Devops - Keymate Blog
Category: Devops
Runtime Protobuf Schemas in Keycloak's Embedded Infinispan
Keycloak offers no supported, configuration-only way to load runtime-mounted Protobuf schemas into its embedded Infinispan. This post walks through the extension pattern that bridges that gap through ProtoStream's documented initializer lifecycle, reviewed through a security and platform-engineering lens, with a runnable public demo.Ali Tuğrul Pınar
July 2026
Beyond the Default Image: Hardening Keycloak for Enterprise Production
The default Keycloak image is a strong baseline, not a hardened production runtime. Here is how we rebuilt it on Wolfi OS, with three-tier CVE management, non-root execution, and a Quarkus-optimized runtime.Ali Tuğrul Pınar
April 2026