finnest kc

Open a local tunnel to the Keycloak admin console of a deployment target.

Open a foreground kubectl port-forward to the Keycloak admin console, which is deliberately not published on the internet. Prints the local console URL and where the admin credentials live; never prints credential values.

Examples

finnest kc console --cloud=aws --environment=sandbox

finnest kc console --cloud=azure --environment=sandbox --port=9090

Options

• --cloud <cloud> — Target cloud for setup, deploy, and diagnostics.
• --environment <environment> — Target environment: sandbox or prod.
• --port <port> — Local port for the console tunnel (1024-65535, default 8080).
• --json — Emit a schema-versioned JSON envelope to stdout.
• --output <format> — Select text, json, or ndjson output.
• --no-color — Disable ANSI color without changing the output content mode.
• --no-evidence — Do not write .finnest run evidence.
• --verbose — Enable debug-level diagnostics.

Subcommands

• console — Port-forward the Keycloak admin console to localhost until Ctrl-C.