<developers>
    <developer>
      <name>Jason van Zyl</name>
      <id>jvanzyl</id>
      <email>******@****.***</email>
      <organization>Zenplex</organization>
      <roles>
        <role>Founder</role>
        <role>Release Manager</role>
      </roles>
    </developer>
  </developers>

  <contributors>
    <contributor>
      <name>Martin van dem Bemt</name>
      <email>******@****.***</email>
    </contributor>

		<!-- ex. parameter: fessRoles=123%0aRadmin -->
		<!-- 
		<property name="parameterKey">"fessRoles"</property>
		<property name="encryptedParameterValue">false</property>
		<property name="headerKey">"fessRoles"</property>
		<property name="encryptedHeaderValue">true</property>
		<property name="cookieKey">"fessRoles"</property>
		<property name="encryptedCookieValue">true</property>

    }

    public void setRoles_Terms(ConditionOptionCall<TermsAggregationBuilder> opLambda) {
        setRoles_Terms("roles", opLambda, null);
    }

    public void setRoles_Terms(ConditionOptionCall<TermsAggregationBuilder> opLambda, OperatorCall<BsSearchLogCA> aggsLambda) {
        setRoles_Terms("roles", opLambda, aggsLambda);
    }

  - Included Client Audience: security-admin-console

#### Adding 'admin' Role

- Go to Roles
  - Add new Role `admin` with Description `${role_admin}`.
  - Add this Role into compositive role named `default-roles-{realm}` - `{realm}` should be replaced with whatever realm you created from `prerequisites` section. This role is automatically trusted in the 'Service Accounts' tab.

  <developers>
    <developer>
      <name>Jason van Zyl</name>
      <id>jvanzyl</id>
      <email>******@****.***</email>
      <organization>Zenplex</organization>
      <roles>
        <role>Founder</role>
        <role>Release Manager</role>
      </roles>
    </developer>
  </developers>

  <contributors>
    <contributor>
      <name>Martin van dem Bemt</name>
      <email>******@****.***</email>
    </contributor>

{{/*Set up roles for Istio Gateway. Not required for gateway-api*/}}
{{- if .Values.rbac.enabled }}
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: {{ include "gateway.serviceAccountName" . }}
  namespace: {{ .Release.Namespace }}
  labels:
    {{- include "gateway.labels" . | nindent 4}}
  annotations:
    {{- .Values.annotations | toYaml | nindent 4 }}
rules:
- apiGroups: [""]
  resources: ["secrets"]

            "type" : "keyword"
          },
          "preferredLanguage" : {
            "type" : "keyword"
          },
          "registeredAddress" : {
            "type" : "keyword"
          },
          "roles" : {
            "type" : "keyword"
          },
          "roomNumber" : {
            "type" : "keyword"
          },
          "state" : {
            "type" : "keyword"
          },

      <email>developer@</email>
      <url>https://developer</url>
      <organization>developer</organization>
      <organizationUrl>https://devel.org</organizationUrl>
      <roles>
        <role>devel</role>
      </roles>
      <timezone>-1</timezone>
      <properties>
        <developer>yes</developer>
      </properties>
    </developer>
  </developers>
  <contributors>
    <contributor>

            false, false, false, "Long", 0, 0, null, null, false, null, null, null, null, null, false);
    protected final ColumnInfo _columnRoles = cci("roles", "roles", null, null, String[].class, "roles", null, false, false, false,
            "keyword", 0, 0, null, null, false, null, null, null, null, null, false);

                + ", referer=" + referer + ", requestedAt=" + requestedAt + ", responseTime=" + responseTime + ", roles="
                + Arrays.toString(roles) + ", searchWord=" + searchWord + ", user=" + user + ", userAgent=" + userAgent + ", userInfoId="