Reccomandations for upgrade from 11-0-0-1 to 26.7.0

1

Hello,

I want to upgrade one of my keycloak solutions from 11-0-0-1 to 26.7.0 .
The old one is hosted in Openshift and is connected to a MariaDB(10.11.0) instance and the new one is hosted in GKE and connected to a PG DB.
The only possibility (in my case ) to make the upgrade is to export/import configuration.
I was able to export the clients and groups from GUI but I need also the users.
Any advice is welcome!

Best regards,
Marian

2

Like it is mentioned in the docs (ans was also already mentioned in the v11 docs), a complete export incl. secrets and user data can only be achieved by an export on server cli level, not via the API.

Search in your v11 docs for the export commands, how to start Keycloak for exporting data. If you don’t have the v11 docs any more, use the Wayback Machine or checkout the sources from GitHub for v11 and build the docs on your own.

3

Hei @condaru321 ,

If you need support we have the expertise you need and support available in the EU. Enterprise Support for Keycloak | Managed Keycloak Hosting and Enterprise Keycloak Support

Regards,

Razvan

4

Hi Marian,

Niko already nailed the key point. Only the CLI export brings users across.

A couple of things worth knowing going in:

  • You can keep your users passwords. The CLI export carries the hashes, so there’s no forced reset. The one exception is LDAP/AD-federated users. You don’t migrate those, you just re-point the federation in the new instance and let them re-sync.
  • The MariaDB to Postgres change is the easy part, since the export is database-agnostic. What actually eats time on an 11 to 26 jump is reconciling what changed in between (default client scopes, required actions, auth flows). Plan for that and the rest goes smoothly.

We have solid experience migrating older instances up to current versions, so if you get stuck on the config side, happy to help. You can reach us at team@idptrust.com.

Best.