Keycloak 26.2.1 is available with new features and a Grafana dashboard
The release 26.2.1 of Keycloak is available on Clever Cloud. This new branch fixes some bugs, supports Standard Token Exchange according to Token exchange specification, brings ECS (Elastic Common Schema) JSON format for logs, fine-grained admin permissions, etc. To update, just set CC_KEYCLOAK_VERSION of the add-on’s Java application to 26.2.1 and rebuild it.
Grafana dashboard
Each Clever Cloud account organization comes with a pre-configured Grafana service. With recent Keycloak enhancements on metrics and observability, we’ve worked on a Grafana dashboard ready to import:
- Go to the
Metrics in Grafanasection of your organization or personal space in Console - Open Grafana, click on the
+icon in the upper right corner and selectImportdashboard - Import this JSON file
Then you’ll have a Keycloak dashboard in your Grafana folders. Just select your Keycloak add-on in the runtime section, you’ll automatically get instance’s information, metrics, cache and performance data, etc.
New features and settings
Starting with this release, Keycloak add-ons on Clever Cloud come with admin-cli client disabled by default. If you need it for provisioning through a direct access grant, you must enable it first.
You can now set up a new client with the admin role for master realm during build using CC_KEYCLOAK_BOOTSTRAP_ADMIN_CLIENT_ID and CC_KEYCLOAK_BOOTSTRAP_ADMIN_CLIENT_SECRET environment variables. Once created, delete them from your application. Bootstrap client should be temporary and is mostly necessary for provisioning.