\n\n# Keycloak Advanced Helm Chart\n\nKeycloak is a high performance Java-based identity and access management solution. It lets developers add an authentication layer to their applications with minimum effort. The Keycloak Advanced Helm chart automates deployment and configuration of Keycloak in Kubernetes clusters using Minimus images with **hardened security** and **production-grade configuration**.\n\n\n## {{icon-list-search}} Prerequisites\n\n- A subscription to the Minimus images included in the chart\n- A running Kubernetes cluster (v1.21 or higher is recommended)\n- `kubectl` installed and configured\n- Helm v3.8 or higher for OCI support ([Installation instructions](https://helm.sh/docs/intro/install/))\n- Cluster Admin privileges\n- Persistent storage available in your cluster\n- An administrator password (set via `keycloak.auth.adminPassword` in your `values.yaml`)\n- A Kubernetes Secret named `keycloak-db-credentials` in the release namespace containing keys `password` (for the keycloak DB user) and `postgres-password` (for the postgres admin user)\n\n**Note**: This chart ships PostgreSQL Advanced as a sub-chart (default-enabled) with a stable service name (`keycloak-postgres`). Both Keycloak and PostgreSQL read their DB credentials from the `keycloak-db-credentials` Secret above — create it before running `helm install`. See the [Keycloak configuration docs](https://www.keycloak.org/server/configuration) for the full option set.\n\n

\n\n---\n\n

\n\n## {{icon-rocket}}Try It Out\n\nIn this example we will deploy Keycloak on a Kubernetes cluster using the Minimus Keycloak Advanced Helm chart. Keycloak will be configured with hardened security settings and production-grade defaults.\n\n

\n\n### Step 1: Start Cluster\n\n

\n\nIf you have a cluster to work with, skip this step. Otherwise, start a Minikube cluster. [Deployment instructions](https://minikube.sigs.k8s.io/docs/start/?arch=%2Flinux%2Fx86-64%2Fstable%2Fbinary+download)\n\n

\n\n### Step 2: Create Namespace\n\n

\n\nCreate a namespace:\n\n```\nkubectl create ns keycloak-advanced\n```\n\n{{if-enterprise}}\n\nNext, create a Kubernetes secret for the Minimus token:\n\n```\nkubectl create secret docker-registry minimus-registry \\\n --docker-server=reg.mini.dev \\\n --docker-username=minimus \\\n --docker-password={{pull-token}} \\\n --namespace=keycloak-advanced\n```\n\n{{/if-enterprise}}\n\nThen create the database credentials Secret used by both Keycloak and the bundled PostgreSQL Advanced sub-chart:\n\n```\nkubectl create secret generic keycloak-db-credentials \\\n --from-literal=password=\"$(openssl rand -base64 24)\" \\\n --from-literal=postgres-password=\"$(openssl rand -base64 24)\" \\\n --namespace=keycloak-advanced\n```\n\n

\n\n### Step 3: Deploy the Helm Chart\n\n

\n\nDeploy the Minimus Helm chart:\n\n```\nhelm install my-keycloak-advanced {{oci-url}} \\\n --version {{chart-version}} \\\n -n keycloak-advanced \\\n --wait\n```\n\nIf you want to override the chart's defaults, go to the Values tab, save a copy locally with your changes. Deploy the chart with your overrides using `-f values.yaml`:\n\n```\nhelm install my-keycloak-advanced {{oci-url}} \\\n --version {{chart-version}} \\\n -f values.yaml \\\n -n keycloak-advanced \\\n --wait\n```\n\n

\n\n### Step 4: Verify Keycloak Advanced is Running\n\n

\n\nCheck the pod status:\n\n```\nkubectl get pods -n keycloak-advanced -l app.kubernetes.io/name=keycloak\n```\n\nYou should see output similar to:\n\n```\nNAME READY STATUS RESTARTS AGE\nmy-keycloak-advanced-xxxxxxxxx-xxxxx 1/1 Running 0 2m\n```\n\n

\n\n### Step 5: Test HTTP Endpoint\n\n

\n\nPort-forward to the Keycloak service:\n\n```\nkubectl port-forward svc/my-keycloak-advanced 8080:80 -n keycloak-advanced\n```\n\nIn another terminal, hit the master realm endpoint:\n\n```\ncurl -sf http://localhost:8080/realms/master\n```\n\nYou should receive a JSON payload describing the master realm.\n\n

\n\n### Step 6: Clean Up\n\n

\n\nUninstall the chart and delete the namespace to remove all resources:\n\n```\nhelm uninstall my-keycloak-advanced -n keycloak-advanced\nkubectl delete namespace keycloak-advanced\n```\n\n

\n\n---\n\n

\n\n## {{icon-info-circle}}Terms & Info\n\n

\n\n### Trademark\n\n

\n\nThis catalog is published by Minimus. All product names, logos, and marks, other than those belonging to Minimus, shown are owned by their respective rights holders and appear here only to identify the open source software each image contains. Minimus claims no ownership of those marks and implies no affiliation with, endorsement by, certification by, or sponsorship by any rights holder.\n\n\n{{if-anonymous}} \n\n

\n\n### Disclaimer\n\n

\n\n\nImages are provided \"as-is\" without warranty of any kind. \"Hardened\" refers to the security configuration applied at the time of build and does not constitute a guarantee of ongoing security or absence of vulnerabilities. The free tier is provided without support, SLA, or guaranteed patching timelines. Security updates may be applied to paid subscriptions before or instead of free tier images. By pulling or using any image you agree to our [Terms of Use](https://www.minimus.io/terms-of-use).\n\n{{/if-anonymous}}\n\n\n

\n","ociDigest","sha256:e115d51c0b634078250e012aee275f12a670462b649f53cca1c87d79505d93fc","tarballDigest","sha256:b4de911dd18a81ff9a4a5120d7910ec758a8a0d3567916b86c73755759feb57e","apps","advanced",73147,[163,183],"thirdPartyImageName","adorsys/keycloak-config-cli","2025-12-04T10:27:49.915731Z","2026-10-25T03:22:39.27782Z","private","isCustom","groups",[182],"shortDescription","published","family","keycloak-config-cli","edition","fips","thirdPartyVulnsCount",393,"keycloak","utils","webappURL","https://images.minimus.io","docsURL","https://docs.minimus.io/","docsMap",{"_196":197,"_198":199,"_200":26,"_201":202,"_203":204,"_205":206,"_207":208,"_209":210,"_211":26,"_212":26,"_213":26,"_214":215,"_216":217,"_218":219,"_220":221,"_222":223,"_224":26,"_225":226,"_227":26,"_228":26,"_229":26,"_230":26,"_231":26,"_232":26,"_233":26,"_234":26,"_235":26,"_236":26,"_237":238,"_239":240,"_241":242,"_243":244,"_245":246,"_247":248,"_249":26,"_250":26,"_251":26,"_252":26,"_253":254,"_255":26,"_256":257,"_258":259,"_260":261,"_262":261,"_263":264,"_265":26,"_266":26,"_267":268,"_269":270,"_271":272,"_273":274,"_275":276},"user","isAnonymous","isTokensExpired","license","cookiebotCBID","40e95942-a9eb-491e-8406-2f08417ec73b","/","https://docs.minimus.io","/actions","https://docs.minimus.io/remediate/actions","/actions/?","/actions/create","https://docs.minimus.io/remediate/create-action","/advisories","https://docs.minimus.io/remediate/advisories","/advisories/?","https://docs.minimus.io/remediate/cve-advisory","/advisories/?/exploitability","https://docs.minimus.io/remediate/threat-intel#threat-intel","/advisories/?/packages","https://docs.minimus.io/remediate/cve-advisory#status-history","/advisories/?/packages/?","/advisories/?/references","/advisories/?/severity","/charts","https://docs.minimus.io/foundations/helm-charts","/creator/list","https://docs.minimus.io/enterprise-edition/image-creator","/creator/files","https://docs.minimus.io/enterprise-edition/file-bundles","/supply-chain-protection","https://docs.minimus.io/enterprise-edition/supply-chain","/images","https://docs.minimus.io/gallery","/images/?","/images/?/changelog","https://docs.minimus.io/foundations/image-card#changelog","/images/?/changelog/?","/images/?/changelog/?/versions/?/?","/images/?/changelog/?/versions/?/?/exploitability","/images/?/changelog/?/versions/?/?/packages","/images/?/changelog/?/versions/?/?/packages/?","/images/?/changelog/?/versions/?/?/references","/images/?/changelog/?/versions/?/?/severity","/images/?/changelog/?/versions/?/digest-history","/images/?/lines","/images/?/lines/?","/images/?/lines/?/versions/?","https://docs.minimus.io/foundations/image-version","/images/?/lines/?/versions/?/digest-history","https://docs.minimus.io/foundations/image-version#digest-history","/images/?/lines/?/versions/?/sbom","https://docs.minimus.io/foundations/image-version#sbom","/images/?/lines/?/versions/?/specification","https://docs.minimus.io/foundations/image-version#specification","/images/?/lines/?/versions/?/vulnerabilities","https://docs.minimus.io/foundations/image-version#vulnerabilities","/images/?/risk-reduction","https://docs.minimus.io/foundations/image-card#risk-reduction","/images/?/risk-reduction/?","/images/?/risk-reduction/?/exploitability","/images/?/risk-reduction/?/references","/images/?/risk-reduction/?/severity","/images/?/compliance/cis","https://docs.minimus.io/foundations/image-card#compliance","/manage","/manage/self-hosting","https://docs.minimus.io/manage/self-hosted-registry","/manage/subscription","https://docs.minimus.io/introduction/subscription","/manage/logs/activity-log","https://docs.minimus.io/manage/activity-log","/manage/logs/audit-log","/manage/tokens","https://docs.minimus.io/manage/token","/manage/tokens/create","/manage/tokens/delete/?","/manage/access/users","https://docs.minimus.io/manage/users","/manage/access/users/create","https://docs.minimus.io/manage/users#add-users","/manage/access/users/saml","https://docs.minimus.io/sso/saml","/manage/access/groups","https://docs.minimus.io/manage/user-groups","/manage/minicli","https://docs.minimus.io/enterprise-edition/minicli","toast","gtmID","GTM-56RQNQ3D","hubspotID","42541238"]

Switch to a FIPS validated image with ease!