Introduction

In Keycloak 17 and above the default distribution is now powered by Quarkus, while the legacy WildFly powered distribution will be phased out after June 2022.

The default path no longer contains the "auth" tag.

HTTPS

By default keycloak runs on https, you need to setup a keystore and and truststore for your certificates.

You can also enable http.

You can then start keycloak with the following arguements:

        args: [
                'start',
                '--https-key-store-file=/etc/x509/https/server.keystore',
                '--https-key-store-password=changeit',
                '--https-key-store-type=PKCS12',
                '--https-trust-store-file=/etc/x509/https/server.truststore',
                '--https-trust-store-password=changeit',
                '--https-trust-store-type=PKCS12',
                '--https-client-auth=request',
                '--http-enabled=true'
              ]

...

This dashboard is available here: Keycloak Metrics Dashboard-1680702117153.json

InfluxDB

These metrics can also be made available in InfluxDB by setting up a metrics scraper and a bucket to store the metrics.

Image Added

The metrics can then be viewed in data explorer.

Image Added

LINKS

Server Administration Guide

...