https://beyondthekube.com/identity-management-part-2-configuring-keycloak/