4 ms·
I miss the ability to use some kind of GitOps with Keycloak. There's Terraform plugin, but I hate it (because of state). I wish there was some kind of config fi
by vbezhenar 4y ago
I miss the ability to use some kind of GitOps with Keycloak. There's Terraform plugin, but I hate it (because of state). I wish there was some kind of config file which Keycloak would read at startup and create/update/delete its resources according to it. I know that I can initialize realm with JSON (with unreadable structure), but I can't maintain realm with config file.
- pat2man 4y agoHave you tried the operator? https://www.keycloak.org/operator/advanced-configuration https://www.keycloak.org/operator/advanced-configuration
- vbezhenar 4y agoI looked at it but I don't see the features I'm talking about. I can configure pod myself, so I don't understand why would I need this operator.
- skhro87 4y agoyou can try keycloak-config-cli https://github.com/adorsys/keycloak-config-cli https://github.com/adorsys/keycloak-config-cli we've been using it in production for 2 years and it works well! we are running it as part of our CICD, to sync settings to all Keycloak realms. As the tool supports variable substitution, it makes it quite flexible. The config file it uses is basically the same realm.json you can export from Keycloak, so it doesn't re-invent the wheel.
- vbezhenar 4y agoIt looks promising, thanks!