News for hackers. Stuff that matters.

A comment on Keycloak – Open-Source Identity and Access Management Interview. Parent comment

Re:Keycloak – Open-Source Identity and Access Management Int... by xnyanta on Sunday June 18, 2023 @08:05PM (#36385818)
Are we using the same piece of software? I have it deployed in production on kubernetes using the bitnami helm chart and everything works like a charm, clustering etc. No need to modify any XML or care about network routes.
[ Parent | on HN ]
Re:Keycloak – Open-Source Identity and Access Management Int... by ponyous on Monday June 19, 2023 @02:08AM (#36387811)
How do you handle backups? I was considering doing the same, but found that backing up different systems inside k8s can be difficult.
[ Parent | on HN ]
Re:Keycloak – Open-Source Identity and Access Management Int... by seletz on Monday June 19, 2023 @02:20AM (#36387876)
We use KC with PostgreSQL as backend data store. Backup is done by backing up the PostgreSQL database.

If you actually want to transport configuration across environments (DEV, QA, PROD), then you want to export realms and have it load by KC on startup or import it using the UI.

[ Parent | on HN ]
Re:Keycloak – Open-Source Identity and Access Management Int... by jdsleppy on Monday June 19, 2023 @07:32AM (#36389807)
There's a good Terraform provider for consistent configuration across environments, too.
[ Parent | on HN ]