migrate Rancher Keycloak saml to oidc user

migrate-keycloak-user.sh

#!/bin/sh

# keycloak saml user object:
# principalIds:
# - keycloak_user://john.do@example.com
# - local://u-pxxxxxxx
#
# keycloak oidc user object:
# principalIds:
# - keycloakoidc_user://john.do@example.com
# - local://u-pxxxxxxx

for i in `kubectl get users.management.cattle.io -o custom-columns="USER:".metadata.name --no-headers`
do
        pri=$(kubectl get users.management.cattle.io $i -o json | jq -r '.principalIds[]?')
        for p in $pri
        do
                if [[ $p =~ "keycloak_user" ]]; then
                        e=$(echo $p |sed 's/^.*\/\///')
                        echo "migrate $i - $e"

                        kubectl get users.management.cattle.io $i -o json \
                            | jq '.principalIds = ["keycloakoidc_user://'$e'","local://'$i'"]' \
                            | kubectl replace -f - --validate=false

                fi
        done
done