keycloak-operations
Articles about keycloak-operations from the Skycloak team.
Keycloak Admin API v2: Declarative OIDC and SAML Clients with the Operator
Keycloak 26.7 shipped an experimental Admin API v2 and Operator CRs for clients. Here is what KeycloakOIDCClient actually does, and…
12 min read
Keycloak Native SCIM API Preview in 26.7: What It Covers, What It Misses, and When Managed Still Wins
Keycloak 26.7 promotes its native SCIM API to preview behind the scim-api flag. It handles CRUD, PATCH and filtering, but…
9 min read
Keycloak SPI ID Collision: Redis Cache Ran on Infinispan
Keycloak's ProviderManager dedupes SPI factories by provider ID before isSupported() runs. A shared ID of "default" silently dropped our Redis…
11 min read
Managing Keycloak Secrets the Right Way (Vault SPI)
Keep secrets out of Keycloak config: use the vault SPI to resolve database, SMTP, and client secrets from a file-based…
10 min read
How Much RAM and CPU Does Keycloak Need in Production?
How much RAM and CPU does Keycloak need? What drives resource use, realistic starting points, JVM heap sizing, and how…
12 min read
Keycloak 26.7 Stateless Mode: Multi-Region Without Infinispan
Keycloak 26.7's stateless preview kills the external Infinispan requirement for multi-cluster. We tested it on YugabyteDB and mapped a multi-cloud…
9 min read
Migrating Keycloak From WildFly to Quarkus: A Cutover Guide
Migrate from the legacy WildFly Keycloak distribution to Quarkus: config conversion, the removed /auth path, custom provider changes, and a…
10 min read
Skycloak vs the Community Keycloak Terraform Provider (and How to Use Both)
The difference between the Skycloak and community keycloak/keycloak Terraform providers, when to use each, and how to run both in…
7 min read
Keycloak Database Connection Pool Exhaustion: Causes and Fixes
Fix Keycloak database connection pool exhaustion: size the Quarkus datasource pool, handle DB restarts and leaks, and spot connections growing…
12 min read
Keycloak on OpenShift (ARO): HA That Survives Audits
Run Keycloak on OpenShift and Azure Red Hat OpenShift in production: operator vs Helm, HA clustering, TLS route modes, and…
8 min read
Stay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.