I've spent a better part of last week upgrading Keycloak docker container from 13.0.1 to latest (and then rolling back the changes after I failed to make it work, I will try again after New year). IMHO, Redhat just introduces breaking changes on purpose to force you to pay for their single signon thing.

Installing and configuring it was relatively easy. Keeping it up to date and secure is a different thing