[Keycloak][Question] Running command in kcadm after keycloak is started? about helm-charts

[unguiculus]

Custom scripts can be any executable scripts, no just CLI scripts. However, they are run right before Keycloak is started.

See:

• https://github.com/jboss-dockerfiles/keycloak/tree/master/server#running-custom-scripts-on-startup
• https://github.com/jboss-dockerfiles/keycloak/blob/master/server/tools/autorun.sh
• https://github.com/jboss-dockerfiles/keycloak/blob/master/server/tools/docker-entrypoint.sh#L196

Another option could be to use a lifecycle hook. However, Kubernetes does not guarantee a pod ready before executing a hook, so you'll have to add some logic that waits for Keycloak to be up and running if you need that.

[aperullo]

I tried those and had no success with such methods. I did find this link inside some old keycloak mailing list entry.

https://access.redhat.com/documentation/en-us/red_hat_single_sign-on/7.0/html/server_administration_guide/export_import

Ended up setting up keycloak how I wanted with the ldap, then exporting the config and including it as a config map that gets loaded with extraArgs

extraArgs: "-Dkeycloak.migration.action=import -Dkeycloak.migration.provider=singleFile -Dkeycloak.migration.file=/opt/jboss/import.json -Dkeycloak.migration.strategy=OVERWRITE_EXISTING"

[unguiculus]

That's pretty much what's suggested in the readme: https://github.com/codecentric/helm-charts/tree/master/charts/keycloak#setting-a-custom-realm

[unguiculus]

Closing this as solved.