I've had to have this discussion so many times. Every one of these external dependencies is... a dependency. Each one brings with it the risk of the external c

I've had to have this discussion so many times. Every one of these external dependencies is... a dependency. Each one brings with it the risk of the external company going under, prices rising to unacceptable levels, intermittent outages, etc. These are all independent events. For the sake of argument, if the risk of a company going under any given day is 1 in 100, then using five separate companies means our risk is 5 in 100 (1 in 20). We need to weigh the risks plus impact against the advantages. High risk + low impact or low risk + high impact are generally acceptable. Auth is a space where generally it's moderate risk and high impact while the advantages are... quite low versus just throwing Keycloak onto your cluster and getting on with your day.