3 ms·
There's always keycloak you can rollout yourself. It's not trivial but it's quite doable.
by gchamonlive 7mo ago
There's always keycloak you can rollout yourself. It's not trivial but it's quite doable.
- walterbell 7mo agoThanks for the pointer, https://news.ycombinator.com/item?id=47649354 https://news.ycombinator.com/item?id=47649354 edit: looks like there are affordable managed hosting providers for keycloak.
- gchamonlive 7mo agoI was a long time k8s skeptical, but I think it's solid now. If there's good support for keycloak for k8s with support for backups I wouldn't think twice. Not sure the state of keycloak now, but it was a lot of work to manage keycloak configs with the IaC pipeline. That could have gotten better now, but I think having access to the data is important because migration might not be trivial if for instance a provider starts acting up.
- watusername 7mo agoInstead of Keycloak, I would recommend giving Kanidm a try: It's much more lightweight and covers most of what you usually need (one notable exception being SAML). https://github.com/kanidm/kanidm https://github.com/kanidm/kanidm