[keycloak-user] Running Keycloak on OpenShift in its own gear

Rens Verhage Rens.Verhage at topicus.nl
Fri Mar 11 09:50:16 EST 2016

Ok, that makes sense. What about the database? Can my app and Keycloak still share the same PostgreSQL gear?

On Mar 11, 2016, at 06:57, Stian Thorgersen <sthorger at redhat.com<mailto:sthorger at redhat.com>> wrote:

Keycloak isn't an add-on cartridge, it's a standalone cartridge and can't be added onto an existing WildFly application. You need to create a separate Keycloak application.

On 10 March 2016 at 20:38, Rens Verhage <Rens.Verhage at topicus.nl<mailto:Rens.Verhage at topicus.nl>> wrote:
Maybe I haven’t fully grasped the concepts behind OpenShift. I’d like to run my application in the OpenShift cloud and secure it with Keycloak. My application is already running, using 2 gears. 1 gear has the web-app running in WildFly 10, the 2nd gear hosts the PostgreSQL database.

I tried adding Keycloak by adding a cartridge to my application like this using https://github.com/keycloak/openshift-keycloak-cartridge:

rhc add-cartridge http://cartreflect-claytondev.rhcloud.com/github/keycloak/openshift-keycloak-cartridge

This results in the following error:

The cartridge 'http://cartreflect-claytondev.rhcloud.com/github/keycloak/openshift-keycloak-cartridge' will be downloaded and installed
Adding http://cartreflect-claytondev.rhcloud.com/github/keycloak/openshift-keycloak-cartridge to application ‘my_app' ... jboss-wildfly-10 already exists in your application

It seems logical to me to run my application in WildFly on one gear and Keycloak, also on WildFly, on a second gear. What is best practice to add Keycloak to an existing OpenShift application, also running on WildFly? Should I deploy Keycloak in the same WildFly instance?

I know the next question is off topic in this list, but I’ll ask it anyway. If I cannot deploy two cartridges based on the same ‘base cartridge’ within the same app, how does OpenShift scale up my application? Isn’t that the same thing?

Rens Verhage

keycloak-user mailing list
keycloak-user at lists.jboss.org<mailto:keycloak-user at lists.jboss.org>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20160311/05b7660f/attachment.html 

More information about the keycloak-user mailing list