UNCLASSIFIED - NO CUI

Sonarqube template uses wrong field identifier

Bug

Description

Following the configuration guide for Sonarqube SAML with Keycloak, I noticed that the Sonarqube key for the groups for a user appears to be mapped incorrectly. Specifically, sonar.auth.saml.user.group should be sonar.auth.saml.group.name. See here.

I have not been able to configure SAML sso via the templated values. I believe the above key issue is one of the problems (I can create an MR with the fix if desired), but perhaps not the only one. It does work if I override the values manually like this:

addons:
  sonarqube:
    values:
      sonarProperties:
        sonar.core.serverBaseURL: <base url>
        sonar.auth.saml.enabled: true
        sonar.auth.saml.applicationId: <app id>
        sonar.auth.saml.providerName: <provider name>
        sonar.auth.saml.providerId: <provider id>
        sonar.auth.saml.loginUrl: <login url>
        sonar.auth.saml.user.login: login
        sonar.auth.saml.user.name: name
        sonar.auth.saml.user.email: email
        sonar.auth.saml.group.name: groups

Haven't figured out why, but when I set the values via addons.sonarqube.sso it doesn't work. It appears to save some of the settings, but when I try using the sso from Sonarqube there is an error about not having permission to access the resource.

BigBang Version

BB 1.26.0