Connecting access management with software delivery
Alien6 announces the availability of HankoShell Operator, its open-source Kubernetes operator for identity and access configuration in Keycloak. Released under Apache-2.0, the project is designed for platform, DevOps and IAM teams that want to bring these changes into their software delivery practices.
Applications evolve continuously, while their authentication clients, roles and permissions are often administered through a separate process. This separation makes changes harder to review and configurations more difficult to reproduce across environments. HankoShell Operator lets teams declare this configuration in Kubernetes and evolve it alongside the application, through changes reviewed in Git.
Adoption shaped around practical needs
The project offers three starting points: connecting an application to Keycloak, bringing an existing client under declarative management, and giving a backend or worker its own identity. Teams can begin with a specific need and gradually extend the configuration they choose to manage.
For existing clients, the transition is explicit: observe the configuration, review the adoption candidate, approve ownership, then enable management. For services, the operator delivers credentials and supports scheduled rotation; permissions remain separately defined.
An open tool for the Keycloak ecosystem
HankoShell Operator works with an existing Keycloak, including one managed by the official Keycloak operator. It relies on Keycloak for authentication and token issuance, and manages the application configuration it owns. Standalone use does not require HankoShell Hub.
By opening this component, Alien6 aims to give teams a foundation they can inspect, integrate and evolve with their own tools. The public repository welcomes feedback and contributions; the documentation describes the supported scope and qualification results.
Available today, with public hands-on learning
Version 1.0.1 is available on GitHub, with an OCI image and a Helm chart listed on Artifact Hub. HankoShell Academy offers guided browser labs, while a disposable local-cluster demonstration lets teams reproduce the three journeys.
This first generation exposes 17 resources through the experimental hanko.sh/v1alpha1 API. Managed Upgrade, Clone and DBSwitch operations remain experimental and disabled by default. Prerequisites, qualified versions and limitations are documented so teams can assess the project in their own environment.
Project resources
About Alien6
Alien6 is a consulting and software engineering studio working on architecture, intelligent systems, security and applied research. Its open-source projects make tools from that work publicly available.
Press contact