Keycloak Kurulumu ve Yapılandırması
Keycloak Container
docker run --name serender_keycloak `
-e KEYCLOAK_ADMIN=[KEYCLOAK_ADMIN_USERNAME] `
-e KEYCLOAK_ADMIN_PASSWORD=[KEYCLOAK_ADMIN_PASSWORD] `
-e KC_DB=postgres `
-e KC_DB_URL=jdbc:postgresql://[POSTGRES_HOST]:5432/[KEYCLOAK_DATABASE] `
-e KC_DB_USERNAME=[POSTGRES_USERNAME] `
-e KC_DB_PASSWORD=[POSTGRES_PASSWORD] `
-p 8080:8080 `
-d quay.io/keycloak/keycloak:latest `
start-dev
Keycloak Konfigürasyonu
- Admin Console'a Erişim
http://[KEYCLOAK_HOST]:8080adresine gidin-
Username:
[KEYCLOAK_ADMIN_USERNAME], Password:[KEYCLOAK_ADMIN_PASSWORD] -
Realm Oluşturma
- Realm Name:
[REALM_NAME] -
Display Name:
SERENDER [SERVICE_NAME] Realm -
Client Oluşturma
- Client ID:
[CLIENT_ID] - Client Type:
OpenID Connect - Access Type:
confidential - Valid Redirect URIs:
https://[HOST]:*,http://[HOST]:* -
Web Origins:
* -
Organizations Oluşturma
Her tenant için ayrı organization oluşturun:
Organization 1:
- Name: tenant1-org
- Display Name: Tenant 1 Organization
- ID: Otomatik oluşacak (ör: a6f40803-3004-4b25-85e6-c8dae8e68f87)
Organization 2:
- Name: tenant2-org
- Display Name: Tenant 2 Organization
- ID: Otomatik oluşacak (ör: b7f40803-3004-4b25-85e6-c8dae8e68f88)
- Users Oluşturma
Her organization için kullanıcı oluşturun ve organization'a atayın:
Tenant 1 User:
- Username: [TENANT1_USERNAME]
- Email: [TENANT1_EMAIL]
- Password: [USER_PASSWORD]
- Organization: [TENANT1_ORG_NAME]
Tenant 2 User:
- Username: [TENANT2_USERNAME]
- Email: [TENANT2_EMAIL]
- Password: [USER_PASSWORD]
- Organization: [TENANT2_ORG_NAME]