KC env variables

https://www.keycloak.org/server/all-config

• KC_ for upstream docker container
• KEYCLOAK_ for Bitnami docker container

• HOSTNAME
• KC_HOSTNAME, KEYCLOAK_HOSTNAME
• KC_HTTP_ENABLED
• KC_PROXY_HEADERS

KC_PROXY
KEYCLOAK_PROXY_HEADERS

KC_HOSTNAME_STRICT_HTTPS

extraEnvVars:

# --- TIME DEFENSE ---
 - name: KC_SPI_CONNECTIONS_HTTP_CLIENT__DEFAULT__SOCKET_TIMEOUT_MILLIS
   value: "30000"
 - name: KC_SPI_CONNECTIONS_HTTP_CLIENT__DEFAULT__CONNECTION_REQUEST_TIMEOUT_MILLIS
   value: "30000"
  # --- POOL RECYCLING DEFENSE ---
 - name: KC_SPI_CONNECTIONS_HTTP_CLIENT__DEFAULT__MAX_CONNECTION_IDLE_TIME_MILLIS
   value: "120000"
 - name: KC_SPI_CONNECTIONS_HTTP_CLIENT__DEFAULT__CONNECTION_TTL_MILLIS
   value: "300000"

kubectl set env statefulset/keycloak -n YOUR_NS \
 KC_SPI_CONNECTIONS_HTTP_CLIENT__DEFAULT__SOCKET_TIMEOUT_MILLIS=30000 \
 KC_SPI_CONNECTIONS_HTTP_CLIENT__DEFAULT__CONNECTION_REQUEST_TIMEOUT_MILLIS=30000 \
 KC_SPI_CONNECTIONS_HTTP_CLIENT__DEFAULT__MAX_CONNECTION_IDLE_TIME_MILLIS=120000 \
 KC_SPI_CONNECTIONS_HTTP_CLIENT__DEFAULT__CONNECTION_TTL_MILLIS=300000

Related

• kubectl logs -n YOUR_NS -l app.kubernetes.io/name=keycloak --tail=-1 --prefix
• helm show values bitnami/keycloak
• KC TRUSTSTORE PATHS

See also

• KC_PROXY (deprecated), KC_HOSTNAME, KC_HOSTNAME_STRICT_HTTPS (deprecated), KC_HTTP_ENABLED, KC_PROXY_HEADERS
• KC env variables, KC_BOOTSTRAP_ADMIN_USERNAME, KC_HOSTNAME, KC_HTTP_ENABLED, KC_PROXY_HEADERS