Summary
The issue you’re experiencing is a known limitation in Camunda Identity 8.8. Here are the key points:
The Problem
- Camunda Identity always attempts to bootstrap/create realm resources during startup, even when configured to use an external Keycloak realm
- This causes “Conflict detected” errors when those resources already exist in your external Keycloak
- Your configuration with
KEYCLOAK_REALM: "dev-camunda-platform"and matchingCAMUNDA_IDENTITY_ISSUER_URLis correct
Current Status
- No supported workaround exists to disable the automatic realm creation behavior
- Variables like
IDENTITY_KEYCLOAK_CREATE_REALM=falseare not recognized by Identity - The bootstrap logic appears to be hard-coded in Identity’s startup process
Next Steps
Since this is a product limitation rather than a configuration issue:
- Monitor future releases for improvements to this behavior
- Contact Camunda Support if this is blocking your deployment
- Consider filing a feature request on the Camunda roadmap if one doesn’t already exist
References
Your configuration is correct - this is simply a current limitation of the product that the Camunda team may address in future releases.