helm install keycloak

helm install my-keycloak oci://registry-1.docker.io/bitnamicharts/keycloak

helm show values oci://registry-1.docker.io/bitnamicharts/keycloak

https://artifacthub.io/packages/helm/bitnami/keycloak

helm show values bitnami/keycloak

Use /opt/bitnami/keycloak/data/import to import values to a realm

• kc_get_pass.sh
• kc_get_clients.sh

Examples

2026 examples

Jul 2026 Working

helm install my-keycloak oci://registry-1.docker.io/bitnamicharts/keycloak \
  --namespace kc \
  --create-namespace \
  --set image.repository=bitnamilegacy/keycloak \
  --set image.tag=26.3.3 \
  --set volumePermissions.image.repository=bitnamilegacy/os-shell \
  --set postgresql.image.repository=bitnamilegacy/postgresql \
  --set postgresql.image.tag=16 \
  --set postgresql.volumePermissions.image.repository=bitnamilegacy/os-shell

2026 legacy

helm install my-keycloak oci://registry-1.docker.io/bitnamicharts/keycloak \
  --namespace kc \
  --create-namespace \
  --set image.repository=bitnamilegacy/keycloak \
  --set image.tag=25.2.0 \
  --set volumePermissions.image.repository=bitnamilegacy/os-shell \
  --set postgresql.image.repository=bitnamilegacy/postgresql \
  --set postgresql.image.tag=16 \
  --set postgresql.volumePermissions.image.repository=bitnamilegacy/os-shell
Pulled: registry-1.docker.io/bitnamicharts/keycloak:25.2.0

Basic failing download images

helm install my-keycloak oci://registry-1.docker.io/bitnamicharts/keycloak --create-namespace --namespace kc
Pulled: registry-1.docker.io/bitnamicharts/keycloak:25.2.0
Digest: sha256:3e12451e0300902bafa1e588e62cce8ad3467dc3d6bf15352c25a0393a75fc6e
coalesce.go:319: warning: destination for postgresql.tls.autoGenerated is a table. Ignoring non-table value (false)
NAME: my-keycloak
LAST DEPLOYED: Mon May 25 20:41:42 2026
NAMESPACE: kc
STATUS: deployed
REVISION: 1
TEST SUITE: None
NOTES:
CHART NAME: keycloak
CHART VERSION: 25.2.0
APP VERSION: 26.3.3

⚠ WARNING: Since August 28th, 2025, only a limited subset of images/charts are available for free.
    Subscribe to Bitnami Secure Images to receive continued support and security updates.
    More info at https://bitnami.com and https://github.com/bitnami/containers/issues/83267

** Please be patient while the chart is being deployed **

Keycloak can be accessed through the following DNS name from within your cluster:

    my-keycloak.kc.svc.cluster.local (port 80)

To access Keycloak from outside the cluster execute the following commands:

1. Get the Keycloak URL by running these commands:

    export SERVICE_PORT=$(kubectl get --namespace kc -o jsonpath="{.spec.ports[?(@.name=='http')].port}" services my-keycloak)
    kubectl port-forward --namespace kc svc/my-keycloak ${SERVICE_PORT}:${SERVICE_PORT} &

    echo "http://127.0.0.1:${SERVICE_PORT}/"

2. Access Keycloak using the obtained URL.

WARNING: There are "resources" sections in the chart not set. Using "resourcesPreset" is not recommended for production. For production installations, please set the following values according to your workload needs:
  - resources
+info https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/

k get pods

k get pods -A | grep keycloak
default         my-keycloak-0                                               1/1     Running            0                 3m54s
default         my-keycloak-postgresql-0                                    1/1     Running            
0                 3m54s

Errors

• Defaulted container "keycloak" out of: keycloak, prepare-write-dirs (init), init-check-db (init)
• ERROR: Session not bound to a realm

k logs my-keycloak-postgresql-0 | grep ERROR
2024-03-07 10:48:04.437 GMT [178] ERROR:  relation "migration_model" does not exist at character 25
2024-03-07 10:48:07.535 GMT [178] ERROR:  relation "public.databasechangelog" does not exist at character 22
2024-03-07 10:48:07.803 GMT [191] ERROR:  relation "public.databasechangeloglock" does not exist at character 22
2024-03-07 10:48:07.830 GMT [178] ERROR:  relation "public.databasechangelog" does not exist at character 22

Related

• Init:ErrImagePull, Init:ImagePullBackOff, PodInitializing
• rbac.authorization.k8s.io/v1
• KC
• externalDatabase:
• replicaCount: 1

See also

• helm install keycloak, keycloak-secret, KEYCLOAK LOG LEVEL, kc_get_pass.sh
• Keycloak, kc_admin, kc.sh [ export | import ], Keycloak logs, realm, roles, Mapping claims and assertions, Terraform Keycloak provider, helm install keycloak, JVM metrics, Keycloak Import, Interface IdentityProviderMapper, KC_HOSTNAME_STRICT_HTTPS, Variables, KC troubleshooting, versions, client_id, Keycloak TLS
• helm install [ --set | --dry-run | --debug | --timeout | --namespace | --create-namespace | --generate-name | --version | --help ] values.yaml, helm upgrade --install, Chart.yaml, sh.helm