keycloak-operations
Articles about keycloak-operations from the Skycloak team.
Managing Keycloak Secrets the Right Way (Vault SPI)
Keep secrets out of Keycloak config: use the Keycloak vault SPI to resolve database, SMTP, and client secrets from a…
10 min read
Keycloak 26.7 Stateless Mode: Multi-Region Without Infinispan
Keycloak 26.7's stateless preview kills the external Infinispan requirement for multi-cluster. We tested it on YugabyteDB and mapped a multi-cloud…
9 min read
Migrating Keycloak From WildFly to Quarkus: A Cutover Guide
Migrate from the legacy WildFly Keycloak distribution to Quarkus: config conversion, the removed /auth path, custom provider changes, and a…
10 min read
Skycloak vs the Community Keycloak Terraform Provider (and How to Use Both)
The difference between the Skycloak and community keycloak/keycloak Terraform providers, when to use each, and how to run both in…
7 min read
Keycloak Database Connection Pool Exhaustion: Causes and Fixes
Fix Keycloak database connection pool exhaustion: size the Quarkus datasource pool, handle DB restarts and leaks, and detect connections growing…
12 min read
Keycloak on OpenShift (ARO): HA That Survives Audits
Run Keycloak on OpenShift and Azure Red Hat OpenShift in production: operator vs Helm, HA clustering, TLS route modes, and…
8 min read
How Many Realms Can One Keycloak Cluster Handle? We Measured It
How many realms one Keycloak cluster can handle, measured: the cache settings to reach thousands, why restarts hit 7.5 minutes,…
10 min read
Keycloak Backup and Restore: A Practical Guide
How to back up and restore Keycloak: why the database is the source of truth, backing up PostgreSQL, realm exports…
17 min read
Introducing Locke: a Keycloak Distribution That Lets You Choose Your Cache
Locke is an Apache 2.0 distribution of Keycloak that ships with both embedded Infinispan and a Redis cache backend, selectable…
6 min read
Keycloak on Redis: Benchmarking Locke vs Embedded Infinispan
A production benchmark of Keycloak caching on Redis (Locke) vs embedded Infinispan: ~100% throughput parity, sub-second node-loss recovery vs 31-40s.
10 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.