KEYCLOAK Upgrading and Migration - Frequently Asked Questions | Niko Köbler (@dasniko)

[@danielkuck6018]

Congrats Niko Very helpful and useful video.👏

[@murrayhopkins4142]

Thanks for taking the time to detail all this. It was really helpful.

[@dhe310]

Thanks Niko! Very informative!

[@lilivier]

Thanks for the great infos.

[@MrMikopi]

Thank you!

[@lts8683]

Thanks😍

[@sivabalu9848]

Thanks for this wonderful video Niko. Can you clear this doubt? I upgraded to keycloak version 25 from 10 on my Debian server by following your instructions. How do you override the default JVM Heap size in the' docker-compose' file? While using Keycloak 10 version I use "JAVA_OPTS=-Dkeycloak.profile.feature.upload_scripts=enabled -server -Xms1024m -Xmx1024m" to set the JVM options. But for version 25 how to set it? Also, how do I mention "PROXY_ADDRESS_FORWARDING"?

[@AbhiMenasinakai]

Hello Niko, I want to upgrade keyclock from 4.6 to latest 25. What all the necessary steps should i take ? , Should i take incremental or direct upgrade methods ?

[@lieslies9521]

Hello Sir, thank you so much. I have a question: how can I grant access to a user so that they can provide access only to a specific client? Thank you in advance.

[@priyarupeja453]

Hi Niko, I have integrated Keycloak with reactjs. but when hit localhost:3000 url in browser for few seconds I can see the index.tsx page of my application instead of keycloak login page. then after few seconds I can see the keycloak login page. Kindly advise how to fix this issue. Thanks

[@thirteendays]

First of all, thanks for this informative video. Do you have a solution when you want to copy partly the realms from one cluster to another. We have the case that we want migrate half of the realms to a fresh cluster. What is the best approach. In your video you mention, it will never be complete. But is it possible to export it and then execute some additional queries?

[@dasniko]

There's nothing ootb what support partial-something. Either don't do it or do something at your own risk.

[@thirteendays]

@@dasniko thanks for your answer. I think then the only solution is a dirty one. Create the realm again in cluster 2, find the user credentials records from realm x in the old cluster and copy to new one

[@selvakumar-vp1jm]

Hey Niko, im trying to build keycloak v21.0.1 from source with changes in the JS folder, i changed PUT method to POST in reset-password api, but when i built the entire project, those changes are not reflecting, i tried npm install, npm build and cleared cache as well.

[@AChoimet]

Hey, what would be the best solution to migrate from an old keycloak on premise to a new keycloak on kubernetes (with also infinispan on kubernetes) ? How to migrate gracefully the sessions from the old to the new one ?

[@dasniko]

Not at all, session live only in-memory, they are not persistend. Additionally, zero-downtime upgrades are not supported.

[@sirishkumar]

Does downgrading also work smoothly w.r.t database schema updates/migrations?

[@dasniko]

There is no downgrade option.

[@sirishkumar]

@@dasniko We have Keycloak deployed on K8s with Postgres backend. I tested upgrade from 19.0.2 to 21.1.2 and downgrade from 21.1.2 to 19.0.2 on our test environment. I did not see any major issues. Is it because schema is backwards compatible or migrations are doing their work?

[@dasniko]

@@sirishkumar It‘s just luck.

[@Eduardo-cx1up]

Is it possible to edit that register.ftl file to send the keycloak group that the user will belong to in the registration?

[@dasniko]

I didn‘t talk about registration nor groups in this video.

[@Eduardo-cx1up]

@@dasniko but do you know if it's possible?