Keycloak Clusters as Code: The Phase Two Management API, API Credentials and Terraform Provider
· 9 min read
Everything you can do in the Phase Two console, you can now do from code.
Create a dedicated Keycloak cluster. Add a realm to it. Attach a custom domain and watch the certificate get issued. Upload a custom provider. Restrict the admin console to your office IP range. Pull yesterday's logs.
Three things shipped together, because none of them is much use alone: the Management API, the API credentials that authenticate to it, and a Terraform provider generated from the same spec.
All three are experimental for now. The console marks API credentials as such, and the
Terraform provider is at 0.1.0. Point them at test environments rather than production while the
surface settles.