Articles about keycloak-operations from the Skycloak team.
How many realms one Keycloak cluster can handle, measured: the cache settings to reach thousands, why restarts hit 7.5 minutes,…
How to back up and restore Keycloak: why the database is the source of truth, backing up PostgreSQL, realm exports…
Locke is an Apache 2.0 Keycloak distribution with embedded Infinispan or a Redis cache backend, selectable at boot with KC_CACHE,…
A production benchmark of Keycloak caching on Redis (Locke) vs embedded Infinispan: ~100% throughput parity, sub-second node-loss recovery vs 31-40s.
Build real-time integrations with Keycloak events. Learn the Event Listener SPI, custom webhook providers, Kafka integration, and event filtering patterns.
Build a custom Keycloak UserStorageProvider SPI for user federation with external databases, covering credential validation, caching, and lazy loading.
Deploy Keycloak on Kubernetes for production with StatefulSets, PostgreSQL, TLS ingress, HPA autoscaling, Infinispan clustering, and resource management.
Optimize PostgreSQL for Keycloak with connection pooling, index tuning, autovacuum configuration, session table management, and event store partitioning.
Automate Keycloak realm, client, and user provisioning at scale with Ansible playbooks using community.general.keycloak modules and Ansible Vault for secrets.
Master advanced Terraform patterns for Keycloak including reusable modules, workspace-per-environment strategy, remote state, and CI/CD pipeline integration.
Get tutorials, product updates, and Keycloak tips delivered to your inbox.