Resources
Complete reference for all provider-keycloak managed resources. Every CRD is documented with working examples taken from the project’s end-to-end tests, links to the underlying Terraform resource, and guidance on when to use each resource.
For exhaustive field schemas, default values, references, selectors, and status
fields, see the generated CRDs in
package/crds/
or browse all CRDs interactively on the
Upbound Marketplace CRD Explorer.
Realm · realm.keycloak.crossplane.io
RealmEvents · RequiredAction · UserProfile · Keystores · Client Policies
Client · openidclient.keycloak.crossplane.io
Client · ClientScope · samlclient.keycloak.crossplane.io
ClientScope · ClientDefaultScopes · ClientOptionalScopes
Resources · Permissions · Policies
ServiceAccountRealmRole · ServiceAccountRole
User · Groups · Roles · Permissions · user.keycloak.crossplane.io
Role · role.keycloak.crossplane.io
Group · Memberships · Roles · Permissions
ProtocolMapper · RoleMapper · GroupMembershipProtocolMapper
OIDC · SAML · Google · Kubernetes · OpenShift · SPIFFE
LDAP/AD federation and all mapper types
Flow · Subflow · Execution · ExecutionConfig · Bindings
DefaultGroups · DefaultRoles
Organization · Keycloak 26.6+ multi-tenancy
Workflow · event-driven automation (Keycloak 26.5+)