# adorsys/keycloak-config-cli

Import YAML/JSON-formatted configuration files into Keycloak - Configuration as Code for Keycloak.

Repository: https://github.com/adorsys/keycloak-config-cli
Canonical: https://ross.abutalabs.com/products/keycloak-config-cli
Homepage: https://adorsys.github.io/keycloak-config-cli/
Language: Java
License: Apache-2.0
License Family: permissive
Topics: keycloak, jboss, automation, json, rest, oauth2, import, export, continuous-integration, configuration-management, configuration-as-code, keycloak-config-cli, spring-boot
Last push: 2026-08-17T18:38:54+00:00

## Health v2 (maintenance only)
Score: 90/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 98, release rhythm 73, longevity 100
- inputs: {"age_days": 3219, "days_push": 16, "days_rel": 103, "gap_med": 60, "n_releases_24m": 6}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1180, forks 198 (observed 2026-08-28T04:03:53.193168+00:00)

## What it is
A Java-based CLI tool (also distributed as a Docker image and Helm chart) that imports YAML/JSON configuration files into Keycloak via the Admin API, providing Configuration as Code for realms, clients, roles, flows, and identity providers. It is idempotent, applying only the delta between desired and current state, and supports variable substitution for multi-environment deployments.

## Use cases
- manage keycloak realm configuration as code in git
- import keycloak realm  export into a running instance
- automate keycloak client and role setup in ci/cd pipeline
- apply environment-specific keycloak config with variable substitution
- keep keycloak realms in sync across dev staging and production
- provision keycloak identity providers declaratively without restart

## When to choose
- you use Keycloak and want declarative, version-controlled realm configuration
- you need repeatable, idempotent Keycloak provisioning in automated pipelines
- you want to manage multiple environments from one set of config files
- you prefer applying config via Admin API without restarting Keycloak

## When to avoid
- you don't use Keycloak or use a different identity provider
- you need a GUI for managing Keycloak settings
- you only make occasional manual changes and don't need automation

## Facets
- artifact type: cli-tool
- maturity: active
- function: configuration-management, cli, deployment, workflow-automation, auth
- domain: security, developer-tools, self-hosted
- platform: jvm, cli, self-hosted
- tags: keycloak, configuration-as-code, oauth2, identity-provider, realm-management, ci-cd, idempotent, yaml, devops, automation, docker, kubernetes

## Member repositories
- adorsys/keycloak-config-cli (main) score 90

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:53.193168+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:25:15.134345+00:00, confidence not recorded.
  - readme: https://github.com/adorsys/keycloak-config-cli (fetched 2026-08-28T04:03:53.193168+00:00, sha a66a3efb98fa)
  - homepage: https://adorsys.github.io/keycloak-config-cli/ (fetched 2026-08-29T12:32:04.062474+00:00, sha 215311e3a04d)
- Data as of 2026-08-30T08:39:29.467469+00:00.