Re: [pve-devel] [PATCH common/access-control/wt/manager v3] add realm sync jobs

[Thomas Lamprecht <t.lamprecht@proxmox.com>]

Am 17/01/2023 um 12:46 schrieb Dominik Csapak:
> pve-manager:
> 
> Dominik Csapak (4):
>   Jobs: include existing types in state file regex for deletion
>   Jobs: add RealmSync Plugin and register it
>   api: add realm-sync crud api to /cluster/jobs
>   ui: add Realm Sync panel
> 
>  PVE/API2/Cluster/Jobs.pm        |   7 +
>  PVE/Jobs.pm                     |   7 +-
>  www/manager6/Makefile           |   1 +
>  www/manager6/dc/Config.js       |   7 +
>  www/manager6/dc/RealmSyncJob.js | 364 ++++++++++++++++++++++++++++++++
>  5 files changed, 385 insertions(+), 1 deletion(-)
>  create mode 100644 www/manager6/dc/RealmSyncJob.js
> 

Now applied those too finally, thanks!

Some thoughts:

* would clarify that a existing LDAP/AD realm is required via some UX change in the
  add/edit widnow, maybe:

  - add an empty text in the field

  - disable the "scope" field until an realm is selected, as otherwise the invalid
    state is slightly confusing.

* Merge this into realm, as panel at the bottom there.
  Having many realms is rather the exception, the two built-ins plus one or maybe
  two external ones (e.g., a LDAP and a OIDC) are probably enough for most setups.
  That means we got a lot of "free" reals^W space estate in the existing realm panel,
  putting that to better use and avoiding a tree entry might maybe improve cognitive
  load imposed by our UI minimally (or at least not increase it).

* A "Run now" button is missing?