From 145e0b7057249b741130432b34f1c33f9947f6a5 Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Sat, 3 Jan 2026 14:29:28 -0300
Subject: [PATCH] keycloak: enable token exchange

---
 services/keycloak/deployment.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/services/keycloak/deployment.yaml b/services/keycloak/deployment.yaml
index 0ead0a8b..e632d7d3 100644
--- a/services/keycloak/deployment.yaml
+++ b/services/keycloak/deployment.yaml
@@ -103,6 +103,8 @@ spec:
               value: xforwarded
             - name: KC_HTTP_ENABLED
               value: "true"
+            - name: KC_FEATURES
+              value: token-exchange
             - name: KC_HTTP_MANAGEMENT_PORT
               value: "9000"
             - name: KC_HTTP_MANAGEMENT_BIND_ADDRESS