kc get pass.sh

export KC_SECRET_NAME=$(kubectl get secrets -n $KC_NS -o jsonpath='{range .items[*]}{.metadata.name}{"\n"}{end}' | grep keycloak | head -n 1)

if [ -z "$KC_SECRET_NAME" ]; then
    echo "❌ Error: No Keycloak secret found in namespace '$KC_NS'."
else
    echo "✅ Found Secret: $KC_SECRET_NAME"
    
    export KC_ADMIN_USER=$(kubectl get secret $KC_SECRET_NAME -n $KC_NS -o jsonpath="{.data.admin-user}" 2>/dev/null | base64 --decode)
    [ -z "$KC_ADMIN_USER" ] && export KC_ADMIN_USER="user"

    export KC_ADMIN_PASSWORD=$(kubectl get secret $KC_SECRET_NAME -n $KC_NS -o jsonpath="{.data.admin-password}" 2>/dev/null | base64 --decode)
    [ -z "$KC_ADMIN_PASSWORD" ] && export KC_ADMIN_PASSWORD=$(kubectl get secret $KC_SECRET_NAME -n $KC_NS -o jsonpath="{.data.keycloak-password}" 2>/dev/null | base64 --decode)

    echo "👤 User: $KC_ADMIN_USER"
    echo "🔑 Password: $KC_ADMIN_PASSWORD"
fi

Related

• kc_get_clients.sh

See also

• kubectl get secret keycloak, kc_get_pass.sh
• Keycloak, kc_admin, kc.sh [ export | import ], Keycloak logs, realm, roles, Mapping claims and assertions, Terraform Keycloak provider, helm install keycloak, JVM metrics, Keycloak Import, Interface IdentityProviderMapper, KC_HOSTNAME_STRICT_HTTPS, Variables, KC troubleshooting, versions, client_id, Keycloak TLS
• helm install keycloak, identityProviders, identityProviderAlias, IdentityProviderMappers