Archive

Realm import is create-if-not-exists. Keycloak provisions the boltmcp realm only on first start. Changing OIDC values (client IDs, base URLs, oidc.adminUser.email, etc.) on a subsequent helm upgrade updates the rendered ConfigMap but does not retroactively edit the live realm. To re-apply changes, delete the realm via the Keycloak admin console (or kcadm.sh delete realms/boltmcp) and restart the Keycloak Pod.

Need non-standard hostnames? If your platform team won't give you the <svc>.<domain> subdomains the chart derives by default, override individual URLs with web.baseUrl, mcpServer.baseUrl, mcpInspector.baseUrl, keycloak.hostname, and oidc.issuerUrl. With all five set, global.domain becomes optional.