Hey everyone!

We are in the process of migrating our Keycloak deployments from 8.0.0 to the latest 18.0.0.
We are using the kcadm.sh script to run some configuration boot up scripts when starting up our Keycloak instances.

So far, the migration went pretty smooth. However we ran into an issue while setting up the default realm roles.

We have been using this command to set some roles for our realm after creating some custom roles.

/opt/keycloak/bin/kcadm.sh update realms/${REALM} --set 'defaultRoles=["offline_access", "uma_authorization", "our-custom-role" ]'

However after investigating the realm resource it seems that now it only returns and able to set a single default realm role. Some properties are omitted from the response for brevity.
{ "id": "4d4a3032-0586-4a78-8057-61ed5ebadb81", "realm": "some-realm", "failureFactor": 30, "defaultRole": { "id": "219f87dc-552e-4654-99e8-fd416e6e36f2", "name": "default-roles-admin-portal", "description": "${role_default-roles}", "composite": true, "clientRole": false, "containerId": "4d4a3032-0586-4a78-8057-61ed5ebadb81" } }

However, this can be easily still be easily set on the admin GUI of Keycloak.

Did the command changed? I haven't been able to dig up an answer regarding this.