keycloak-operations
Articles about keycloak-operations from the Skycloak team.
Managing Keycloak Secrets the Right Way (Vault SPI)
Keep secrets out of Keycloak config: use the Keycloak vault SPI to resolve database, SMTP, and client secrets from a…
10 min read
How Much RAM and CPU Does Keycloak Need in Production?
How much RAM and CPU does Keycloak need? What actually drives resource use, realistic starting points, JVM heap sizing, and…
12 min read
Keycloak 26.7 Stateless Mode: Multi-Region Without Infinispan
Keycloak 26.7's stateless preview kills the external Infinispan requirement for multi-cluster. We tested it on YugabyteDB and mapped a multi-cloud…
9 min read
Migrating Keycloak From WildFly to Quarkus: A Cutover Guide
Migrate from the legacy WildFly Keycloak distribution to Quarkus: config conversion, the removed /auth path, custom provider changes, and a…
10 min read
Skycloak vs the Community Keycloak Terraform Provider (and How to Use Both)
The difference between the Skycloak and community keycloak/keycloak Terraform providers, when to use each, and how to run both in…
7 min read
Keycloak Database Connection Pool Exhaustion: Causes and Fixes
Fix Keycloak database connection pool exhaustion: size the Quarkus datasource pool, handle DB restarts and leaks, and detect connections growing…
12 min read
Keycloak on OpenShift (ARO): HA That Survives Audits
Run Keycloak on OpenShift and Azure Red Hat OpenShift in production: operator vs Helm, HA clustering, TLS route modes, and…
8 min read
How Many Realms Can One Keycloak Cluster Handle? We Measured It
How many realms one Keycloak cluster can handle, measured: the cache settings to reach thousands, why restarts hit 7.5 minutes,…
10 min read
Keycloak Backup and Restore: A Practical Guide
How to back up and restore Keycloak: why the database is the source of truth, backing up PostgreSQL, realm exports…
17 min read
Introducing Locke: a Keycloak Distribution That Lets You Choose Your Cache
Locke is an Apache 2.0 distribution of Keycloak that ships with both embedded Infinispan and a Redis cache backend, selectable…
6 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.