---
id: pulumi-keycloak
version: "6.13.0"
license: Apache-2.0
license_treatment: permissive
maintenance: active
---

# pulumi-keycloak — A Pulumi package for creating and managing keycloak cloud resources.

License: permissive · Maintenance: active · Downloads: 98.9K/mo

## What it is and what it does

pulumi-keycloak is a Pulumi resource provider that bridges Keycloak identity and access management with infrastructure-as-code workflows. It lets you declare Keycloak resources—realms, clients, users, roles, and their configurations—as part of your Pulumi program, managing them alongside your cloud infrastructure. The provider handles authentication to a Keycloak instance using client credentials or password grant flows, and exposes Keycloak's API surface as Pulumi resource types.

You use it by installing the package, configuring Keycloak connection details (URL, client ID, credentials) via environment variables or Pulumi config, and then writing Pulumi code in Python, TypeScript, Go, or .NET to create and update Keycloak resources. It depends on pulumi, parver, semver, and typing-extensions; the Pulumi CLI itself must be installed separately. The package is actively maintained and has no known vulnerabilities.

Use it for:

- Provision Keycloak realms and clients as part of a multi-cloud infrastructure deployment using Pulumi.
- Automate user and role creation in Keycloak during application environment setup.
- Manage Keycloak configuration drift by declaring all realms and clients in version-controlled Pulumi code.
- Integrate Keycloak resource management into a CI/CD pipeline alongside other infrastructure provisioning.
- Define Keycloak authentication policies and client credentials as code for reproducible identity setups.

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

A Pulumi resource provider that lets you define and manage Keycloak identity and access management resources—realms, clients, users, roles—as infrastructure code alongside your cloud deployments.

Yes, if you use Pulumi for infrastructure automation and need to manage Keycloak resources as code. The package is actively maintained, has low install friction, permissive licensing, and no known vulnerabilities. Install only if you have Pulumi CLI already set up and a Keycloak instance to connect to; it is not useful standalone.

## Install

pip install pulumi-keycloak
uv add pulumi-keycloak
poetry add pulumi-keycloak

## Installing pulumi-keycloak

Before you install: Low friction install with a pure-Python wheel. Maintained actively with a recent release. Requires Pulumi CLI to be installed separately and modern Python (3.9+).

License in practice: Apache-2.0 permissive license allows commercial use, modification, and redistribution with minimal restrictions—suitable for most projects.

Quickstart:

pip install pulumi_keycloak

import pulumi
import pulumi_keycloak as keycloak

realm = keycloak.Realm('my-realm', realm_name='my-realm')

Requires Pulumi CLI to be installed first and a running Keycloak instance with valid credentials (client ID, URL, and either client secret or username/password) configured via environment variables or Pulumi config.

Verify before relying:

- Whether the package supports all Keycloak resource types or only a subset of the full Keycloak API surface.
- Performance characteristics when managing large numbers of Keycloak resources in a single Pulumi stack.

## Package facts

- License: Apache-2.0 (permissive)
- Python support: supports_current
- Install friction: low
- Maintenance: active
- Downloads: 98.9K/month (top 15,000 on PyPI)
- Known vulnerabilities: none known

## Tags

pulumi keycloak provider, infrastructure as code identity management, keycloak resource provisioning, pulumi iam automation, keycloak realm management, identity provider infrastructure, keycloak client configuration, infrastructure-as-code, identity-management, pulumi-provider

[View on SkillFed](https://skillfed.io/packages/pulumi-keycloak) · [View on PyPI](https://pypi.org/project/pulumi-keycloak/)