State management in k8s

[Baboulinet-33]

Problem Statement

Hello team,

I'm using keycloak-config-cli in kubernetes environment.
I want to track only the resources describes in my config (clients, users, groups, ...) to modify only this resources and not deleting all the resources outside my config (users create others groups and user directly in keycloak webui).

How can I achieve this ?

Proposed Solution

No response

Environment

• Keycloak Version: [e.g. 24.0.1]
• keycloak-config-cli Version: [e.g. 5.11.1]
• Java Version: [e.g. 21]

Additional information

No response

Acceptance Criteria

No response

[Motouom]

Hello @Baboulinet-33 i have a PR for this

this is how the fix works

With import.remote-state.enabled=true (default):

Groups created by keycloak-config-cli are tracked in state
Groups created via Keycloak UI are NOT deleted also.
Only groups that were created by config-cli will be deleted when removed from config
With import.remote-state.enabled=false:
Old behavior: ALL groups not in config are deleted

How It Works

First import: Config has managed-group → Created and tracked in state
User creates ui-group via Keycloak UI → NOT tracked in state
Remove managed-group from config and re-import:

• managed-group → DELETED (was tracked in state)
• ui-group → KEPT (NOT in state, created via UI)

[Baboulinet-33]

Oh, cool news !
For my information, where the state is stored ?