Articles about keycloak-operations from the Skycloak team.
Run Keycloak on OpenShift and Azure Red Hat OpenShift in production: operator vs Helm, HA clustering, TLS route modes, and…
How many realms one Keycloak cluster can handle, measured: the cache settings to reach thousands, why restarts hit 7.5 minutes,…
How to back up and restore Keycloak: why the database is the source of truth, backing up PostgreSQL, realm exports…
Locke is an Apache 2.0 distribution of Keycloak that ships with both embedded Infinispan and a Redis cache backend, selectable…
A production benchmark of Keycloak caching on Redis (Locke) vs embedded Infinispan: ~100% throughput parity, sub-second node-loss recovery vs 31-40s.
Build real-time integrations with Keycloak events. Learn the Event Listener SPI, custom webhook providers, Kafka integration, and event filtering patterns.
Build a custom Keycloak UserStorageProvider SPI for user federation with external databases, covering credential validation, caching, and lazy loading.
Deploy Keycloak on Kubernetes for production with StatefulSets, PostgreSQL, TLS ingress, HPA autoscaling, Infinispan clustering, and resource management.
Optimize PostgreSQL for Keycloak with connection pooling, index tuning, autovacuum configuration, session table management, and event store partitioning.
Automate Keycloak realm, client, and user provisioning at scale with Ansible playbooks using community.general.keycloak modules and Ansible Vault for secrets.
Get tutorials, product updates, and Keycloak tips delivered to your inbox.