      "provider": "http://localhost:8080/realms/clustercockpit",
+      "client-id": "cc-backend",
+      "client-secret": "cc-backend-dev-secret",
+      "sync-user-on-login": true,
+      "update-user-on-login": true,
+      "role-mapping": {
+        "cc-admin": "admin"
+      }
+    },
+    "ldap": {
+      "url": "ldap://ldap:389",
+      "user-base": "ou=users,dc=example,dc=com",
+      "search-dn": "cn=admin,dc=example,dc=com",
+      "user-bind": "uid={username},ou=users,dc=example,dc=com",
+      "user-filter": "(objectclass=posixAccount)",
+      "username-attr": "cn",
+      "uid-attr": "uid",
+      "sync-password": "mashup",
+      "sync-interval": "2h",
+      "sync-user-on-login": true,
+      "update-user-on-login": true,
+      "role-filters": {
+        "admin": "(memberOf=cn=cc-admin,ou=groups,dc=example,dc=com)"
+      }
+    }
+  },
+  "cron": {
+    "commit-job-worker": "1m",
+    "duration-worker": "5m",
+    "footprint-worker": "10m"
+  },
   "archive": {
     "kind": "file",
     "path": "./var/job-archive"
   },
-  "jwts": {
-    "max-age": "2000h"
-  },
-  "apiAllowedIPs": [
-    "*"
-  ],
-  "ldap": {
-    "url": "ldap://0.0.0.0",
-    "user_base": "ou=users,dc=example,dc=com",
-    "search_dn": "cn=admin,dc=example,dc=com",
-    "user_bind": "uid={username},ou=users,dc=example,dc=com",
-    "user_filter": "(&(objectclass=posixAccount))",
-    "syncUserOnLogin": true
-  },
-  "enable-resampling": {
-    "trigger": 30,
-    "resolutions": [
-      600,
-      300,
-      120,
-      60
-    ]
-  },
-  "emission-constant": 317,
-  "clusters": [
+  "metric-store-external": [
     {
-      "name": "fritz",
-      "metricDataRepository": {
-        "kind": "cc-metric-store",
-        "url": "http://0.0.0.0:8084",
-        "token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJFZERTQSJ9.eyJ1c2VyIjoiYWRtaW4iLCJyb2xlcyI6WyJST0xFX0FETUlOIiwiUk9MRV9BTkFMWVNUIiwiUk9MRV9VU0VSIl19.d-3_3FZTsadPjDEdsWrrQ7nS0edMAR4zjl-eK7rJU3HziNBfI9PDHDIpJVHTNN5E5SlLGLFXctWyKAkwhXL-Dw"
-      },
-      "filterRanges": {
-        "numNodes": {
-          "from": 1,
-          "to": 64
-        },
-        "duration": {
-          "from": 0,
-          "to": 86400
-        },
-        "startTime": {
-          "from": "2022-01-01T00:00:00Z",
-          "to": null
-        }
-      }
+      "scope": "fritz",
+      "url": "http://0.0.0.0:8084",
+      "token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJFZERTQSJ9.eyJ1c2VyIjoiYWRtaW4iLCJyb2xlcyI6WyJST0xFX0FETUlOIiwiUk9MRV9BTkFMWVNUIiwiUk9MRV9VU0VSIl19.d-3_3FZTsadPjDEdsWrrQ7nS0edMAR4zjl-eK7rJU3HziNBfI9PDHDIpJVHTNN5E5SlLGLFXctWyKAkwhXL-Dw"
     },
     {
-      "name": "alex",
-      "metricDataRepository": {
-        "kind": "cc-metric-store",
-        "url": "http://0.0.0.0:8084",
-        "token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJFZERTQSJ9.eyJ1c2VyIjoiYWRtaW4iLCJyb2xlcyI6WyJST0xFX0FETUlOIiwiUk9MRV9BTkFMWVNUIiwiUk9MRV9VU0VSIl19.d-3_3FZTsadPjDEdsWrrQ7nS0edMAR4zjl-eK7rJU3HziNBfI9PDHDIpJVHTNN5E5SlLGLFXctWyKAkwhXL-Dw"
-      },
-      "filterRanges": {
-        "numNodes": {
-          "from": 1,
-          "to": 64
-        },
-        "duration": {
-          "from": 0,
-          "to": 86400
-        },
-        "startTime": {
-          "from": "2022-01-01T00:00:00Z",
-          "to": null
-        }
-      }
+      "scope": "alex",
+      "url": "http://0.0.0.0:8084",
+      "token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJFZERTQSJ9.eyJ1c2VyIjoiYWRtaW4iLCJyb2xlcyI6WyJST0xFX0FETUlOIiwiUk9MRV9BTkFMWVNUIiwiUk9MRV9VU0VSIl19.d-3_3FZTsadPjDEdsWrrQ7nS0edMAR4zjl-eK7rJU3HziNBfI9PDHDIpJVHTNN5E5SlLGLFXctWyKAkwhXL-Dw"
     }
-  ]
-}
+  ],
+  "metric-store": {
+    "retention-in-memory": "24h",
+    "memory-cap": 100
+  }
+}