You signed in with another tab or window.Reload to refresh your session.You signed out in another tab or window.Reload to refresh your session.You switched accounts on another tab or window.Reload to refresh your session.Dismiss alert
title:New Keycloak dashboard is available with Secured Multi Instances easy to enable
3
+
description:Better manage your Keycloak on Clever Cloud, with Secured Multi Instances based on Wireguard Network Groups
4
+
date:2025-10-07
5
+
tags:
6
+
-addons
7
+
-keycloak
8
+
authors:
9
+
-name:Sébastien Allemand
10
+
link:https://github.com/allemas
11
+
image:https://github.com/allemas.png?size=40
12
+
-name:David Legrand
13
+
link:https://github.com/davlgd
14
+
image:https://github.com/davlgd.png?size=40
15
+
excludeSearch:true
16
+
---
17
+
18
+
When you deploy Keycloak on Clever Cloud, you now have access to a better dashboard to manage it. This dashboard provides direct access to Keycloak admin panel, useful information such as deployed version, underlying resources, initial user/password, edit name, tags, etc. You can easily rebuild/restart your Keycloak instance with[Blue/Green deployment](/doc/best-practices/blue-green/), access the Grafana dashboard, transparently update Keycloak to a new version when available:
The Keycloak dashboard also makes Secured Multi Instances directly available from the Console, and not only through[API](/api) or[Clever Tools](/doc/cli). It adds a second Java application instance to your Keycloak which brings more resiliency and availability to your identity management solution. As communication through such cluster use an unencrypted Infinispan connection, a Network Group is automatically created and used to isolate this traffic through a private, encrypted,[WireGuard](https://www.wireguard.com/) network.
25
+
26
+
If you also need a more resilient database, contact your sales representative or[Clever Cloud support](https://console.clever-cloud.com/ticket-center-choice).
27
+
28
+
-[Learn more about Network Groups](/doc/develop/network-groups/)
29
+
-[Learn more about Keycloak on Clever Cloud](/doc/addons/keycloak)
An initial account has been created, you'll be invited to change the password at first login:
94
99
- Admin user name: cc-account-admin
95
100
- Temporary password: xxxxxxxxxxxxxxxx
96
-
97
-
/!\ The keycloak provider is in beta testing phase
98
101
```
99
102
100
-
Refer to the[Clever Tools documentation](https://github.com/CleverCloud/clever-tools/tree/master/docs) for more details on add-on creation.
103
+
Refer to the[Clever Tools documentation](/doc/cli/addons) for more details on add-on creation.
101
104
102
-
##Version management
105
+
##Secured Multi Instances
103
106
104
-
To change the version of a Keycloak add-on on Clever Cloud, you can use the`CC_KEYCLOAK_VERSION` environment variable of its Java Application and rebuild it. But there are various ways to do it simpler with[Clever Tools](/doc/cli/):
107
+
Keycloak can be configured to run as a cluster of instances, bringing more resiliency and availability to your identity management solution. As communication through such a cluster uses an unencrypted Infinispan connection, Clever Cloud deployments includes Secure Multi Instances.
Once enabled in the Keycloak dashboard, it adds a second Java application instance to your Keycloak which brings more resiliency and availability to your identity management solution. Instances are transparently restarted and linked through a[Network Group](/doc/develop/network-groups), used to isolate internal cluster traffic through a private, encrypted,[Wireguard](https://www.wireguard.com/) network. You can disable this feature at any time, as easily as you enabled it.
109
110
110
-
# Enable Operators commands
111
-
clever featuresenable operators
111
+
If you also need a more resilient database, contact your sales representative or[Clever Cloud support](https://console.clever-cloud.com/ticket-center-choice).
112
112
113
-
# Check the current version
114
-
clever keycloak version check keycloak_name_or_id
115
-
clever keycloak version check keycloak_name_or_id --format json
113
+
>[!NOTE] Multiple instances solution
114
+
>If you enable Secured Multi Instances, you'll be billed for two Java instances of your application. If you set up more than 2 instances in the application configuration, it will work but think about upgrading your PostgreSQL database to a plan with more available connections.
116
115
117
-
# Update to a specific supported version
118
-
clever keycloak version update myKeycloak
119
-
clever keycloak version update myKeycloak<new_version>
120
-
```
116
+
##Version management
121
117
122
-
- Learn more about[Operators commands in Clever Tools](/doc/cli/operators/)
118
+
To change the version of a Keycloak add-on on Clever Cloud, you can:
119
+
- Use the Console Dashboard
120
+
- Use[Clever Tools](/doc/cli/operators/)
121
+
- Update the`CC_KEYCLOAK_VERSION` environment variable of the underlying Java Application and rebuild it
>When you enable the Networkgroup on a Clever Cloud Keycloak,the cluster is automatically configured and the Java application scaled to2 instances. When you disable the Network Group, the application is scaled down to 1 instance and the cluster is removed.
92
+
>[!NOTE] KeycloakSecured Multi Instances
93
+
>When you enable the NetworkGroup on a Clever Cloud Keycloak,it activates[Secured Multi Instances](/doc/addons/keycloak/#secured-multi-instances): a cluster is configured with2 instances of the Java application. When you disable the Network Group, the application is scaled down to 1 instance and the cluster is removed.
Copy file name to clipboardExpand all lines: content/doc/develop/network-groups.md
+1Lines changed: 1 addition & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -31,6 +31,7 @@ A Network Group member domain name is composed this way: `<memberID>.m.<ngID>cc-
31
31
When a resource is linked to a Network Group, you can reach it on any port inside this private network with its domain name. An application instance is a peer, you can reach through an IP (from the attributed CIDR). It works the same way for add-ons and external resources.
32
32
33
33
-[Network Groups demo application](https://github.com/CleverCloud/network-groups-example)
34
+
-[Keycloak Secured Multi Instances](/doc/addons/keycloak/#secured-multi-instances)
34
35
-[How to use Network Groups from Clever Tools](/doc/cli/network-groups/)
35
36
-[Keycloak and Otoroshi native support for Network Groups](/api/v4/#network-groups)
36
37
-[Tell us what you think of Network Groups and what features you need from it in](https://github.com/CleverCloud/Community/discussions/categories/network-groups).